Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File:                     lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier:          AJwz127o/j2fo1xqrQ2rQFK42LXYsQ19BS5zXmWejmM=
Subject key identifier:   A2:4D:C7:52:02:70:AC:1D:A1:AD:D7:BF:DB:55:16:04:56:2A:B1:93
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer:       /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number:          0102
Signing time:             Tue 03 Mar 2026 06:17:12 +0000
Manifest this update:     Tue 03 Mar 2026 06:17:12 +0000
Manifest next update:     Tue 10 Mar 2026 06:17:12 +0000
Files and hashes:         1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: B7xbBKJeq4rCgcTbHQ4GDDow8dtbBSn2NbVFgZ6Kpd0=)
                          2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
        Validity
            Not Before: Mar  3 06:17:12 2026 GMT
            Not After : Mar 10 06:17:12 2026 GMT
        Subject: CN=69a67ce8-86a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:1a:1c:90:cb:17:a7:8a:38:11:fe:2d:a1:
                    87:ea:77:4d:d8:36:38:c1:ba:80:cc:22:ed:db:25:
                    24:16:40:f2:a1:f8:22:6a:b5:cd:3c:a6:87:bc:87:
                    47:c6:f7:21:86:ef:78:12:ef:e3:9e:99:a4:fb:a0:
                    e4:d6:8c:28:03:3d:73:d7:3d:bd:96:68:67:3f:83:
                    97:38:a8:df:22:37:45:43:d2:6d:39:c7:32:41:ad:
                    73:b4:56:41:5a:b7:ef:99:0d:0f:19:18:3e:7e:38:
                    36:aa:24:43:9a:5a:3a:d0:55:76:cb:41:e4:9e:52:
                    25:7d:d5:74:b2:50:9e:26:80:77:e0:1f:6e:45:c5:
                    bd:3f:24:a9:53:68:86:62:69:e5:57:87:ff:9a:62:
                    fa:3b:e2:c6:45:57:34:48:a5:8c:29:da:3d:32:14:
                    8d:87:ed:97:11:c4:ab:96:6d:60:1d:58:bc:c6:d5:
                    cd:66:e8:ce:de:15:f1:8e:94:7c:3e:f3:0b:58:b9:
                    3e:cd:c0:08:3a:10:69:b3:fa:db:69:25:a1:1b:7a:
                    3e:a9:b8:2d:08:92:d3:98:bb:87:6c:23:0d:ab:cd:
                    92:bc:eb:bc:03:41:0d:99:ec:c2:af:9a:73:c1:87:
                    cd:62:f8:8b:74:ce:3d:50:d6:b7:b9:dd:aa:b8:44:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4D:C7:52:02:70:AC:1D:A1:AD:D7:BF:DB:55:16:04:56:2A:B1:93
            X509v3 Authority Key Identifier:
                keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:85:45:d8:22:a0:0c:42:be:81:bc:92:0a:d7:b6:cf:bd:45:
         23:e8:e6:7e:8b:1c:f1:66:50:79:b7:13:18:ec:14:27:e5:7b:
         5a:8e:68:20:a4:a8:59:24:54:27:ed:8f:9f:a5:9c:d7:7d:bc:
         d6:8f:6e:19:4f:24:42:de:43:ae:53:53:82:07:a6:86:cd:31:
         a7:27:50:62:45:cb:93:19:30:68:0f:79:b7:9c:7e:ff:f8:4a:
         77:93:f5:08:47:1c:3d:01:87:04:a6:75:21:1d:23:4e:92:98:
         ab:8d:3f:90:30:f4:0d:2b:21:b2:95:f5:7f:cd:4a:5f:55:15:
         f2:6a:7b:5d:be:25:a0:cc:ff:6f:2b:d4:8c:25:30:0f:52:9d:
         d3:31:9c:11:e6:0b:a5:75:e8:4d:96:96:31:1a:6c:da:26:23:
         51:52:c0:41:1d:ef:02:de:3e:83:bd:fc:bb:0f:52:33:1a:27:
         15:65:05:51:51:cc:60:41:c4:bd:a3:db:ea:12:5b:0c:ff:17:
         95:f2:7d:d0:9b:f3:51:2c:d5:c5:b2:08:9b:03:8e:83:26:fb:
         20:7e:57:60:40:94:32:d3:59:ab:df:64:9e:fb:7e:50:bc:c4:
         1e:bb:99:45:78:3a:da:fe:9a:86:3f:b4:6a:04:ab:92:25:9a:
         c1:7e:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:24:09 2026 by rpki-client