Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File:                     lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier:          yK3i6OUOGPGEk2tBntiU7AF43BaoXo/9HKHooDrPmbs=
Subject key identifier:   8C:DF:83:DC:BB:63:83:B0:5C:FD:D4:91:7B:28:81:A7:86:41:2F:2E
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer:       /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number:          01AD
Signing time:             Sun 01 Mar 2026 04:51:06 +0000
Manifest this update:     Sun 01 Mar 2026 04:51:05 +0000
Manifest next update:     Sun 08 Mar 2026 04:51:05 +0000
Files and hashes:         1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: PZZpOkfF4Lt00M/+rxJSdoku+ZCQJCUvaiwMcfy6dwI=)
                          2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: /8VAf9BTeANYtiJNn6p6S309hiCqmtL9UPtJ/qbilMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
                          rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
        Validity
            Not Before: Mar  1 04:51:05 2026 GMT
            Not After : Mar  8 04:51:05 2026 GMT
        Subject: CN=69a3c5b9-1bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:e2:9d:5e:51:9a:e6:a5:8e:30:0c:5b:cb:
                    0f:86:4c:db:b4:ee:c5:6e:04:c4:7e:da:91:93:0b:
                    26:fc:8d:60:5f:02:ff:69:05:2c:fd:0e:5d:21:66:
                    d6:45:31:36:e8:9f:e8:25:07:e5:38:2a:59:23:d5:
                    59:52:ef:c3:4a:55:4a:a1:7f:9e:90:35:45:18:5d:
                    d8:5a:ca:b9:c2:17:5a:e0:f0:60:3c:fa:8c:7a:56:
                    25:a0:0c:c6:12:76:c6:e7:08:12:ca:b3:03:77:2a:
                    eb:3a:72:1e:d3:89:90:39:24:24:3e:f4:fe:ce:b6:
                    bc:e4:4e:6f:24:41:ca:2e:bc:6b:83:ae:eb:f0:2b:
                    cb:a8:c7:b4:99:ee:d0:6b:f1:43:15:8f:ab:9b:ad:
                    a7:31:98:f2:b9:8a:8d:64:75:6a:5f:86:89:2b:a6:
                    e5:1c:05:09:c7:fe:b7:52:8e:80:b2:bb:70:01:b5:
                    bb:21:1e:7c:f3:b0:28:de:4b:d8:7b:0f:0e:ef:63:
                    1d:09:b2:83:76:e5:21:2b:04:8b:71:e2:f2:44:47:
                    fd:ad:c8:ba:00:ae:0f:2a:07:6a:a0:e2:fa:e7:5a:
                    96:f5:5b:0c:9f:44:e4:e8:21:18:eb:52:92:ce:88:
                    da:5e:77:18:ea:e7:b8:8b:54:8d:d7:2e:01:82:98:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DF:83:DC:BB:63:83:B0:5C:FD:D4:91:7B:28:81:A7:86:41:2F:2E
            X509v3 Authority Key Identifier:
                keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:42:2c:ab:c4:ee:7c:e7:16:8f:65:70:58:60:75:83:e4:
         30:3f:e2:e6:1e:0e:88:3a:94:d1:f4:80:24:3c:d0:b6:9b:9e:
         03:cd:9e:9e:21:60:5e:a2:3e:3f:ec:b5:3a:91:85:15:68:24:
         dc:44:6c:0f:1f:ba:5d:9f:3d:f7:50:19:4f:9d:fb:c6:5a:19:
         44:1c:0f:fa:55:a7:3c:b5:19:bb:bc:76:c7:dd:00:15:e9:10:
         e4:d1:47:09:f7:81:1e:c4:f8:b4:c9:45:c1:f2:a4:1d:1b:e8:
         31:33:e8:ea:84:ea:2c:3f:63:77:50:42:a1:ee:0a:67:3e:39:
         e6:ea:b2:fe:61:85:c8:1c:b8:84:ac:55:c4:a2:24:8b:7d:6d:
         ec:79:39:e6:3b:f6:b1:d5:e5:26:26:1e:55:f2:ca:76:24:61:
         a4:a0:fd:ef:1a:ef:28:0e:10:fd:7b:93:79:f7:e8:9d:3b:66:
         50:78:62:c7:c8:ef:3b:6f:65:15:bb:ab:62:d9:bd:ec:c2:5d:
         06:45:50:cf:11:e5:d1:13:cb:ab:08:0c:f6:ce:66:a7:f6:ca:
         bc:c0:54:31:0b:8b:93:b3:6b:6d:ac:62:f5:57:6e:a0:08:d7:
         be:d3:75:b3:a9:a5:4d:53:d9:ce:59:7c:b5:e4:2d:b8:2d:f0:
         91:8f:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:46 2026 by rpki-client