Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File:                     tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier:          diwnllKfu7uEEnBZCWXeGZ+tUYfSLzY/UTKoiJAg/GY=
Subject key identifier:   B3:B8:5C:4B:36:AD:F8:01:0A:D9:63:20:20:E1:8E:AB:C5:19:F0:67
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer:       /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial:       0D13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number:          0CF2
Signing time:             Sat 28 Feb 2026 18:24:54 +0000
Manifest this update:     Sat 28 Feb 2026 18:24:54 +0000
Manifest next update:     Sat 07 Mar 2026 18:24:54 +0000
Files and hashes:         1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: bU8sBCOoL3yOIvEIHgplKSUUk1clks8gffLXlRjjmpI=)
                          2: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=)
                          3: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=)
                          4: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
        Validity
            Not Before: Feb 28 18:24:54 2026 GMT
            Not After : Mar  7 18:24:54 2026 GMT
        Subject: CN=69a332f6-4285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:c5:2b:0c:14:e0:4a:c8:f3:5a:2e:a2:a1:
                    44:63:b6:dd:c6:81:9c:e5:67:b0:51:12:3c:ce:b8:
                    6e:c2:32:7b:0c:cb:94:15:b2:e6:f2:71:7c:97:0e:
                    33:c4:24:6f:53:05:1f:c3:3f:5c:b4:9f:20:24:9d:
                    af:6c:3d:5d:72:76:24:64:1b:77:d6:0d:0b:e2:ca:
                    65:81:55:a6:46:f4:84:62:46:5f:ed:62:3e:27:fd:
                    05:5a:4d:6f:b6:20:60:08:74:73:16:82:5a:91:64:
                    92:98:94:f2:bb:d9:ff:9c:29:cd:cc:36:33:3b:eb:
                    6b:94:1b:e5:28:04:44:96:1d:04:df:98:bc:bf:72:
                    aa:7c:7b:8b:f8:4b:51:20:97:25:c7:89:ad:36:c2:
                    9f:c7:f4:d8:04:fb:f0:56:2b:18:ff:6b:83:20:33:
                    32:2d:9b:da:2a:5b:94:16:4d:78:de:87:28:21:64:
                    a6:62:9f:29:72:ce:2b:ac:d6:ea:31:5a:97:f4:2f:
                    fd:8a:a9:db:f0:db:f8:5e:17:af:8f:e4:24:a8:1d:
                    66:80:2d:9e:00:f0:04:19:f6:02:e1:57:70:96:58:
                    61:8b:e4:ae:ca:79:c9:7c:8b:99:d2:39:da:0d:ee:
                    be:34:24:29:4a:95:0d:a8:31:5f:dc:e8:f1:0b:26:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B8:5C:4B:36:AD:F8:01:0A:D9:63:20:20:E1:8E:AB:C5:19:F0:67
            X509v3 Authority Key Identifier:
                keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:36:9a:b0:73:9f:39:d4:e6:7a:8a:c8:eb:3e:f5:1d:b2:3c:
         1f:43:52:91:ab:06:ae:5b:1c:d5:68:a5:ea:34:16:1c:be:49:
         ed:f3:c6:37:e1:ec:2a:54:63:05:ca:bb:b7:f8:5f:db:70:b2:
         10:9f:65:1a:66:2c:74:f9:71:7f:55:ed:eb:6b:7d:be:f6:62:
         38:0c:80:f7:9c:2f:e4:bf:bf:99:b4:f2:5f:eb:91:4a:d7:20:
         04:ba:8a:f2:56:d4:8d:6c:69:81:9f:05:4d:d3:94:c8:d2:d4:
         a6:ac:18:f2:a2:6a:0e:da:47:af:09:23:0f:d3:88:39:7f:e6:
         f4:93:af:c8:b4:9e:c3:76:85:ec:ab:ca:38:8e:71:e0:f2:b7:
         7f:07:0f:77:52:05:82:bd:7d:f8:2f:10:cd:fb:17:56:68:97:
         c0:34:db:38:c0:5f:20:02:80:c4:01:82:81:9a:a3:3c:16:5c:
         e3:22:9e:47:56:2c:03:36:ca:db:bc:21:a9:b6:75:4a:3f:39:
         94:79:22:73:d3:b8:e0:0d:16:e1:75:1e:cb:f5:00:ca:ac:ca:
         02:e4:23:92:c6:7d:a3:2f:6b:2f:94:cd:72:59:df:f7:41:f2:
         8f:92:64:76:f8:34:a4:f2:be:1b:22:17:5a:6e:07:d4:be:9b:
         82:0e:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:07 2026 by rpki-client