Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File:                     lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier:          2jkqCLEpiEQ/2is3LkYLylDinVPU2eUhNpHGRACGkAs=
Subject key identifier:   8A:6A:F9:CD:B5:A9:5A:5C:B9:F7:96:77:32:5E:6C:6D:8F:22:6F:83
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer:       /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number:          061D
Signing time:             Sun 01 Mar 2026 01:23:57 +0000
Manifest this update:     Sun 01 Mar 2026 01:23:56 +0000
Manifest next update:     Sun 08 Mar 2026 01:23:56 +0000
Files and hashes:         1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: NyhDFx6weWJLH7zhK/u4eb1hd86wDH3GF6fpLmDwlnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
        Validity
            Not Before: Mar  1 01:23:56 2026 GMT
            Not After : Mar  8 01:23:56 2026 GMT
        Subject: CN=69a3952d-203c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:26:c3:41:e9:2f:a9:7f:5e:59:72:4b:27:
                    fa:2d:93:32:8a:aa:a5:86:b6:e2:58:d4:79:d6:9f:
                    8a:66:76:76:c6:e8:f0:31:4f:2c:ff:12:b6:81:14:
                    73:8c:8a:92:4f:31:9b:b3:91:e9:f8:4c:fe:5c:0f:
                    db:4b:69:22:99:03:d6:d7:e0:93:17:c6:30:ff:9a:
                    8c:53:ff:df:86:92:d2:67:1f:2b:de:ea:06:96:5e:
                    3a:8b:3c:e6:52:14:2e:12:29:60:a0:8e:66:9f:f6:
                    5f:a4:5c:69:af:09:3c:83:8b:b4:11:99:1c:e7:a0:
                    0f:bb:3e:67:60:36:6f:2e:a4:f1:4a:1b:d7:30:4d:
                    86:89:69:34:7e:f9:a5:c1:a5:57:db:78:f6:e6:05:
                    4f:e1:bc:5c:7d:48:f2:82:a8:5f:0c:23:af:15:74:
                    62:a0:d1:af:71:fa:2f:ff:d2:ec:89:90:f7:c6:1c:
                    64:b1:71:2f:aa:13:10:61:57:ba:58:c0:9d:d1:58:
                    b1:18:96:2c:ba:36:5e:d0:1f:ea:0b:3c:94:b3:01:
                    4a:6c:b5:59:d5:79:3e:28:83:ad:b9:30:a2:ca:cf:
                    29:e7:a8:51:68:b3:4d:ed:03:d9:e1:9c:6d:3c:3f:
                    ad:93:6e:d0:d6:01:2c:74:50:5a:de:4c:5b:3b:2b:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:F9:CD:B5:A9:5A:5C:B9:F7:96:77:32:5E:6C:6D:8F:22:6F:83
            X509v3 Authority Key Identifier:
                keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:65:3f:28:94:bc:17:df:ad:28:32:66:39:af:86:78:33:6b:
         72:2f:9c:8a:07:75:84:93:0f:99:78:31:44:88:7a:40:cf:69:
         3c:ed:1e:9a:b9:80:6e:24:36:cc:be:7f:97:c2:9a:d7:98:0f:
         ce:58:89:e1:82:43:3f:58:52:c0:6d:a9:ce:e8:cd:eb:39:e2:
         1a:4f:57:dc:f9:31:74:02:38:f0:c4:22:96:10:73:88:b3:50:
         35:ed:18:6d:98:a8:3d:85:46:8c:ed:e7:3a:8d:ec:95:f9:dd:
         50:dc:8e:5e:5c:96:f7:fb:8f:a0:9d:48:b7:7c:0f:48:0e:a1:
         95:eb:4e:90:3b:bb:ed:05:c5:f3:bf:d6:65:a1:c7:36:eb:cd:
         de:87:9c:e0:58:9e:16:b0:11:ad:16:60:78:c8:65:47:43:c0:
         c8:8e:ed:e5:10:f0:16:8d:4f:36:2e:13:58:77:59:61:19:30:
         28:f9:eb:fd:35:a9:7e:07:6a:b9:26:7b:e8:17:9f:4a:09:a5:
         9f:db:f8:9c:72:fb:f9:78:3b:3c:ce:b2:9c:8e:70:e6:08:16:
         b7:b8:9b:20:9d:10:0a:f9:da:b2:51:a0:e8:56:9f:ea:65:71:
         5c:41:b8:71:cf:94:61:e3:08:6d:f8:c7:0d:11:0d:7c:79:9c:
         bd:09:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:14 2026 by rpki-client