Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File:                     L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier:          o9HNHAoMntGKBOlQLHyFTk/064n3wKDlWl5PJFJ37z8=
Subject key identifier:   7C:6C:2C:BB:86:FD:A1:7B:0E:C2:E6:A3:DE:E0:F3:16:D1:6D:68:D7
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0BF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number:          0BD6
Signing time:             Sun 01 Mar 2026 23:43:34 +0000
Manifest this update:     Sun 01 Mar 2026 23:43:32 +0000
Manifest next update:     Sun 08 Mar 2026 23:43:32 +0000
Files and hashes:         1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: JnQzbJrAYmIOKnTLMekL0mcA9zoB5do6LzCgXS7NWIA=)
                          2: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=)
                          3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=)
                          4: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3062 (0xbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Mar  1 23:43:32 2026 GMT
            Not After : Mar  8 23:43:32 2026 GMT
        Subject: CN=69a4cf26-b365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:d4:fa:78:a8:02:bd:09:88:4d:10:2e:a6:
                    ba:cf:a2:f1:a9:71:57:80:77:91:61:42:65:30:b5:
                    a8:72:0d:17:ba:e5:27:01:1b:f3:0b:07:67:d4:27:
                    80:fd:4f:6f:9f:6e:81:99:10:f9:d2:96:03:8d:40:
                    90:80:ff:c7:fc:a5:fb:66:c7:65:5a:06:94:96:6b:
                    cf:eb:96:02:13:e4:d0:50:8e:1e:79:c8:3e:cd:ca:
                    9d:9a:e3:3d:cb:6a:ab:15:51:4a:d0:cb:d4:5b:97:
                    05:33:3a:91:69:aa:41:d3:50:14:3b:a1:d7:9e:db:
                    3e:a7:42:6e:6d:97:8b:5e:b8:e2:5e:47:d6:cf:2e:
                    19:ac:2a:d7:dc:9f:f7:d8:ad:ca:36:8f:5b:3e:2b:
                    a4:84:71:f9:4e:24:0c:6b:de:3c:31:0a:19:3e:8a:
                    30:61:ca:0c:80:d1:28:96:2f:4f:29:a5:b1:61:ab:
                    d1:5a:2d:7a:b2:d1:a8:c4:73:65:c0:3e:6b:ab:47:
                    20:46:28:ff:00:a9:e9:df:d9:ae:93:8b:37:a3:e4:
                    dc:0e:a6:42:b7:79:07:c6:e5:c4:10:1a:f9:ee:e1:
                    e8:bb:1f:bd:44:69:f8:1e:4f:83:74:34:9f:97:66:
                    d4:3d:8b:2e:f0:a3:1b:04:82:a0:ff:3e:2f:23:88:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:2C:BB:86:FD:A1:7B:0E:C2:E6:A3:DE:E0:F3:16:D1:6D:68:D7
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:52:7c:dd:75:9d:5d:9e:83:06:0d:8f:49:f8:44:c2:a3:
         a6:37:2b:b6:32:3c:55:1f:09:af:06:42:f0:51:22:4a:c1:64:
         3b:9f:d0:e5:e1:d6:0a:87:2c:f0:3b:95:67:8b:88:e8:0d:c7:
         fc:5d:14:8f:94:f3:66:64:ee:f0:18:16:97:87:30:9e:9c:fd:
         97:3b:f1:ea:4d:6a:88:98:ee:a9:23:35:51:e7:8d:42:dc:bb:
         46:d6:82:78:76:ba:5b:b8:bb:ce:ee:3b:5b:6e:c5:26:77:f6:
         f3:46:08:7b:c1:ec:21:30:34:2f:3d:3f:78:26:4e:14:26:4c:
         fe:6d:05:ca:da:48:f2:be:3a:4b:02:03:08:c6:16:61:2f:06:
         fd:e9:68:47:f1:31:a8:d4:29:bf:c2:d4:31:77:69:12:62:13:
         a2:8d:39:c4:c9:54:db:1e:15:59:c5:52:8e:b4:e7:73:34:ee:
         2a:b0:ca:80:12:ec:ae:99:12:52:81:ed:c7:ef:bb:f6:52:d5:
         99:f6:6b:e0:4a:21:1e:98:50:2e:bc:c5:18:28:cc:20:58:a8:
         e1:44:f7:56:72:e8:4d:fe:b2:c1:ac:b8:14:5a:15:ef:38:aa:
         4d:c9:b7:75:a7:63:30:36:ce:72:39:9c:15:af:c0:d2:e7:bb:
         6f:52:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:00 2026 by rpki-client