Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          keWtSi6MuyK1kt++HeSLlT3IXqZKTnqo4CoEkhWXxRY=
Subject key identifier:   17:B2:51:FF:E6:BD:5F:AA:23:2B:94:47:E3:BD:EB:E2:7A:C5:A4:3D
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          06AC
Signing time:             Tue 24 Mar 2026 22:06:13 +0000
Manifest this update:     Tue 24 Mar 2026 22:06:12 +0000
Manifest next update:     Tue 31 Mar 2026 22:06:12 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: 7Py7fsjvn8D+/69aVDUsVY+OCiT4v7v3agonm+zaovc=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: afHu4buY6ctOfF9zVksvGKKUaf0i70OOaL5AQCNs+JU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Mar 24 22:06:12 2026 GMT
            Not After : Mar 31 22:06:12 2026 GMT
        Subject: CN=69c30ad4-13a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:a7:de:cd:e3:93:14:1c:b9:6c:2b:ae:28:
                    fe:53:53:be:0d:ca:7a:00:11:aa:f1:f8:8d:48:47:
                    01:18:9d:79:05:44:c1:21:86:87:b8:5b:17:11:9e:
                    eb:19:ef:8b:c4:a5:37:96:54:31:2d:00:95:5c:ed:
                    8a:be:ff:44:b2:d6:8e:d2:77:7c:e5:4c:cd:24:1e:
                    01:d6:b6:30:7e:47:45:3e:21:c1:08:2e:81:37:cb:
                    3e:7b:eb:ea:51:1a:42:95:0b:db:55:f6:f9:b8:f9:
                    f5:0b:dc:1c:8b:70:95:a9:cc:6f:ca:e6:8b:1c:ce:
                    e8:24:c5:e4:0a:ff:03:61:06:41:4d:0b:b5:f4:ca:
                    29:35:e5:1f:0e:1a:d1:c4:4b:d0:82:cb:e7:0e:73:
                    12:62:e1:5c:9d:fd:84:23:60:6d:5b:c6:61:71:6d:
                    fb:13:21:c8:71:65:50:51:19:02:0b:90:bc:82:a7:
                    a7:6d:10:7a:f3:46:69:0f:49:f4:d1:9a:af:40:ac:
                    06:30:9a:08:42:df:2c:54:a3:81:c0:2e:fc:70:35:
                    78:34:8c:6a:9a:88:42:c6:31:18:77:73:af:b0:34:
                    05:b5:e8:db:3c:8a:fa:3b:29:6f:d7:28:da:7f:1f:
                    bf:28:cd:85:f4:75:8a:15:f2:0b:11:85:06:bb:10:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B2:51:FF:E6:BD:5F:AA:23:2B:94:47:E3:BD:EB:E2:7A:C5:A4:3D
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:48:fe:69:b5:7f:ee:1b:87:e2:23:7d:a8:4f:a0:80:9c:6a:
         61:40:24:2b:ad:d2:07:2b:66:07:1e:ac:ea:f5:91:0f:ba:95:
         20:33:b6:c6:f5:1f:8b:85:70:d7:1e:fd:e9:3b:58:92:bd:77:
         c3:31:b0:40:47:fe:79:88:ba:14:04:ee:ec:03:33:7e:32:65:
         06:41:72:90:ec:ef:43:11:22:c6:f8:ab:68:8e:fe:ea:8f:06:
         83:1b:1b:d4:93:98:1f:51:17:64:c9:5a:5d:13:c2:e3:cc:ed:
         9d:c5:f8:2a:3c:0b:22:68:d6:b7:2d:4d:0e:02:a5:a8:3f:32:
         68:a0:72:0e:db:8a:0e:78:ec:b8:e5:87:31:15:7f:77:df:be:
         da:4d:2a:6e:4b:e2:ae:5a:b4:0e:8d:c0:85:9c:76:de:cf:de:
         b9:1b:2a:4a:52:55:dc:cb:4f:04:a4:d7:19:3d:21:7b:e0:d3:
         97:f4:64:9b:63:98:ac:74:3c:92:f9:de:4c:53:68:18:35:40:
         4e:06:85:6b:ee:d0:6e:74:62:67:f7:57:85:83:f9:7d:b6:fa:
         7e:8f:d3:42:c0:4e:63:cf:e2:94:c5:0e:bf:3a:da:41:82:c8:
         06:37:66:c9:ca:48:cc:78:7c:c6:76:bb:81:b7:69:f1:81:a0:
         26:75:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:30 2026 by rpki-client