Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File:                     L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier:          /FxrtWha73XeRoIpGeTHSXGEVoFwQjv+nTnJuP3n9Tc=
Subject key identifier:   F3:E1:D9:47:18:F8:1A:71:51:C7:59:F1:31:4F:8E:80:1F:D2:58:06
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer:       /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number:          94
Signing time:             Sun 01 Mar 2026 08:44:10 +0000
Manifest this update:     Sun 01 Mar 2026 08:44:10 +0000
Manifest next update:     Sun 08 Mar 2026 08:44:10 +0000
Files and hashes:         1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: rMltt2K+8R8Ddfh0vfO6UbWxNbRn4xC1qfnREGEjOE4=)
                          2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xQKQ+0AuXiAWWbs12R2fQm6csAgAyzHZKauTuhqFqCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
        Validity
            Not Before: Mar  1 08:44:10 2026 GMT
            Not After : Mar  8 08:44:10 2026 GMT
        Subject: CN=69a3fc5a-f240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:79:f8:20:92:c5:ae:d7:3d:8e:22:d6:a4:
                    3c:f4:21:38:61:98:a6:7c:3a:dc:23:90:e7:cf:d5:
                    6b:9e:c8:e0:16:f5:27:3d:f1:3e:6f:31:15:c4:d9:
                    63:dd:68:31:99:6d:4d:95:f4:c6:42:0b:aa:a2:13:
                    96:e7:c9:e5:6f:ac:f0:34:a0:ff:16:1b:6e:c1:72:
                    8f:89:07:f5:2f:46:9d:70:f6:bb:5e:e9:6d:0e:a6:
                    28:d0:0c:91:42:70:c5:d8:69:ea:c0:1b:1a:36:16:
                    30:eb:22:64:44:86:f9:2e:92:52:06:94:a6:1f:60:
                    30:de:54:a9:80:6f:6e:58:23:91:3d:b1:a5:bb:a7:
                    db:fa:15:76:42:a9:36:e7:49:2a:ad:2a:2c:7c:04:
                    d9:c6:60:ce:c4:de:96:ce:d2:70:12:f2:28:91:68:
                    2a:d9:1b:5e:12:bc:ea:c2:49:b3:f8:c4:bb:71:2e:
                    86:2b:bb:ba:e8:7e:52:7c:77:e4:87:22:ab:94:58:
                    92:f2:3c:11:c5:6a:7a:40:74:81:32:4d:29:a7:df:
                    92:56:33:75:f9:95:40:59:13:0e:47:80:6e:7a:55:
                    5c:a8:ce:df:30:e0:e1:2c:5e:d0:a8:c1:91:79:3d:
                    1c:e7:f8:27:99:75:ea:de:ab:4f:3a:c9:55:c7:76:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:D9:47:18:F8:1A:71:51:C7:59:F1:31:4F:8E:80:1F:D2:58:06
            X509v3 Authority Key Identifier:
                keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:14:31:a8:77:62:f8:3a:ca:eb:c1:a7:cc:75:b3:58:9c:8f:
         4c:96:fc:76:81:56:a3:e0:a8:70:15:0a:55:63:51:57:3a:42:
         05:c4:30:ea:42:83:7c:b8:f2:5f:e2:ed:a7:fa:06:db:83:30:
         08:3d:e3:d5:b3:f1:60:35:4a:0f:fe:e4:f2:3b:ae:29:a0:b5:
         04:a6:60:7c:ad:af:91:c1:dd:ce:c0:45:30:40:46:00:55:5c:
         55:c5:a9:1c:c5:91:71:ef:bf:c1:ba:2b:8d:87:45:05:e2:e0:
         71:7b:f9:9d:44:8b:84:db:20:d8:0e:9b:f8:2a:ca:35:f4:db:
         cf:b7:5c:08:e7:62:36:46:29:b0:cc:88:44:1c:09:89:25:50:
         ab:a8:3f:f0:df:cb:15:fd:54:22:09:88:26:65:1a:31:b9:41:
         1e:fc:18:93:53:74:f7:de:21:35:e8:0a:cd:3a:4d:e2:80:4f:
         30:e3:46:a3:a8:77:84:06:3d:38:56:ad:e7:75:38:91:a6:95:
         19:da:fa:34:ab:d4:05:f7:67:51:71:a6:2f:80:82:da:20:6a:
         f9:8a:95:3e:3a:1b:5d:b7:d5:f0:3b:2d:9a:17:4e:34:19:88:
         23:89:16:8d:59:ea:c7:bd:68:e6:e2:56:d1:97:e8:25:88:1f:
         72:65:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:29 2026 by rpki-client