Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
File:                     leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json)
Hash identifier:          w4SIYs9PJ/5Apm9j1eh3hAizS6gOURO9dm55kIb/1tk=
Subject key identifier:   FF:00:90:08:38:5A:3E:17:33:AE:CE:35:7E:85:6A:98:56:E7:33:7C
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Certificate issuer:       /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial:       120C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
Manifest number:          11FF
Signing time:             Fri 04 Sep 2026 17:06:18 +0000
Manifest this update:     Fri 04 Sep 2026 17:06:18 +0000
Manifest next update:     Fri 11 Sep 2026 17:06:18 +0000
Files and hashes:         1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: lgr8Pd8lZWkYEwgHmr+ruOMxrT3KQ8D7+HdP+2Ir57Q=)
                          2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
                          rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4620 (0x120c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
        Validity
            Not Before: Sep  4 17:06:18 2026 GMT
            Not After : Sep 11 17:06:18 2026 GMT
        Subject: CN=6a9afa8a-214f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:27:ef:79:76:c9:ef:59:00:64:1c:0c:6a:
                    92:13:f1:29:08:eb:d6:ec:04:a6:dc:7b:86:be:c4:
                    27:9f:fb:f1:f8:4c:5a:94:38:ec:69:8e:43:57:02:
                    2e:df:43:0c:b8:cf:d3:4c:0b:97:66:c1:48:3d:c9:
                    da:a7:d3:f6:59:7a:10:70:df:19:d1:ac:84:0e:66:
                    3b:ef:81:4a:7e:05:2a:e5:b7:76:cb:4b:1f:d1:a4:
                    22:b2:37:64:ba:83:63:4c:0d:1a:87:e9:0f:6e:e7:
                    24:c6:02:f6:1c:12:65:b7:47:d4:2c:a1:e9:bd:4f:
                    4c:1b:d9:40:bc:9a:30:d8:f5:e8:36:2e:47:db:2c:
                    6e:06:2a:97:86:d0:a4:bf:2b:70:56:e8:1a:8f:87:
                    01:58:d8:3e:9e:8c:c0:2e:fa:69:c5:4e:cf:1a:13:
                    9a:10:2a:e7:1f:6b:3e:13:ae:50:ab:60:74:85:e9:
                    10:68:8d:61:47:ff:b9:29:7e:27:82:38:23:b9:99:
                    a9:d4:f5:63:4f:ea:ea:e7:3d:2f:10:0a:1f:b4:8c:
                    8c:d6:0d:13:8c:30:0f:cb:23:7e:14:de:4d:a6:30:
                    fb:bb:b4:14:4d:f1:ef:8a:61:df:87:4b:7b:93:29:
                    e0:3d:1d:a4:f6:55:b1:f2:20:f3:0c:5b:f5:d2:75:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:00:90:08:38:5A:3E:17:33:AE:CE:35:7E:85:6A:98:56:E7:33:7C
            X509v3 Authority Key Identifier:
                keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:be:84:af:5d:28:60:8f:9b:61:d5:3d:e8:43:a8:a1:47:b9:
         a5:14:fd:25:2e:cf:b5:fe:74:21:5e:05:e7:04:d8:5d:f0:a1:
         6f:a0:1e:ce:70:8a:c1:2b:5b:78:94:cf:e9:6b:45:bd:8d:26:
         ea:43:12:50:d0:d9:9b:ee:bc:ad:e4:cb:ca:9b:7c:31:8d:ff:
         2e:b4:08:fc:aa:49:8f:37:db:bd:55:37:24:32:01:ab:7e:a5:
         9f:cd:24:c7:ca:72:88:17:b9:a8:de:7a:95:6f:e4:fe:8c:93:
         bf:15:fc:13:48:06:98:1f:5f:a3:17:93:c3:af:c3:22:35:e1:
         8a:52:cf:3d:dc:0d:9a:9c:2e:31:ab:52:dd:57:33:64:1f:a2:
         b2:b5:63:94:78:e5:6f:a8:e1:94:4c:f8:ce:5f:5d:70:3c:07:
         da:41:19:9d:61:dc:d5:9e:2b:20:95:ab:62:3a:e2:56:3d:e2:
         b9:d9:4a:1e:a3:f5:55:54:99:93:31:f6:c8:1e:04:47:67:cc:
         2f:60:f7:4e:70:b1:27:97:01:d1:17:e0:a0:05:de:b7:98:ed:
         d2:5a:93:46:7f:8f:81:f1:d7:87:33:80:85:70:21:4d:d7:09:
         4f:86:46:89:85:a9:1a:b1:2e:64:08:ef:1d:20:41:59:90:05:
         77:3d:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:16:14 2026 by rpki-client