Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File:                     L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier:          dZGnI5KGz1/FkggQ5xbLNmQQuYTn1EoEtZxTogHiUpM=
Subject key identifier:   90:29:40:12:24:B2:4D:F2:1C:E7:CF:E9:74:41:AC:27:7B:79:BC:B9
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer:       /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number:          AA
Signing time:             Mon 21 Sep 2026 07:07:02 +0000
Manifest this update:     Mon 21 Sep 2026 07:07:02 +0000
Manifest next update:     Mon 28 Sep 2026 07:07:02 +0000
Files and hashes:         1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: CrATahGwmF5gX9O5M31l3PkXjsKy54J/oz9v2BD2rtA=)
                          2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: +uBlVYDCPzZRUmuHurx+A+K3HLAEvtXcUCa/AfvX6ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
                          rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
        Validity
            Not Before: Sep 21 07:07:02 2026 GMT
            Not After : Sep 28 07:07:02 2026 GMT
        Subject: CN=6ab0d796-e96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:ed:a5:10:64:43:37:eb:e8:86:01:a2:4b:
                    a4:5c:8b:9b:1b:56:43:72:dd:41:18:a0:de:8d:51:
                    a4:84:db:80:33:4b:73:7d:c1:08:be:e9:2d:44:70:
                    4f:9d:f0:e1:2d:6b:b3:ea:21:f6:cc:89:f9:e1:0c:
                    5c:d7:34:ec:14:18:70:f3:3e:34:23:cb:a5:6a:1f:
                    b4:6b:21:b3:fa:a6:9e:3e:0e:0c:93:bf:24:9e:08:
                    66:3a:9a:ee:1c:69:b6:40:b9:0d:81:6e:b4:53:b6:
                    4c:e6:7d:c6:53:cf:2d:91:c3:c1:cd:a6:04:eb:1d:
                    c2:b7:a1:a9:a5:e0:06:3f:65:57:e9:7e:55:f9:8a:
                    70:cc:ea:3f:b3:74:9a:8e:ea:41:bb:91:4c:37:64:
                    2d:98:31:bc:4c:8b:ba:95:26:1b:74:10:8c:ad:fd:
                    39:06:53:8a:aa:2a:ab:db:c3:ac:64:eb:f8:27:e2:
                    1b:3e:ec:2a:c7:a5:3d:af:80:2d:d0:84:05:cd:e0:
                    ff:3d:5b:50:96:0f:01:fa:28:32:6a:4e:c1:0f:8f:
                    67:d4:3b:90:14:fb:02:8e:49:39:59:74:8e:bb:ea:
                    37:e1:71:fe:c5:6b:c2:3a:e9:56:3b:d1:50:aa:4e:
                    5c:89:25:94:ee:fa:ff:40:bd:77:eb:c1:01:3a:d6:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:40:12:24:B2:4D:F2:1C:E7:CF:E9:74:41:AC:27:7B:79:BC:B9
            X509v3 Authority Key Identifier:
                keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:11:39:c3:f9:9d:66:a7:eb:66:ed:8e:8e:3d:1e:1a:55:30:
         12:8f:65:75:1f:57:75:8a:a6:29:15:e5:ee:c5:75:39:b3:eb:
         63:92:41:e2:8a:c4:39:32:56:6a:b1:a1:e3:2e:c2:76:fa:b3:
         da:74:87:58:dc:f2:b8:f0:3a:02:cb:ca:3d:0d:cc:b4:49:de:
         d1:6d:7f:13:b4:ff:4c:05:6c:82:e4:11:e3:9b:2b:84:4d:cc:
         80:d5:8a:7d:f1:e6:03:03:8a:15:d5:2a:f9:b4:01:5d:e7:a7:
         25:6c:c3:cc:a1:ad:35:95:5d:86:15:cc:b3:8e:7f:fa:36:57:
         14:af:67:2e:f1:1d:94:cf:12:89:96:b8:3e:2d:0d:f7:d2:00:
         87:b0:31:0e:54:01:8e:4b:af:65:cf:b3:f4:c6:49:bb:70:e5:
         10:b3:1f:76:22:69:6f:4b:30:21:e9:21:e8:50:8f:0d:18:68:
         23:3a:fa:2d:eb:d8:c4:75:66:18:7d:44:21:ab:36:ce:89:41:
         a7:0f:00:72:72:b8:0e:48:b2:7e:9f:28:16:18:71:eb:24:87:
         da:fa:0f:36:26:bf:ca:08:17:49:50:a6:0d:d7:42:ea:1a:db:
         d7:e0:ac:2e:de:7e:f2:6d:b0:9d:02:79:ad:64:ac:6c:9a:05:
         63:81:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:53 2026 by rpki-client