Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
File:                     LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json)
Hash identifier:          UqHA4xqQyfm+qi5g8zZQW5NoNDZQVGgo7cGdTF7UJN0=
Subject key identifier:   B3:EA:FB:71:20:DC:85:C9:F5:D5:ED:0C:4C:D2:5B:00:6A:6A:BD:36
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Certificate issuer:       /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial:       0D4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
Manifest number:          0D3D
Signing time:             Sat 28 Feb 2026 18:09:02 +0000
Manifest this update:     Sat 28 Feb 2026 18:09:01 +0000
Manifest next update:     Sat 07 Mar 2026 18:09:01 +0000
Files and hashes:         1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: mGil/K7Q4ZlKIk3sA0520t6lZkyS03KW1Nfui78cM9Q=)
                          2: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: h1zv5buc+Cn7JuifmG3cLQTCbFRzAjARZCrKCnqaFQY=)
                          3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c=)
                          4: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
                          rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
        Validity
            Not Before: Feb 28 18:09:01 2026 GMT
            Not After : Mar  7 18:09:01 2026 GMT
        Subject: CN=69a32f3e-bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:3e:c1:38:27:81:50:e3:80:41:20:af:b1:
                    39:82:95:65:23:27:10:00:49:a7:cf:f2:4c:2d:a4:
                    9c:ef:f5:05:b2:3d:09:0f:c0:90:1c:a8:d7:d7:5c:
                    86:70:1f:95:7e:e5:f4:d2:16:c0:e5:b4:73:10:86:
                    3d:22:46:7a:36:5a:b2:fc:f3:5a:a0:54:8b:44:f0:
                    69:90:d6:9d:d8:19:95:a6:30:8a:25:0d:06:41:f1:
                    22:02:bf:28:fa:21:ae:b0:e5:14:e4:c3:c0:6e:74:
                    d8:05:8e:93:56:7f:73:c5:fd:5a:6c:b4:65:be:8e:
                    61:12:03:d4:b0:02:cb:d2:7c:cd:76:23:37:c8:a6:
                    dc:05:07:2f:26:ea:5a:55:a0:c7:d3:44:cd:1b:42:
                    eb:4e:92:78:3d:2e:62:74:2a:53:19:88:c8:52:b7:
                    2f:31:58:60:de:85:72:1f:58:40:09:92:4a:dd:5f:
                    ac:4d:52:39:b3:12:6f:cf:c5:5f:8d:dd:fa:25:f4:
                    27:9c:f6:16:9c:cc:71:d5:e5:73:2d:a7:d0:9d:63:
                    a3:bd:ab:31:b4:47:fd:77:5e:5c:14:35:c1:17:87:
                    de:b9:3a:f1:5c:7f:79:d1:94:9e:03:d5:59:c3:4b:
                    6c:f7:d7:ba:06:91:37:ef:b3:35:bb:39:dd:86:ef:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:FB:71:20:DC:85:C9:F5:D5:ED:0C:4C:D2:5B:00:6A:6A:BD:36
            X509v3 Authority Key Identifier:
                keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:04:ea:30:50:9d:23:15:0f:4c:b6:9e:4a:66:c1:f9:03:
         1f:33:99:27:28:6b:d1:4b:88:43:54:63:76:1d:d7:b0:9b:0a:
         6a:55:d6:29:65:26:39:16:4f:c6:52:d1:f2:17:b4:54:04:e4:
         31:38:ac:07:1e:aa:16:11:3c:59:27:d3:72:03:09:a2:c0:30:
         0a:78:98:0c:0d:87:82:be:cc:af:09:8c:3d:7c:9a:d5:10:ee:
         c7:e6:34:dc:f2:5b:16:5d:a6:5d:98:14:99:82:d1:1e:70:ee:
         ba:27:ff:07:da:3d:c6:5a:2e:cb:14:5e:04:ef:56:db:96:cc:
         fa:f9:0e:d5:24:eb:b8:cb:53:04:8b:c0:6e:00:fd:e5:ba:5e:
         fd:a8:03:9c:43:58:b0:16:17:34:7c:d8:d2:98:b3:63:64:3b:
         60:4d:d0:cb:17:50:34:5c:65:40:27:c1:b9:5f:9b:dd:c6:6a:
         d9:11:9a:bd:ce:77:e1:34:de:cb:a6:a7:91:b4:5c:f1:c1:b0:
         e7:d5:51:89:bf:8f:3b:4d:a1:3c:1c:dd:bd:e5:50:e4:77:fb:
         f4:b7:37:59:72:0c:74:05:ad:10:c2:68:24:95:8e:c2:48:82:
         83:74:a8:4b:f8:05:54:cc:f7:37:2a:22:27:37:0b:5d:3d:7a:
         60:07:ae:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE
QUM3MTA1QUQwHhcNMjYwMjI4MTgwOTAxWhcNMjYwMzA3MTgwOTAxWjAYMRYwFAYD
VQQDDA02OWEzMmYzZS1iY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwys+wTgngVDjgEEgr7E5gpVlIycQAEmnz/JMLaSc7/UFsj0JD8CQHKjX11yG
cB+VfuX00hbA5bRzEIY9IkZ6Nlqy/PNaoFSLRPBpkNad2BmVpjCKJQ0GQfEiAr8o
+iGusOUU5MPAbnTYBY6TVn9zxf1abLRlvo5hEgPUsALL0nzNdiM3yKbcBQcvJupa
VaDH00TNG0LrTpJ4PS5idCpTGYjIUrcvMVhg3oVyH1hACZJK3V+sTVI5sxJvz8Vf
jd36JfQnnPYWnMxx1eVzLafQnWOjvasxtEf9d15cFDXBF4feuTrxXH950ZSeA9VZ
w0ts99e6BpE377M1uzndhu8QZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPq+3Eg
3IXJ9dXtDEzSWwBqar02MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx
NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3
aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMeME6jBQnSMVD0y2nkpmwfkDHzOZJyhr0UuIQ1Rjdh3XsJsKalXWKWUmORZP
xlLR8he0VATkMTisBx6qFhE8WSfTcgMJosAwCniYDA2Hgr7MrwmMPXya1RDux+Y0
3PJbFl2mXZgUmYLRHnDuuif/B9o9xlouyxReBO9W25bM+vkO1STruMtTBIvAbgD9
5bpe/agDnENYsBYXNHzY0pizY2Q7YE3QyxdQNFxlQCfBuV+b3cZq2RGavc534TTe
y6ankbRc8cGw59VRib+PO02hPBzdveVQ5Hf79Lc3WXIMdAWtEMJoJJWOwkiCg3So
S/gFVMz3NyoiJzcLXT16YAeueQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:04 2026 by rpki-client