Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File:                     l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier:          fC86t5OlYF6d+xRAQJeFX97ZlObRa2UYv1FyR5xSQNU=
Subject key identifier:   79:44:41:A0:0C:1E:C3:21:43:F9:9C:98:D6:5B:BE:AC:4B:BD:FE:16
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer:       /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number:          027F
Signing time:             Sun 27 Sep 2026 02:24:46 +0000
Manifest this update:     Sun 27 Sep 2026 02:24:46 +0000
Manifest next update:     Sun 04 Oct 2026 02:24:46 +0000
Files and hashes:         1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: Sp/6vs7QnzSGrJv+18dpcjGaJhiPrYHRm+8dMFqIMmw=)
                          2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: OiUHSUASobIiQA2wqGL1RqWQ+8k9gLvxBOEIYXiz5RM=)
                          3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: rfwEqLrDjbcvE+bR4EvFurgv5hC+mKm1jwiX/9EN/YI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
        Validity
            Not Before: Sep 27 02:24:46 2026 GMT
            Not After : Oct  4 02:24:46 2026 GMT
        Subject: CN=6ab87e6e-4780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:6f:73:9f:d1:f5:88:c0:96:40:6d:de:18:
                    c9:84:f7:14:36:91:1e:c0:79:6c:55:02:5a:b5:cd:
                    a0:72:16:8f:df:5c:c1:20:bb:a5:53:bf:ab:b7:54:
                    28:e7:0b:e9:a8:1d:4e:e3:a3:12:ad:51:0f:37:b5:
                    e9:fe:4a:0a:b6:c1:95:1b:ea:ac:74:8f:f7:73:23:
                    46:7f:22:40:ae:af:18:53:0f:48:30:2d:b3:d4:07:
                    f7:cc:ba:20:37:d3:bb:5e:d5:2b:bd:bd:22:6b:0a:
                    c0:77:39:1b:30:ea:90:c0:4e:64:99:9f:45:7a:1f:
                    9d:9d:07:95:64:9d:0c:d9:fd:71:ab:aa:81:f0:b6:
                    01:bb:fe:e8:ff:16:86:57:a1:14:be:8e:79:d6:ed:
                    c3:a5:e5:00:70:10:2a:7f:b0:be:64:e1:64:c7:81:
                    ce:02:9c:25:f0:4c:8d:cd:5b:a3:dd:fa:84:07:21:
                    2e:53:83:7a:52:5e:56:8e:93:a8:b8:29:1b:df:a2:
                    55:83:a2:6f:2f:0d:ca:e0:36:d5:51:20:26:ae:d4:
                    c9:ce:1f:41:f9:df:fc:f3:9e:6b:0b:35:a7:58:05:
                    b5:43:38:59:7e:22:c1:30:bf:48:69:82:71:14:90:
                    6d:f4:7c:42:28:71:ed:13:46:05:ed:f2:0d:eb:c4:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:41:A0:0C:1E:C3:21:43:F9:9C:98:D6:5B:BE:AC:4B:BD:FE:16
            X509v3 Authority Key Identifier:
                keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:51:69:de:22:df:01:95:96:71:d0:6c:49:ed:ef:1f:34:e4:
         e1:c7:d4:1d:15:82:ce:2b:cb:0d:0b:27:7c:1e:f5:aa:a8:a1:
         10:54:17:fb:03:60:ea:d2:d8:21:e2:de:53:65:f7:6c:92:6c:
         3b:a6:c4:a9:bb:48:24:df:6d:f6:d2:b2:bf:8a:c1:0f:23:c0:
         7c:99:46:fe:7f:47:47:41:d4:83:c5:42:7b:78:2d:c2:52:cf:
         ee:0b:24:a2:36:3a:34:cb:9c:b3:87:a9:02:cd:21:cf:40:37:
         c8:bb:35:dc:65:ec:73:82:a8:c4:02:31:ab:f2:25:8e:72:1b:
         44:b6:73:9d:27:82:ce:b4:ae:be:57:33:42:b1:b3:29:57:70:
         2b:a0:ad:18:dd:7f:13:89:bc:91:ff:02:03:47:5b:de:17:5d:
         93:30:7c:53:d0:04:99:3d:38:bd:a2:c3:39:bc:d7:85:7d:bb:
         cb:9e:2d:ac:84:d6:15:16:94:0e:de:c2:2e:37:70:78:65:79:
         44:b5:60:96:cd:c0:bb:25:0f:b7:47:38:c3:6c:74:91:bb:34:
         c2:77:79:0e:78:4f:8b:90:7c:76:f3:c2:da:9c:c2:e6:84:66:
         04:9b:44:81:b6:79:e5:40:28:b7:1e:64:39:5c:0a:50:fd:f4:
         b3:2e:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:17:08 2026 by rpki-client