Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File:                     l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier:          QXKCQOfjU1JS4kmYD49TqfJ7UiViVXVnGTU8KxBp6Sk=
Subject key identifier:   4F:CA:29:8A:11:D6:BD:FD:E8:3E:83:A6:84:95:A0:CF:70:E2:24:50
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer:       /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial:       08A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number:          0898
Signing time:             Tue 22 Sep 2026 20:28:57 +0000
Manifest this update:     Tue 22 Sep 2026 20:28:56 +0000
Manifest next update:     Tue 29 Sep 2026 20:28:56 +0000
Files and hashes:         1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: dStznyTCm89RMJczjlpsaglXOMRwJBhraSpcVEYK4Kw=)
                          2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
                          rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
        Validity
            Not Before: Sep 22 20:28:56 2026 GMT
            Not After : Sep 29 20:28:56 2026 GMT
        Subject: CN=6ab2e509-6b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:79:a7:7d:69:0c:99:db:df:72:5d:29:10:
                    93:09:90:33:3c:63:fa:b8:bf:ba:c9:ce:03:ca:48:
                    50:fb:cf:1f:8c:9d:a2:a7:64:42:29:1a:c3:5d:1e:
                    f1:9d:a8:a9:33:ff:7e:48:a8:3e:fd:5f:ed:9d:02:
                    cb:ee:44:62:8d:72:7f:c8:fb:30:4d:94:96:ea:7b:
                    2f:76:ad:9b:37:70:48:fb:c2:7c:ce:77:ef:6e:69:
                    51:97:f7:98:f1:55:2d:b3:5d:db:9e:c3:61:29:3b:
                    c3:c1:bf:a9:e0:e4:eb:58:b1:5c:d4:bc:2e:4e:26:
                    7f:01:6c:70:d4:53:94:ad:cc:e2:51:be:0f:85:37:
                    d7:06:07:27:6a:69:9f:41:0b:5a:c4:fe:a3:0f:95:
                    73:14:43:66:14:75:b7:a4:76:e0:3a:2b:b6:b2:b2:
                    22:b8:79:85:26:89:df:f8:53:53:87:f0:e6:27:17:
                    3b:22:b7:5a:06:75:d5:c1:de:89:d5:41:6b:23:0d:
                    7c:1f:39:c1:ea:33:c3:e9:e4:54:44:4c:24:85:68:
                    ae:f7:64:de:be:5a:12:58:03:b4:21:e6:b5:94:b9:
                    86:d5:3b:0c:53:7e:ef:24:df:b3:1d:06:23:ae:24:
                    3b:ea:da:ae:90:f3:96:da:bf:ea:0a:2e:a7:8b:e7:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CA:29:8A:11:D6:BD:FD:E8:3E:83:A6:84:95:A0:CF:70:E2:24:50
            X509v3 Authority Key Identifier:
                keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:79:4f:f4:4a:59:b7:64:4f:a6:0b:7b:f3:ac:7b:59:43:e9:
         a5:51:9d:14:8d:c0:88:2f:db:1a:8e:50:fe:ac:3d:b1:6a:c4:
         92:af:13:89:f3:e2:d3:93:76:a4:03:ea:5e:c8:40:ce:6d:ad:
         35:ab:38:f4:f5:ea:fb:6f:d9:66:7c:b0:25:4a:2c:96:7f:ae:
         f3:b2:4c:e1:e2:db:68:09:7b:a6:a7:96:40:d3:27:c5:40:0f:
         0f:42:31:51:57:b6:a9:c1:68:a0:db:11:09:4b:4a:8a:3b:43:
         3c:5d:57:06:08:35:14:c6:e1:66:34:35:96:a2:ee:65:56:9f:
         3d:19:3a:c6:68:6d:8e:73:3d:44:ed:2c:1b:db:92:15:ea:10:
         ed:0e:23:50:d9:a2:47:0b:10:08:7f:a8:68:c2:b8:b6:7f:e6:
         91:a2:45:c7:00:2c:56:d2:15:7c:80:23:e4:5b:1b:e8:20:2d:
         44:e7:97:05:4b:19:7b:e8:53:56:5e:ab:10:bc:de:31:f4:88:
         2b:c5:1c:c0:f6:59:b9:57:37:fa:6a:d9:13:e6:a7:cd:59:1c:
         0b:96:1a:d2:e9:3c:51:09:fe:66:7c:cb:ab:ad:f9:52:fe:0e:
         9e:99:54:77:da:99:c9:4b:fb:66:0e:22:f8:77:74:17:fe:89:
         15:92:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:53:56 2026 by rpki-client