Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File:                     L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier:          xAwr8TnFIdO80BebX1wpuDn5V/5Li9d+drQwUg03CIU=
Subject key identifier:   3E:75:6A:05:46:89:51:6A:D2:24:05:29:92:B1:E2:CF:A9:3E:FF:F9
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer:       /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number:          E4
Signing time:             Sun 01 Mar 2026 07:38:02 +0000
Manifest this update:     Sun 01 Mar 2026 07:38:00 +0000
Manifest next update:     Sun 08 Mar 2026 07:38:00 +0000
Files and hashes:         1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: Z/P77i+C87Hi0HhmudiV7eCds0SVq9r+W8NVX5a+wYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
                          rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
        Validity
            Not Before: Mar  1 07:38:00 2026 GMT
            Not After : Mar  8 07:38:00 2026 GMT
        Subject: CN=69a3ecd9-04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:e8:1e:62:e3:70:73:2b:94:5a:a8:2c:0a:
                    ae:17:cb:25:5a:2e:a1:dc:ea:f0:ae:c5:3c:66:54:
                    ea:51:84:b0:84:84:bd:29:4e:bb:ef:a2:9d:52:3f:
                    18:a9:12:3b:b5:a0:24:00:82:f1:da:94:b1:9d:be:
                    97:d5:39:27:81:e9:ff:ff:49:f4:1f:41:90:ab:1a:
                    fd:a8:ac:e0:fc:31:d9:dc:49:e7:28:3c:96:32:a3:
                    a3:f0:a3:21:7b:2d:c5:e2:f6:1f:cb:d9:d4:ed:44:
                    08:89:46:05:4e:4a:5c:7e:a1:1e:1c:82:df:0f:5b:
                    dc:f1:41:60:e2:57:e5:0a:66:87:6b:fe:53:bb:f3:
                    a4:b6:49:7c:9b:ef:2a:93:e8:26:90:1b:a9:a7:10:
                    92:c9:a3:ee:b7:c8:ae:b5:7b:4b:82:8d:24:6c:b7:
                    b0:4e:3e:82:87:73:4a:e2:f0:e4:93:26:a2:a1:e8:
                    30:54:33:0b:6a:30:1e:2c:c8:79:51:01:6f:31:92:
                    78:7e:7b:1d:07:43:a2:6f:94:57:05:9d:02:9a:95:
                    b4:ae:f1:6b:13:2e:a4:b6:cb:b3:ee:9a:d8:a8:b5:
                    57:ca:3b:b7:cf:2e:e5:b8:be:d1:25:b1:76:d8:ea:
                    a9:7b:29:a6:8f:7a:17:f0:75:12:12:16:25:9d:16:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:6A:05:46:89:51:6A:D2:24:05:29:92:B1:E2:CF:A9:3E:FF:F9
            X509v3 Authority Key Identifier:
                keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:73:f8:e6:87:9d:8d:f6:1d:c8:bc:3e:68:7d:49:ee:05:
         8d:13:f6:ab:b4:b7:21:1b:32:24:96:19:e6:58:85:f4:d2:b6:
         4d:44:38:d2:e7:eb:db:6c:ca:6d:c0:0d:45:a4:ba:de:b3:9b:
         98:ee:6a:18:9a:b3:24:25:28:07:e7:b9:25:ca:69:13:b6:6f:
         91:f2:18:18:fd:a3:a8:64:d1:a8:9d:8b:05:a4:c6:c1:d1:70:
         45:e2:99:5c:43:7d:48:71:83:95:05:45:21:cb:ca:89:df:5b:
         88:6a:3d:6e:7a:3b:ad:e3:5c:fc:4d:23:9f:ee:a4:32:60:a6:
         69:b7:84:b2:70:4a:4e:aa:e1:c5:c5:d0:4c:51:a1:f8:00:f7:
         af:be:ee:91:3e:2a:b2:73:72:2f:4e:65:ac:ae:31:1d:48:08:
         48:b6:1e:93:74:87:78:78:56:2e:b7:01:e2:69:49:80:68:4e:
         56:84:60:9c:26:63:61:ef:43:77:3e:08:61:cf:51:bc:62:9f:
         51:81:97:c5:22:c4:02:a9:d8:d7:51:37:bc:56:a5:81:bb:c4:
         d9:5f:63:b3:19:03:e1:a2:15:2c:ad:cf:e5:55:b2:b2:9a:ef:
         09:34:c4:f4:e7:0a:be:91:d1:e2:5a:37:a2:ec:3d:23:a8:ac:
         3b:5a:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:46 2026 by rpki-client