Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File:                     L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier:          eA6EQmg3h/7fcWTc9leUOnpiptHCFQNqT4fMER+NIws=
Subject key identifier:   31:A0:51:BA:4C:8C:1F:5B:31:1B:97:FF:50:6A:26:F0:EB:FE:2B:8D
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer:       /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number:          013B
Signing time:             Wed 19 Aug 2026 06:09:12 +0000
Manifest this update:     Wed 19 Aug 2026 06:09:12 +0000
Manifest next update:     Wed 26 Aug 2026 06:09:12 +0000
Files and hashes:         1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: 6jKWSK+VpZ4q/Qyz8bNEfQ4UWh8ot6RG2KLiRMAWU2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
                          rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
        Validity
            Not Before: Aug 19 06:09:12 2026 GMT
            Not After : Aug 26 06:09:12 2026 GMT
        Subject: CN=6a854888-9a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:ef:45:c5:1f:15:0f:45:15:39:2a:80:72:
                    cc:86:1a:02:7a:3d:dd:69:d8:0e:85:c1:c4:07:1b:
                    7c:3c:4c:63:19:0f:86:98:45:9f:84:56:ec:1c:f7:
                    19:67:fe:6b:16:94:09:08:5e:98:bb:84:c5:f2:27:
                    8d:ec:0f:47:61:95:72:b2:c4:af:31:8c:c7:a0:bf:
                    9c:ad:08:31:2d:a9:25:61:33:48:e1:a5:c1:d6:60:
                    f2:4e:00:c3:ea:1a:16:c8:4c:c3:2b:09:71:73:3f:
                    c5:0e:4c:27:8d:91:b5:53:ef:44:ba:de:9b:04:9c:
                    d5:8d:97:fb:54:ae:95:1a:a0:36:0a:87:fa:75:59:
                    57:54:35:80:f4:ce:31:e0:8d:92:d3:20:b7:01:64:
                    e1:f7:37:27:e7:3b:d0:6a:66:db:83:67:ef:2e:3a:
                    56:b2:77:db:73:8c:0a:10:1e:f5:ae:4d:67:01:60:
                    c2:dd:1e:48:0d:db:c7:1b:a3:24:6c:61:cb:ba:b2:
                    09:d2:75:0d:8e:09:fb:15:57:2b:f9:ea:11:b9:72:
                    38:2e:02:c8:64:63:25:4d:6b:50:7b:fc:a3:87:cf:
                    32:08:d4:62:f3:30:04:b6:f6:db:3d:d2:2b:7a:c7:
                    25:e7:3b:45:54:60:4f:dd:07:46:8d:78:f9:3a:b5:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:51:BA:4C:8C:1F:5B:31:1B:97:FF:50:6A:26:F0:EB:FE:2B:8D
            X509v3 Authority Key Identifier:
                keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:60:c8:f7:57:f1:9b:2d:31:da:8c:1a:eb:1e:01:29:01:
         3b:c5:c2:3f:4f:ba:b5:5b:33:2c:46:63:0b:19:18:5f:b6:d8:
         3f:a7:5a:7c:e2:82:62:11:9f:17:20:89:d2:1a:7c:cf:82:9f:
         c7:95:57:60:ad:da:11:08:f9:8e:59:90:cc:2c:b7:09:96:eb:
         f6:19:f0:35:ed:90:96:9b:4c:f7:1b:48:c1:33:5d:cb:4b:55:
         e5:6e:5e:c8:db:78:d6:ad:bc:ce:ae:ea:19:ad:af:28:b9:49:
         ff:ba:d5:57:dc:d7:0c:d8:72:4a:ff:b2:9a:c0:d6:25:e2:0d:
         2d:ce:d5:d8:b2:79:77:1e:a8:3d:fc:4c:18:34:5e:2e:c1:77:
         aa:4c:0e:1b:64:98:9e:36:28:14:a3:8a:12:bc:b6:29:68:2a:
         ae:79:e7:fe:b2:10:4b:b1:14:15:c1:88:5f:b1:06:04:24:07:
         39:19:78:ac:eb:36:0e:ea:c3:6c:9c:22:d7:e3:21:e4:a7:1f:
         c6:36:cc:7c:03:c6:0f:02:44:8a:d5:ae:f1:20:55:6b:4f:52:
         47:40:b4:cc:25:ec:c2:e7:ce:72:09:42:0a:e3:d9:23:47:25:
         08:74:f1:50:73:07:da:d4:15:57:b0:c4:02:fc:2d:52:d8:b0:
         ab:35:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:41 2026 by rpki-client