Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          Il8aXPC16w2lBqlNXDNY0KOQbvo4QVqMSC6iij52e1c=
Subject key identifier:   3B:2B:1C:9A:38:11:A4:1A:69:3A:D0:73:91:E8:37:73:A5:06:12:A6
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          01F7
Signing time:             Sun 01 Mar 2026 03:58:42 +0000
Manifest this update:     Sun 01 Mar 2026 03:58:41 +0000
Manifest next update:     Sun 08 Mar 2026 03:58:41 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: 5pWwSrTP2Ft8VorpCVbSnB3Y29HCVAs2rAn6lSf0lxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Mar  1 03:58:41 2026 GMT
            Not After : Mar  8 03:58:41 2026 GMT
        Subject: CN=69a3b972-20ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:02:8e:79:c2:55:e2:f6:b0:d8:94:52:a7:
                    33:3c:fa:46:53:c8:c0:17:c2:41:1c:34:a0:cb:04:
                    d5:6a:40:12:19:44:82:0e:03:05:20:cf:3c:4b:6c:
                    31:21:83:b7:26:c3:99:23:09:51:22:ac:05:d6:34:
                    a0:a0:54:eb:e3:25:04:96:b4:b4:3d:08:02:67:1d:
                    00:e2:04:38:c0:8b:da:8b:8a:df:2b:2e:87:51:61:
                    35:67:7a:a6:ed:29:ef:5b:eb:61:05:1f:16:92:17:
                    6e:36:d3:ef:58:31:ba:df:cf:51:5f:10:26:64:06:
                    8f:c8:e2:ae:03:e2:1a:59:26:71:a7:57:9f:b6:81:
                    42:c1:71:ae:f9:f9:bb:c6:f1:4f:00:e5:7c:5e:28:
                    1f:55:d1:04:86:b5:fd:eb:c1:3c:49:95:ee:05:ff:
                    a9:62:76:40:a5:c4:9e:c0:d2:ed:6c:22:2f:d3:a1:
                    c1:38:6f:5c:88:ac:5c:b2:fd:ec:3c:a5:a3:c7:b9:
                    21:bc:c4:b3:de:10:d2:d1:1b:4c:a3:42:27:b3:db:
                    07:fe:14:48:5b:55:94:31:0e:02:b1:25:ad:89:c0:
                    80:e8:13:1a:53:d7:59:bf:95:53:5a:fd:70:a2:3c:
                    a2:2d:dd:ea:6a:e4:81:88:20:d6:f4:5c:f8:34:47:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:1C:9A:38:11:A4:1A:69:3A:D0:73:91:E8:37:73:A5:06:12:A6
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:10:55:bb:2d:3c:26:fc:71:d2:ac:11:9b:b3:10:b2:06:
         0f:94:b2:a2:57:13:36:0e:b0:ec:0a:7c:89:13:45:c2:31:67:
         db:cf:4e:87:14:01:d2:88:28:44:90:f8:d5:14:0d:a3:f7:2b:
         1b:71:c1:4e:85:44:d3:82:bf:84:cc:c4:4a:53:32:3d:77:48:
         84:91:c9:d1:a0:65:87:4f:8e:87:1d:df:65:86:48:7d:fc:40:
         04:3f:4e:02:16:82:b5:a6:1e:c5:b6:d6:75:aa:59:74:55:fc:
         cb:83:2d:cc:4c:55:b0:ee:ae:93:99:95:2f:a5:ee:d6:76:97:
         55:75:5a:a4:cd:29:ec:84:59:59:67:4a:98:11:11:2b:5a:a1:
         5d:33:74:4f:46:a1:38:f2:41:34:a8:22:c3:ba:a3:61:6c:f7:
         90:af:22:20:63:0a:15:5c:83:c1:81:d4:b6:bc:13:10:95:fe:
         fe:24:fa:d2:56:1c:82:6e:4f:4e:6f:9d:12:99:56:da:44:5d:
         97:da:dc:90:cf:b9:6a:ef:5a:7d:47:7a:d3:f4:b7:3c:72:e1:
         11:e4:06:d5:7a:07:02:d2:bc:68:48:69:20:d4:cb:9a:97:64:
         5a:41:7a:fa:ef:a9:c5:57:9a:aa:89:31:e5:d2:6e:0c:7a:ce:
         d4:3a:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:01 2026 by rpki-client