Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File:                     LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier:          FoxOLg+r5sMhOphrofSIoU80O9AHPrMbTIxVJLB8O1k=
Subject key identifier:   3F:2C:18:E1:29:26:02:07:87:13:3F:53:37:BC:07:85:AF:39:AF:F5
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer:       /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number:          97
Signing time:             Tue 03 Mar 2026 07:01:42 +0000
Manifest this update:     Tue 03 Mar 2026 07:01:41 +0000
Manifest next update:     Tue 10 Mar 2026 07:01:41 +0000
Files and hashes:         1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: /oF/vW0jkBcp86VoSsC1y/1cTEj0UflUgUNSUMNWVTM=)
                          2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
        Validity
            Not Before: Mar  3 07:01:41 2026 GMT
            Not After : Mar 10 07:01:41 2026 GMT
        Subject: CN=69a68756-92de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:7b:80:bf:44:94:aa:d2:34:9b:02:2e:9a:
                    ae:b5:ef:b0:17:cb:7b:b2:c8:1f:20:3f:df:29:44:
                    e8:a1:9e:e7:5b:25:16:89:5c:e9:3d:2c:aa:b5:de:
                    34:15:a1:71:42:59:fe:cb:ec:4b:8e:3b:b3:36:88:
                    e8:21:86:b8:e7:2b:97:07:a6:7f:3a:eb:e9:a6:f7:
                    a8:a9:7e:7a:5b:a7:9c:41:84:eb:88:1a:74:9b:96:
                    8c:d4:ec:66:15:39:fa:6c:d4:6b:11:be:ba:13:c6:
                    c9:fb:d9:30:b7:42:9e:36:86:c5:9b:44:70:d3:34:
                    10:75:da:f1:af:53:57:a2:10:5d:07:8e:76:5d:95:
                    d0:76:4e:7e:b7:98:96:47:8b:e9:a2:dd:f9:6c:e6:
                    67:95:87:9b:ff:3d:33:60:e1:49:e8:59:79:7d:18:
                    9c:14:3a:69:ef:78:8b:34:42:be:b0:f4:26:ef:5a:
                    1e:e7:df:24:cb:af:36:7c:cd:36:60:c3:14:84:81:
                    d0:9b:4e:f8:bd:b8:08:0a:24:8e:39:e9:62:75:1b:
                    d0:d3:f7:de:be:5c:eb:f3:ef:9d:d7:c2:ea:d6:2a:
                    75:67:7b:04:50:39:31:d5:63:91:f1:0f:a8:b5:5c:
                    60:db:a3:02:7f:81:55:bf:04:a8:74:aa:81:f1:4f:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:18:E1:29:26:02:07:87:13:3F:53:37:BC:07:85:AF:39:AF:F5
            X509v3 Authority Key Identifier:
                keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f8:73:9d:7a:4b:8c:fd:ba:bb:3e:a5:07:0a:6a:7c:9c:68:
         9e:a7:b2:84:d3:e3:78:91:ee:b4:d8:e4:29:25:70:5a:b1:33:
         a1:d3:c7:c7:77:4d:69:16:35:97:f0:26:09:c6:5b:8d:99:14:
         ed:78:4b:18:b4:ac:7f:8a:de:64:b0:4c:e9:71:31:0b:54:d1:
         d1:68:56:71:51:ec:9e:22:33:cb:5f:4d:e4:e1:36:ed:db:b0:
         38:f0:d9:44:31:c8:b9:a1:b4:68:95:c8:62:a8:5e:e9:b9:53:
         ad:6e:75:d3:47:a9:69:cc:aa:62:42:83:8f:83:3f:27:67:d1:
         fc:6d:ca:54:56:55:21:ee:53:99:64:4a:07:5b:19:c4:b2:ca:
         27:c7:ab:d9:cb:c6:32:a1:29:a9:17:fa:44:3d:61:e7:1f:6c:
         69:06:b6:b7:50:ac:fd:5d:af:d9:d8:03:7c:04:09:ff:91:c4:
         5e:c2:8c:a8:59:3b:9c:e8:e3:00:c9:18:28:bd:fc:0d:c2:16:
         18:c7:c1:ab:17:f1:c1:97:7c:20:b8:da:ca:98:ed:92:70:f2:
         cc:16:87:bc:42:9b:2e:b4:6d:e3:0b:a7:01:f2:e3:9c:fb:25:
         56:11:02:0d:53:ef:39:8f:66:68:7e:3d:47:71:f7:78:12:04:
         f9:be:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:49 2026 by rpki-client