Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File:                     l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier:          159a0GybTnJeB9ZorA5s55nF8UWuv/BRtSgAjamyxBU=
Subject key identifier:   BD:2F:F4:DE:97:DE:EF:12:98:EA:15:39:71:37:52:02:0C:32:B9:EC
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer:       /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number:          083E
Signing time:             Mon 30 Mar 2026 20:52:14 +0000
Manifest this update:     Mon 30 Mar 2026 20:52:13 +0000
Manifest next update:     Mon 06 Apr 2026 20:52:13 +0000
Files and hashes:         1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: kKnxDyuhs4SHE+lgujHDsSGO5WK6gcVV9mobK749Z7I=)
                          2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
                          rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
        Validity
            Not Before: Mar 30 20:52:13 2026 GMT
            Not After : Apr  6 20:52:13 2026 GMT
        Subject: CN=69cae27d-3574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:ba:30:fd:5e:79:ae:14:11:77:86:ef:26:
                    24:c9:15:77:fc:20:4a:d4:27:5c:de:a9:65:37:8e:
                    11:ea:6b:91:b6:86:75:47:b8:6b:46:42:54:34:9d:
                    c9:97:22:88:75:ac:c1:a8:bd:5b:c0:b6:6c:b5:13:
                    66:25:5a:19:aa:60:1c:b5:ab:eb:66:cd:08:53:12:
                    2f:25:72:79:13:bb:67:a8:00:85:08:1a:26:ea:14:
                    29:ad:6d:5c:8f:17:8c:01:4e:20:8b:37:74:32:37:
                    66:22:52:ff:f1:b9:4c:06:8a:e9:7e:6f:85:34:21:
                    fa:61:93:b9:3b:db:89:fc:96:2c:bc:5a:b5:69:41:
                    cd:9d:3e:96:d6:3a:d6:bd:d2:6a:3a:69:03:45:1c:
                    23:1a:f3:97:08:bb:b6:5b:a1:7b:0a:fb:6e:2d:49:
                    06:a9:75:f2:36:d4:5e:2f:a3:70:5d:09:5c:9f:a2:
                    fb:dc:5a:0a:36:38:47:ca:a0:b5:04:89:ec:be:77:
                    af:ea:50:82:93:96:f3:ef:88:5a:c8:65:c6:8f:d7:
                    63:a8:b6:35:de:dc:b2:9c:94:6e:5c:a8:b4:b4:b8:
                    69:63:c3:d6:85:c0:a3:27:ca:f1:8e:80:d1:c0:08:
                    21:65:c8:8f:f2:50:54:49:40:3b:dd:fe:21:29:1f:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:F4:DE:97:DE:EF:12:98:EA:15:39:71:37:52:02:0C:32:B9:EC
            X509v3 Authority Key Identifier:
                keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:cd:63:e5:58:cc:85:b7:8d:d1:7e:29:96:23:bc:c3:8c:
         f4:a7:c5:f9:ea:13:34:84:f8:be:ff:7b:11:06:cb:60:65:2b:
         ad:26:a1:32:9b:fb:e6:96:05:01:2d:bb:b2:3a:fa:67:30:11:
         ea:11:ae:27:c8:30:bf:b8:a6:14:9e:0d:57:6b:1e:50:84:9f:
         3f:a6:6a:1b:8b:82:64:c0:11:bf:f0:97:9f:4c:7f:0c:bf:2a:
         ca:b2:c1:4e:52:42:f7:d0:67:cb:ca:fd:b0:b1:d6:2a:1e:cd:
         3b:3e:81:f8:ed:5f:4e:3a:2a:8a:86:12:43:aa:d6:d9:b9:e8:
         76:cb:33:d7:a6:d9:c8:1f:d9:d9:19:b7:e7:a8:f7:80:c3:b7:
         67:d7:99:4a:a7:0d:27:ca:a2:63:69:ea:cc:f2:7c:52:b1:7d:
         36:01:49:84:0c:bc:0a:66:03:64:ae:ed:e5:5d:f7:3d:a5:89:
         cd:9c:a6:71:11:a6:e9:2e:a7:93:c5:b6:8a:33:23:47:74:84:
         df:dc:a4:41:83:72:fd:ca:eb:56:66:34:6b:de:ef:b7:c3:4c:
         e6:68:fc:65:d1:7e:22:ea:50:99:f4:bf:21:ba:e6:bd:8a:bb:
         0d:ec:08:d7:48:2c:09:f9:af:8b:0e:a8:66:14:82:59:b4:73:
         ff:42:69:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB
OTQ0ODREQjYwHhcNMjYwMzMwMjA1MjEzWhcNMjYwNDA2MjA1MjEzWjAYMRYwFAYD
VQQDEw02OWNhZTI3ZC0zNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtma6MP1eea4UEXeG7yYkyRV3/CBK1Cdc3qllN44R6muRtoZ1R7hrRkJUNJ3J
lyKIdazBqL1bwLZstRNmJVoZqmActavrZs0IUxIvJXJ5E7tnqACFCBom6hQprW1c
jxeMAU4gizd0MjdmIlL/8blMBorpfm+FNCH6YZO5O9uJ/JYsvFq1aUHNnT6W1jrW
vdJqOmkDRRwjGvOXCLu2W6F7CvtuLUkGqXXyNtReL6NwXQlcn6L73FoKNjhHyqC1
BInsvnev6lCCk5bz74hayGXGj9djqLY13tyynJRuXKi0tLhpY8PWhcCjJ8rxjoDR
wAghZciP8lBUSUA73f4hKR+RqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0v9N6X
3u8SmOoVOXE3UgIMMrnsMB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3
OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy
NEI0al9IQllSOS1wUklUYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrjNY+VYzIW3jdF+KZYjvMOM9KfF+eoTNIT4vv97EQbLYGUrrSahMpv75pYF
AS27sjr6ZzAR6hGuJ8gwv7imFJ4NV2seUISfP6ZqG4uCZMARv/CXn0x/DL8qyrLB
TlJC99Bny8r9sLHWKh7NOz6B+O1fTjoqioYSQ6rW2bnodssz16bZyB/Z2Rm356j3
gMO3Z9eZSqcNJ8qiY2nqzPJ8UrF9NgFJhAy8CmYDZK7t5V33PaWJzZymcRGm6S6n
k8W2ijMjR3SE39ykQYNy/crrVmY0a97vt8NM5mj8ZdF+IupQmfS/IbrmvYq7DewI
10gsCfmviw6oZhSCWbRz/0JpPw==
-----END CERTIFICATE-----
Generated at Tue Mar 31 20:10:57 2026 by rpki-client