Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File:                     LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier:          GsbZFLkCvLP4501Co0Wbies9aPO9rDYu7pce52GHOoY=
Subject key identifier:   2F:2F:39:69:05:C9:5E:01:0F:79:D5:7F:34:CF:04:DE:4C:7D:C3:A7
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number:          0A22
Signing time:             Mon 02 Mar 2026 02:20:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:19:59 +0000
Manifest next update:     Mon 09 Mar 2026 02:19:59 +0000
Files and hashes:         1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: 1PyjEAnXRWgZue+Ur/s/IRPu2wbuB/uNnSvckYMPG6U=)
                          2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: Mar  2 02:19:59 2026 GMT
            Not After : Mar  9 02:19:59 2026 GMT
        Subject: CN=69a4f3d0-9b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:74:2b:8f:a9:ba:ec:6b:d9:0c:00:94:ff:
                    46:42:3c:ea:71:1d:09:47:54:a3:af:8c:b8:a9:fc:
                    bb:41:5e:34:e9:53:e4:bc:ba:b3:a6:41:06:6f:ed:
                    1c:0c:6b:ca:13:34:72:6a:9c:cf:a4:86:ec:03:08:
                    28:3d:87:8b:5d:f0:51:9a:b9:d6:9b:09:ca:a2:11:
                    d1:32:d7:9e:6c:41:6d:05:5d:f0:41:8a:0d:de:f3:
                    da:17:8b:aa:ce:7f:8b:b3:ad:c4:dc:73:f3:33:4c:
                    ef:b0:e3:8f:c0:b9:4f:66:96:33:a3:60:91:95:1b:
                    ac:c9:9c:b9:d8:15:87:8e:62:09:5a:fa:d3:48:c9:
                    b5:dc:e7:24:c9:73:30:d5:8d:29:18:52:cb:f8:07:
                    f6:f4:57:69:e1:f8:00:10:26:6a:51:e2:05:06:85:
                    05:b4:09:b7:b7:88:05:78:98:64:99:37:0f:17:ca:
                    96:27:14:0d:3f:30:ed:14:4b:7a:dc:65:cf:92:99:
                    e7:b7:a7:0f:c9:aa:75:78:f1:82:8e:36:ed:fe:ca:
                    e8:b9:60:64:55:6c:40:9c:a0:44:25:1e:78:e7:3f:
                    21:6f:65:9c:a7:4e:43:c0:33:d6:68:7b:19:6a:70:
                    72:89:ca:e1:97:3b:e3:2d:af:8c:ae:29:ca:b8:47:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:39:69:05:C9:5E:01:0F:79:D5:7F:34:CF:04:DE:4C:7D:C3:A7
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:15:f0:8f:ac:06:59:da:66:be:52:f1:f5:c7:c0:42:a7:
         93:b5:6f:88:1d:28:29:96:ba:f8:55:3c:e3:a9:5b:ff:c6:87:
         3a:f2:d4:d9:c5:9d:e1:db:7e:99:4e:4e:29:15:ba:6c:d3:ce:
         57:c9:3a:ed:9a:df:d5:95:bd:82:90:77:34:15:26:91:18:26:
         17:e5:5d:74:80:3a:a8:71:34:2d:75:6b:7c:08:45:08:bb:fd:
         c7:e4:95:d2:c0:52:3a:f6:e8:d7:c3:b1:e4:9a:d4:78:1c:5b:
         c6:39:38:27:1a:27:fa:bd:5c:57:f5:34:b6:1e:c5:7e:23:85:
         af:31:90:b0:bb:88:57:01:35:9f:d6:39:29:61:2b:fb:65:82:
         a4:1b:05:e9:df:86:11:cb:70:0e:19:5f:d3:08:c0:0b:34:8e:
         b9:0e:ca:99:09:9d:c7:2a:56:d5:18:96:76:96:53:9d:d0:69:
         16:1b:47:9d:60:ed:ef:ce:5f:39:d6:4d:04:23:46:ed:d3:a8:
         10:89:84:b5:10:f8:6a:a9:81:56:c8:ae:74:c3:5c:dd:1f:01:
         64:0d:ba:46:ad:cd:cf:6c:9d:63:74:af:b7:32:21:3e:74:55:
         44:4f:6b:81:6e:39:ea:fe:c8:0e:b5:81:6a:ea:3f:a7:f9:5a:
         d6:e3:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:04 2026 by rpki-client