Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
File:                     L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json)
Hash identifier:          Sb3Af2+y3t7Jsui1BXZB/vOv6zy+1F0BJrAgL+Nkyps=
Subject key identifier:   ED:D4:8F:EC:C8:F9:4B:D2:32:F6:E1:9C:63:EF:B7:02:1F:58:0B:61
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Certificate issuer:       /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
Manifest number:          BC
Signing time:             Sun 01 Mar 2026 08:15:14 +0000
Manifest this update:     Sun 01 Mar 2026 08:15:14 +0000
Manifest next update:     Sun 08 Mar 2026 08:15:14 +0000
Files and hashes:         1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: C8ZATiNeKMKjLWkr1GzL0MjZrMbUpCZAnAM482y9pEc=)
                          2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
        Validity
            Not Before: Mar  1 08:15:14 2026 GMT
            Not After : Mar  8 08:15:14 2026 GMT
        Subject: CN=69a3f592-1e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:02:89:a0:3d:33:90:9d:38:cd:cd:0c:7e:
                    af:26:84:2b:5d:db:23:4b:1a:91:ae:f9:ff:24:ec:
                    75:08:bb:89:49:c1:f0:26:e7:14:47:60:b0:25:0c:
                    d4:2b:e8:d7:2b:94:78:b4:33:0e:e7:d2:4f:19:87:
                    a0:29:71:4e:c8:0c:e4:b9:8c:6a:f1:df:09:b5:5b:
                    57:9a:d8:c1:02:73:ec:d4:70:fa:62:73:d8:8c:fc:
                    e4:fa:73:9c:9b:8b:b0:04:63:9c:3c:f4:fd:85:ef:
                    f5:ec:c6:7f:d0:82:50:3e:77:a7:78:90:1d:0b:df:
                    5a:47:2b:c6:d6:b6:37:dd:cf:4d:f4:99:e8:ca:95:
                    0e:aa:ab:c1:14:6e:2b:9b:49:0a:76:fc:97:74:5e:
                    9b:dd:f4:ce:22:bf:eb:a8:a8:1b:dc:d2:31:0f:f2:
                    ee:0a:26:77:e1:e4:fa:b5:fe:1a:bc:2d:7b:e4:64:
                    e5:b7:19:96:13:9e:74:1a:6a:a1:75:25:4a:d0:e1:
                    41:b8:15:e6:3d:ad:46:28:50:90:6c:35:c8:b9:8d:
                    c7:4c:b9:3f:12:db:74:d0:e4:4a:34:9e:ef:25:08:
                    a6:37:02:5c:dd:4c:a8:1a:07:84:8d:62:16:60:ae:
                    37:a0:09:03:2e:a5:49:02:f1:3b:2c:b7:a8:2b:50:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:8F:EC:C8:F9:4B:D2:32:F6:E1:9C:63:EF:B7:02:1F:58:0B:61
            X509v3 Authority Key Identifier:
                keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:60:75:d7:b1:16:6e:79:a3:54:11:ee:bf:9f:54:1d:64:
         c9:99:f5:a0:53:d0:5c:37:c7:53:27:43:1a:ce:7a:cc:bd:f2:
         e2:d5:90:32:87:f1:5a:19:66:78:cc:e1:eb:20:bf:2c:a1:c3:
         fd:93:c0:c1:5a:5d:fd:77:92:0c:dd:81:2e:3d:39:58:79:3f:
         b7:41:14:79:3a:c1:16:b1:99:84:a5:c4:c3:67:31:3e:4d:31:
         63:79:4f:c0:27:74:c5:29:c2:c4:54:f8:b6:21:db:4d:3b:a4:
         8a:ec:93:ad:8d:68:a7:1a:6c:d6:e6:c1:76:73:6d:3a:67:3c:
         32:02:64:3d:89:c9:e2:d9:0f:30:d9:e1:e7:b0:d0:a3:f6:0d:
         f5:a7:3f:67:a8:58:13:23:d4:2c:f2:86:b0:73:42:7e:2d:b3:
         3d:9d:00:9e:be:39:13:fd:b9:c3:f1:ea:58:7e:ba:c4:21:fb:
         9b:e8:62:39:8e:3a:f6:fa:eb:7a:3c:be:01:32:29:56:af:9e:
         72:84:83:2a:8d:f8:ca:ef:11:03:1a:12:0e:5b:c1:a6:3c:c3:
         da:21:b4:f7:4a:be:83:44:dd:4e:83:f2:d7:95:a0:c7:4a:c4:
         23:9f:28:6b:6f:8d:ed:dc:ec:d3:cc:7e:6f:e0:de:0c:7c:4e:
         9b:84:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:30 2026 by rpki-client