Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File:                     LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier:          hOeYWou2JrXwXdqLFscWhxB2Ry583+SQIo9nKhrUmWk=
Subject key identifier:   5E:3D:1C:AD:63:63:FF:06:D9:68:56:04:1C:4E:4C:39:1B:42:59:B6
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer:       /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number:          0121
Signing time:             Sun 01 Mar 2026 06:42:21 +0000
Manifest this update:     Sun 01 Mar 2026 06:42:20 +0000
Manifest next update:     Sun 08 Mar 2026 06:42:20 +0000
Files and hashes:         1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: J5jXQPzKuEUx3QlYU/iNX4OyehNX0Pz+wQrLg5WMTxk=)
                          2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
        Validity
            Not Before: Mar  1 06:42:20 2026 GMT
            Not After : Mar  8 06:42:20 2026 GMT
        Subject: CN=69a3dfcd-cf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:a5:9c:84:ec:c2:f4:c5:0f:fa:75:4b:04:
                    bd:14:04:4e:52:17:91:9c:44:04:c3:3d:ec:78:aa:
                    d6:71:81:00:db:a6:27:a5:a3:e8:34:3d:0f:83:b4:
                    a5:ea:e5:62:f4:4f:e2:a8:f3:d4:16:9a:72:ef:27:
                    4e:b1:a5:ed:d2:91:25:5f:8a:4d:04:15:c5:d0:6f:
                    a4:2a:40:2c:c7:06:40:51:6d:f4:33:be:55:34:35:
                    eb:50:45:ea:89:cd:e5:1e:3d:e8:42:ed:4d:ba:7f:
                    e5:d9:c8:80:05:12:88:ed:be:75:b5:c9:73:57:f9:
                    06:a1:97:34:97:10:80:9b:71:55:79:46:cc:4a:55:
                    b2:13:4d:1d:a9:52:12:32:d7:12:52:7e:a7:6c:49:
                    15:5e:66:36:a6:32:e9:c7:5e:4d:87:19:54:1c:d4:
                    6e:c3:97:e1:ac:da:2b:c3:13:a3:49:2b:00:d1:0f:
                    b4:d7:93:af:7f:b9:b1:da:77:88:cb:32:29:60:92:
                    78:7a:39:c1:51:9d:31:71:15:9f:79:a5:f4:ba:11:
                    cb:04:e0:5f:21:b8:6e:6c:09:d5:39:14:5b:48:0c:
                    18:b6:df:bc:da:33:de:1a:c0:13:59:1b:35:10:5e:
                    78:f1:f3:c8:0e:28:1f:03:34:fe:67:df:13:11:07:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:1C:AD:63:63:FF:06:D9:68:56:04:1C:4E:4C:39:1B:42:59:B6
            X509v3 Authority Key Identifier:
                keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:70:f8:50:08:94:90:32:b0:31:65:01:aa:e0:45:24:5f:b3:
         56:78:f1:1a:82:5f:40:72:d8:52:12:7a:04:97:76:7e:d8:36:
         be:94:db:e0:8f:d2:2a:18:02:89:2f:c8:2b:25:fe:76:a8:06:
         16:3c:73:3f:d0:b2:17:ed:53:d3:27:bf:55:46:f3:6d:63:a2:
         d8:ae:e6:47:46:e1:6a:a4:75:99:ce:f5:4f:bd:25:f1:6d:fd:
         63:84:4b:9d:9d:a6:2e:69:ab:d1:23:96:17:65:08:ab:86:bd:
         f0:c3:db:74:95:05:db:d3:92:bc:83:62:d6:60:24:d9:35:a8:
         fa:1d:38:5b:9a:8d:33:6c:ac:84:ea:73:7f:66:4b:51:ca:dd:
         80:6e:fb:03:63:d8:55:47:10:dc:78:eb:7d:3c:44:b1:26:2e:
         4e:80:c4:a9:bc:7d:16:e7:84:78:a1:d7:30:ca:cb:e3:2b:98:
         db:0b:88:36:eb:08:03:e9:bf:1e:42:41:5b:c7:e1:01:c6:a4:
         3e:08:a3:a0:82:34:49:be:c2:38:76:a2:9d:81:f5:1d:16:8d:
         f3:f9:e9:f5:f4:c4:06:6c:b0:cd:ab:7f:88:f4:91:71:fc:d4:
         cb:3d:14:18:3b:5c:d1:e6:7a:a7:49:40:20:04:f1:b5:28:8e:
         49:d4:da:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD
NjlERDVDQ0MwHhcNMjYwMzAxMDY0MjIwWhcNMjYwMzA4MDY0MjIwWjAYMRYwFAYD
VQQDEw02OWEzZGZjZC1jZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvV2lnITswvTFD/p1SwS9FAROUheRnEQEwz3seKrWcYEA26YnpaPoND0Pg7Sl
6uVi9E/iqPPUFppy7ydOsaXt0pElX4pNBBXF0G+kKkAsxwZAUW30M75VNDXrUEXq
ic3lHj3oQu1Nun/l2ciABRKI7b51tclzV/kGoZc0lxCAm3FVeUbMSlWyE00dqVIS
MtcSUn6nbEkVXmY2pjLpx15NhxlUHNRuw5fhrNorwxOjSSsA0Q+015Ovf7mx2neI
yzIpYJJ4ejnBUZ0xcRWfeaX0uhHLBOBfIbhubAnVORRbSAwYtt+82jPeGsATWRs1
EF548fPIDigfAzT+Z98TEQdohQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF49HK1j
Y/8G2WhWBBxOTDkbQlm2MB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC
OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2Nk
SWRxUUJZTHo3SWZHbmRYTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZnD4UAiUkDKwMWUBquBFJF+zVnjxGoJfQHLYUhJ6BJd2ftg2vpTb4I/SKhgC
iS/IKyX+dqgGFjxzP9CyF+1T0ye/VUbzbWOi2K7mR0bhaqR1mc71T70l8W39Y4RL
nZ2mLmmr0SOWF2UIq4a98MPbdJUF29OSvINi1mAk2TWo+h04W5qNM2yshOpzf2ZL
UcrdgG77A2PYVUcQ3HjrfTxEsSYuToDEqbx9FueEeKHXMMrL4yuY2wuINusIA+m/
HkJBW8fhAcakPgijoII0Sb7COHainYH1HRaN8/np9fTEBmywzat/iPSRcfzUyz0U
GDtc0eZ6p0lAIATxtSiOSdTaaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:36 2026 by rpki-client