Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
File:                     LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json)
Hash identifier:          QzwXHIxQlInwsHIz6fm47W61erxrIBxlt+ztGvst7UQ=
Subject key identifier:   32:72:58:E1:99:5F:24:3A:66:34:BD:03:BA:D6:0B:4E:FD:B5:4B:D2
Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
Certificate issuer:       /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
Manifest number:          011B
Signing time:             Wed 25 Mar 2026 05:07:57 +0000
Manifest this update:     Wed 25 Mar 2026 05:07:56 +0000
Manifest next update:     Wed 01 Apr 2026 05:07:56 +0000
Files and hashes:         1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: vmkbPTabatmup5B/uY3RSneVf1AQ58mbp+x0Btb6RV8=)
                          2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: hQD17pdWkHKfFuel65BmeooGPbZsbzoy4kMOI6hWhF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
                          rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
        Validity
            Not Before: Mar 25 05:07:56 2026 GMT
            Not After : Apr  1 05:07:56 2026 GMT
        Subject: CN=69c36dad-237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:a1:bc:be:ee:fb:a5:87:57:f3:ce:03:03:
                    01:7f:53:d9:a7:44:e8:9d:c8:94:0f:da:79:8b:ea:
                    e5:ca:3b:01:02:6e:25:91:49:5b:68:30:b8:a4:45:
                    a5:7c:d8:be:54:ec:38:b1:64:19:ef:13:56:45:74:
                    66:09:cf:9f:52:a9:32:16:15:b8:dc:58:20:dd:c2:
                    84:68:89:de:fc:a2:63:5d:d2:4a:66:39:bb:f7:39:
                    2e:47:98:f2:01:46:5b:95:f9:18:a0:82:dd:ff:df:
                    23:eb:96:8b:5e:83:0f:51:18:b0:4a:9e:b5:06:68:
                    05:04:8f:30:42:d6:97:f4:85:57:3b:24:2e:ca:47:
                    3d:1c:14:c1:c8:37:d8:d5:18:e1:b2:48:64:d5:02:
                    94:25:40:fc:b7:d7:41:af:ad:5d:57:6a:52:38:1c:
                    b0:40:a8:cd:a1:00:8f:2c:79:55:c6:f6:8e:ef:d1:
                    a6:d9:a5:29:8c:9c:6d:e9:9e:46:7d:f4:35:5f:57:
                    16:5c:0c:4e:2b:cd:54:e9:00:48:2f:f9:7e:fb:8c:
                    46:d9:b3:a8:99:2e:ac:4e:9d:46:6e:1e:87:d2:08:
                    2e:57:f1:c5:a1:16:d6:35:a7:18:06:a7:b0:66:6d:
                    71:f7:e4:21:4b:41:86:36:b8:17:1c:98:95:33:71:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:72:58:E1:99:5F:24:3A:66:34:BD:03:BA:D6:0B:4E:FD:B5:4B:D2
            X509v3 Authority Key Identifier:
                keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:7d:ec:e9:69:32:32:cb:20:61:52:60:f6:73:c9:bf:16:
         81:53:a1:c1:0d:50:82:3d:94:09:af:b1:93:7d:b9:e1:33:6c:
         67:d6:e2:21:5f:17:8b:b8:ac:b0:08:a7:1d:84:2a:87:9f:b9:
         3d:3d:ba:ef:4c:93:35:a2:36:1e:09:ea:22:61:f5:b8:cb:db:
         eb:c0:f7:11:df:99:74:46:b7:d8:9c:54:e9:83:89:4c:47:2c:
         d3:1b:89:ac:5e:95:26:43:e4:72:d4:2e:d8:ce:b4:4d:58:21:
         6d:37:60:28:99:da:ed:33:b5:45:d6:27:0e:b4:33:bf:09:b5:
         d8:db:0d:96:58:06:80:c3:19:5e:5f:02:bd:65:ef:ba:8d:24:
         8b:43:88:95:03:98:96:5d:71:35:8b:b3:8d:99:7a:99:00:90:
         5c:35:ad:a0:55:7b:e0:f0:8d:13:d6:d1:1d:89:d5:ed:e8:1d:
         da:42:06:44:a0:e2:7e:5c:ef:9e:20:95:4d:e6:54:8d:5e:21:
         f6:7b:56:f9:06:43:2e:03:be:87:1d:98:22:9e:2b:7f:3a:f5:
         cd:7c:1b:e0:0d:31:13:63:b8:cc:16:1e:92:28:20:56:32:cd:
         08:74:6e:e8:d7:1f:51:9f:7e:88:a2:5d:05:bd:a0:e8:41:e4:
         10:c2:3a:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5
OTAyNzBFQkYwHhcNMjYwMzI1MDUwNzU2WhcNMjYwNDAxMDUwNzU2WjAYMRYwFAYD
VQQDEw02OWMzNmRhZC0yMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqguhvL7u+6WHV/POAwMBf1PZp0TonciUD9p5i+rlyjsBAm4lkUlbaDC4pEWl
fNi+VOw4sWQZ7xNWRXRmCc+fUqkyFhW43Fgg3cKEaIne/KJjXdJKZjm79zkuR5jy
AUZblfkYoILd/98j65aLXoMPURiwSp61BmgFBI8wQtaX9IVXOyQuykc9HBTByDfY
1Rjhskhk1QKUJUD8t9dBr61dV2pSOBywQKjNoQCPLHlVxvaO79Gm2aUpjJxt6Z5G
ffQ1X1cWXAxOK81U6QBIL/l++4xG2bOomS6sTp1Gbh6H0gguV/HFoRbWNacYBqew
Zm1x9+QhS0GGNrgXHJiVM3FF1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJyWOGZ
XyQ6ZjS9A7rWC079tUvSMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5
RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz
YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4t97OlpMjLLIGFSYPZzyb8WgVOhwQ1Qgj2UCa+xk3254TNsZ9biIV8Xi7is
sAinHYQqh5+5PT2670yTNaI2HgnqImH1uMvb68D3Ed+ZdEa32JxU6YOJTEcs0xuJ
rF6VJkPkctQu2M60TVghbTdgKJna7TO1RdYnDrQzvwm12NsNllgGgMMZXl8CvWXv
uo0ki0OIlQOYll1xNYuzjZl6mQCQXDWtoFV74PCNE9bRHYnV7egd2kIGRKDiflzv
niCVTeZUjV4h9ntW+QZDLgO+hx2YIp4rfzr1zXwb4A0xE2O4zBYekiggVjLNCHRu
6NcfUZ9+iKJdBb2g6EHkEMI6pQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:31 2026 by rpki-client