Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
File:                     L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json)
Hash identifier:          LiuXSeEh9pyWaqqHub0srQ2RuEGrWtd5HVtli09XJ0w=
Subject key identifier:   AB:A7:87:F8:AC:58:86:77:FE:52:7C:C1:65:6E:9D:55:3E:6F:B3:73
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Certificate issuer:       /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial:       088F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
Manifest number:          0883
Signing time:             Sat 28 Feb 2026 20:56:11 +0000
Manifest this update:     Sat 28 Feb 2026 20:56:10 +0000
Manifest next update:     Sat 07 Mar 2026 20:56:10 +0000
Files and hashes:         1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: ejzGa305GRdh837SwVY0NIqln1tmgm714Ew7TNVXG9E=)
                          2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
                          rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
        Validity
            Not Before: Feb 28 20:56:10 2026 GMT
            Not After : Mar  7 20:56:10 2026 GMT
        Subject: CN=69a3566a-65ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:24:09:30:90:cb:d6:50:53:04:2c:a5:80:
                    a9:98:b9:03:d0:3d:e0:a9:79:6f:8b:58:d7:69:cd:
                    d4:43:ad:c4:b5:29:04:50:a2:bb:f1:c0:c8:35:2f:
                    de:1f:34:25:94:c4:5f:cc:24:a1:d0:9c:c5:f1:00:
                    b4:40:62:d6:b2:16:75:cb:d1:d9:4b:5a:a4:e0:cb:
                    ed:bd:f2:ad:4c:4d:40:69:17:d9:52:37:47:0d:7b:
                    37:c2:e6:25:10:2a:be:ca:b5:c8:9f:36:cb:57:62:
                    6c:d4:a8:64:07:cd:a3:28:aa:39:5e:02:77:1c:90:
                    7e:fd:f4:e8:6b:00:73:47:4a:a9:65:fc:b4:9f:6e:
                    76:26:4c:b4:35:e4:2c:03:95:34:3a:47:72:83:41:
                    2f:4f:e5:b9:72:fc:07:07:93:07:a2:a8:83:ca:4a:
                    f4:bc:50:6d:0e:0a:12:63:e3:cb:6d:f2:0d:21:1f:
                    30:38:54:6b:5a:7a:60:6a:48:83:cd:46:60:c4:85:
                    df:12:00:51:c0:b9:e0:ea:89:6c:62:6c:30:5d:91:
                    a2:fe:b9:6c:52:06:3f:37:e3:01:b7:4d:58:62:0c:
                    15:34:01:51:af:49:60:9d:ca:75:ab:6b:f4:6c:a2:
                    ae:33:16:c0:56:92:ff:06:9c:b9:34:22:1d:a7:31:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:87:F8:AC:58:86:77:FE:52:7C:C1:65:6E:9D:55:3E:6F:B3:73
            X509v3 Authority Key Identifier:
                keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:55:81:43:3a:e1:a2:de:92:26:72:49:71:20:be:87:51:1e:
         53:c4:cb:2a:d8:85:14:63:8f:06:8f:27:fb:68:d9:79:6c:27:
         da:34:39:83:4b:50:88:fa:d4:ca:18:e5:82:3c:7a:c9:02:af:
         63:9e:53:22:2e:c2:57:a1:da:32:2b:1d:44:22:d7:61:32:96:
         d3:58:a1:63:bb:1d:c1:58:c1:1d:7c:6e:f5:cf:45:08:3a:ef:
         53:48:b3:f2:a0:e7:54:05:2c:b0:9a:e2:bb:72:d2:60:6c:3d:
         81:7f:ea:22:74:3b:4c:b2:85:f6:73:83:b0:b3:2c:e4:bb:a6:
         a5:e4:6e:34:0d:f8:92:29:73:79:87:8d:b7:88:51:e0:df:64:
         2f:db:99:c6:30:c0:c8:86:06:ab:10:73:a1:f5:2f:a3:ba:cc:
         af:72:36:1d:e9:96:d0:d7:27:ad:1f:7a:35:9e:8f:74:b4:19:
         4f:b6:79:3b:37:33:7a:29:fb:9f:db:49:b2:19:fa:20:78:d2:
         c8:10:4f:99:7a:f6:c7:93:a8:0a:c1:70:66:b1:ae:13:24:cd:
         c1:be:c9:a5:33:80:0a:f4:9f:58:7c:73:f2:b2:62:fa:f6:d4:
         d1:86:86:a8:f8:25:0b:8f:06:5b:00:ad:cf:4e:60:3c:68:cd:
         68:93:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:59 2026 by rpki-client