Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          RRsILtxPWpnV1rEEOqROz6LCSM6PWMe60zf5mOEaoEk=
Subject key identifier:   86:A0:55:6C:34:0D:80:56:41:FB:7E:7B:77:B6:F8:F6:B3:C1:2E:C4
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0CCF
Signing time:             Sat 28 Mar 2026 18:18:17 +0000
Manifest this update:     Sat 28 Mar 2026 18:18:17 +0000
Manifest next update:     Sat 04 Apr 2026 18:18:17 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: Zqum2g3USDgAa2A155fYpXbjPQw52W5g6ljn9FJvqQs=)
                          2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=)
                          3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 18:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: Mar 28 18:18:17 2026 GMT
            Not After : Apr  4 18:18:17 2026 GMT
        Subject: CN=69c81b69-e512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:3d:84:95:03:58:d1:51:fe:cb:72:d2:0d:
                    bb:fc:5c:8f:6c:af:7d:06:fa:08:ff:98:86:ac:40:
                    bf:0b:85:1b:2f:0c:86:19:c7:33:99:53:0a:e7:eb:
                    8a:f2:e6:58:22:30:df:84:31:8d:f9:58:9d:8a:92:
                    04:91:db:dc:f7:6d:f5:53:65:46:c1:13:c8:86:25:
                    28:58:8b:5c:2c:5b:86:24:7f:53:d8:b4:62:52:da:
                    f0:be:1f:92:ac:23:fd:cb:61:3d:2d:75:50:bc:41:
                    28:a3:d2:19:04:2e:97:bc:ec:5d:8c:a1:8d:79:24:
                    9b:dc:8d:b5:b8:92:48:97:c4:a0:2d:cd:13:bb:ff:
                    3f:c1:a5:42:0c:c5:91:e3:bb:ad:71:42:fb:91:9a:
                    2a:0c:00:1f:4a:59:41:50:23:c7:31:ba:02:5b:86:
                    51:49:bd:d7:0d:32:5a:cb:93:eb:7b:91:02:8d:e9:
                    84:2d:7c:a4:94:d2:79:e6:94:fc:65:a4:35:3a:10:
                    10:a4:e5:14:1d:62:1a:09:05:98:7a:aa:23:a5:52:
                    8a:75:3a:2c:e9:3d:88:d0:4e:d3:c6:1a:19:10:bb:
                    d7:6d:d4:3b:26:de:8e:7a:71:0f:89:8c:f5:af:08:
                    d0:b9:0c:61:2a:cf:28:eb:9a:2c:d9:0f:be:8f:ff:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:55:6C:34:0D:80:56:41:FB:7E:7B:77:B6:F8:F6:B3:C1:2E:C4
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:bd:47:15:e5:21:51:3f:b0:f6:66:d0:0f:4f:6b:2f:28:
         3c:97:40:33:50:02:11:36:f7:eb:7d:f9:ee:59:a0:c1:9c:97:
         f7:5f:53:b0:56:f6:20:f5:83:52:d4:3b:a9:e9:e1:e9:a7:79:
         59:78:6e:38:42:85:de:11:d6:9b:da:f7:20:42:ce:2a:3e:8d:
         77:57:b2:54:4d:e1:b3:56:c9:1c:c7:29:8c:82:6d:44:b5:8f:
         96:45:b0:5e:db:89:15:de:34:9f:1a:9a:da:5e:36:b1:75:87:
         e3:f2:cb:2c:48:b2:7e:b0:c1:cf:f5:67:72:74:5f:4a:1b:67:
         80:2f:74:a7:ee:65:f1:0b:6e:f1:c7:92:ef:bf:6b:99:73:f5:
         84:f7:fa:78:32:05:1f:69:8b:da:3f:8d:5e:a3:4d:8a:fc:3c:
         4f:a4:be:43:eb:6d:65:1b:25:5c:53:09:83:cf:26:7f:35:f1:
         e8:c9:5d:25:06:26:3d:55:6c:3e:de:67:34:d1:22:3b:86:13:
         fa:2c:2b:74:3b:5e:ea:77:5f:ef:28:f7:86:34:61:82:a0:4d:
         62:ec:87:75:2e:a6:01:42:b0:59:1e:6b:04:20:25:26:9f:6b:
         f1:bf:9b:60:e5:49:2e:fc:63:a3:eb:b2:d2:1c:9c:6c:d6:ec:
         17:58:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:43:12 2026 by rpki-client