Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File:                     L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier:          9IoPa+8khrvLa7s3anJnVYucW+8oewcHQKmPNsog3wg=
Subject key identifier:   F8:64:29:DC:E6:18:34:82:EB:99:C3:B6:C6:B7:41:76:65:F3:60:32
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer:       /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number:          14
Signing time:             Sun 01 Mar 2026 10:31:47 +0000
Manifest this update:     Sun 01 Mar 2026 10:31:46 +0000
Manifest next update:     Sun 08 Mar 2026 10:31:46 +0000
Files and hashes:         1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: D3IuSo3nbUmarMTkyP5YZlOoe9RsKauFbzMqYAe2qdY=)
                          2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: BSJrDK4V2E7MvwhAcVSpnI4UVhMcWhhRV5ZmWLsrKWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
        Validity
            Not Before: Mar  1 10:31:46 2026 GMT
            Not After : Mar  8 10:31:46 2026 GMT
        Subject: CN=69a41593-955b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:4f:3e:9a:f7:25:d3:00:b5:0e:73:f4:e0:
                    fd:b1:81:32:62:41:a4:14:59:2f:e4:8f:74:0f:7e:
                    9a:7c:a8:91:10:12:07:71:be:dc:59:7c:61:9c:cf:
                    f2:7d:2b:27:0b:82:87:a6:aa:a9:af:f6:91:d7:ec:
                    e1:ef:8b:44:6b:f6:96:18:65:ef:6f:28:cb:11:96:
                    4b:2d:07:1b:e5:cb:f4:86:6c:88:dc:0f:47:6a:6e:
                    6a:23:a2:94:20:45:60:68:1f:c8:26:83:7d:db:07:
                    06:2a:08:03:2b:67:f1:f6:0e:75:0a:2b:c0:8f:9b:
                    ed:75:43:66:29:ac:a5:2d:2b:19:c8:2f:97:3b:11:
                    86:5e:87:8a:e3:0d:34:51:d6:eb:3f:3d:65:83:71:
                    7d:2d:0a:ff:a7:90:2f:6b:6a:df:42:0d:60:71:72:
                    7d:69:3a:3a:57:1a:84:28:c3:34:c2:04:7b:43:9a:
                    09:e1:49:a0:7f:6e:c0:c4:eb:c3:a0:da:b1:3a:d6:
                    8b:ee:01:45:e6:41:c9:e1:b8:ed:b9:7d:3a:c8:aa:
                    12:ec:ff:03:1e:47:1a:92:a8:c6:66:e5:1d:c6:44:
                    43:5b:9e:e0:52:d1:ae:07:b5:66:f6:f5:21:c8:4c:
                    02:4e:75:5a:eb:75:db:79:b5:b7:57:ef:f0:d0:de:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:29:DC:E6:18:34:82:EB:99:C3:B6:C6:B7:41:76:65:F3:60:32
            X509v3 Authority Key Identifier:
                keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:0c:43:9b:b2:97:2f:16:21:eb:55:6b:aa:3d:cd:54:ad:
         18:e4:d3:e2:6a:0d:ac:50:5b:d9:19:89:35:2d:69:04:f5:59:
         5c:f3:2a:05:cb:ca:66:a2:09:ba:8f:3b:e5:05:74:46:44:e0:
         1e:28:2b:d6:c2:b7:e5:d6:b7:db:1f:28:d1:99:ac:15:e8:32:
         be:12:6d:87:03:9e:02:a4:fa:d5:96:11:b1:44:59:a8:65:c7:
         ca:4d:49:99:ab:9f:57:73:d8:c2:ae:18:26:fa:0e:1f:e8:4c:
         1d:fd:02:8d:f2:89:99:a4:cb:18:69:d9:c2:17:e6:3c:70:46:
         9f:d4:ab:f6:8c:95:eb:5d:15:12:4a:e6:f8:1d:a7:7a:4a:7d:
         5b:6f:88:a5:68:90:bb:b3:c2:81:11:9a:cd:fa:b4:94:e0:2e:
         0c:55:2b:62:12:e0:51:4a:6a:85:8f:0c:98:62:d8:c9:ee:4a:
         bb:e4:5e:5a:79:2e:b3:96:ef:48:ba:aa:da:53:c1:0b:ef:76:
         6a:cf:50:81:2a:66:c8:5d:99:6d:47:73:68:ae:ad:e8:71:05:
         ce:b9:d7:00:a7:af:e9:d5:c8:25:f1:22:41:e9:cb:e0:5b:d4:
         06:59:27:c1:80:44:5a:12:35:7f:c9:b4:44:c8:31:0c:1f:83:
         dd:cc:1b:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NURGQjExMC8GA1UEBRMoMkZBOTcxQTYzQkMyNjNBRUI0REFFQkYyMEMyRkM3MTE4
M0NBNjQ4RjAeFw0yNjAzMDExMDMxNDZaFw0yNjAzMDgxMDMxNDZaMBgxFjAUBgNV
BAMTDTY5YTQxNTkzLTk1NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXqk8+mvcl0wC1DnP04P2xgTJiQaQUWS/kj3QPfpp8qJEQEgdxvtxZfGGcz/J9
KycLgoemqqmv9pHX7OHvi0Rr9pYYZe9vKMsRlkstBxvly/SGbIjcD0dqbmojopQg
RWBoH8gmg33bBwYqCAMrZ/H2DnUKK8CPm+11Q2YprKUtKxnIL5c7EYZeh4rjDTRR
1us/PWWDcX0tCv+nkC9rat9CDWBxcn1pOjpXGoQowzTCBHtDmgnhSaB/bsDE68Og
2rE61ovuAUXmQcnhuO25fTrIqhLs/wMeRxqSqMZm5R3GRENbnuBS0a4HtWb29SHI
TAJOdVrrddt5tbdX7/DQ3uHdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+GQp3OYY
NILrmcO2xrdBdmXzYDIwHwYDVR0jBBgwFoAUL6lxpjvCY6602uvyDC/HEYPKZI8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1REZCLzQ3Rjc0REU2RkRC
RjExRjBBNUZFOENFNjY3NkY1NkJDL0w2bHhwanZDWTY2MDJ1dnlEQ19IRVlQS1pJ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTDZseHBqdkNZNjYwMnV2eURDX0hFWVBLWkk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1
REZCLzQ3Rjc0REU2RkRCRjExRjBBNUZFOENFNjY3NkY1NkJDL0w2bHhwanZDWTY2
MDJ1dnlEQ19IRVlQS1pJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBYnAxDm7KXLxYh61Vrqj3NVK0Y5NPiag2sUFvZGYk1LWkE9Vlc8yoFy8pmogm6
jzvlBXRGROAeKCvWwrfl1rfbHyjRmawV6DK+Em2HA54CpPrVlhGxRFmoZcfKTUmZ
q59Xc9jCrhgm+g4f6Ewd/QKN8omZpMsYadnCF+Y8cEaf1Kv2jJXrXRUSSub4Had6
Sn1bb4ilaJC7s8KBEZrN+rSU4C4MVStiEuBRSmqFjwyYYtjJ7kq75F5aeS6zlu9I
uqraU8EL73Zqz1CBKmbIXZltR3Norq3ocQXOudcAp6/p1cgl8SJB6cvgW9QGWSfB
gERaEjV/ybREyDEMH4PdzBud
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:21 2026 by rpki-client