Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File:                     LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier:          KWOmHiaMPg9AcVELBxPByjSUKHy4Oak4FPtmXt6aWCU=
Subject key identifier:   C7:56:E4:9C:4B:E9:E0:AA:B5:EB:A7:40:3B:68:00:49:D7:8B:59:12
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number:          0216
Signing time:             Mon 11 May 2026 02:53:37 +0000
Manifest this update:     Mon 11 May 2026 02:53:37 +0000
Manifest next update:     Mon 18 May 2026 02:53:37 +0000
Files and hashes:         1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: Oxsf2EiXjoEN7fJIasW6Uj8AmBEtFv6qt88OxlU4dRY=)
                          2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: May 11 02:53:37 2026 GMT
            Not After : May 18 02:53:37 2026 GMT
        Subject: CN=6a0144b1-1f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:4c:c3:a9:ac:3a:b2:7c:50:cc:4c:8e:ef:
                    8c:e1:7b:f3:04:74:86:02:43:9e:2e:8b:09:09:0a:
                    9c:f9:e0:00:d1:c0:f3:a1:26:f3:17:3b:0f:68:99:
                    b2:04:44:af:61:5d:43:dd:9b:d0:34:4f:d9:a1:cc:
                    e9:51:b1:9b:c7:5e:e0:ca:f0:f6:b3:75:64:68:27:
                    8c:9d:6e:22:5f:8d:a1:31:4c:a1:2d:9e:f7:b5:f5:
                    8e:e2:91:6d:77:0b:44:f3:33:68:43:5c:c6:92:8d:
                    b6:7e:ae:09:24:24:31:77:f8:f8:0a:70:fa:4d:e2:
                    07:27:5c:18:62:f5:6c:65:80:24:0e:07:97:07:81:
                    6f:27:cd:9c:c8:59:b9:ba:b1:32:58:ec:ba:62:dd:
                    d2:83:59:7b:57:a6:7d:9a:2f:8d:25:cc:21:59:92:
                    7a:fc:2c:31:97:79:3f:f8:61:67:53:e8:86:5f:2d:
                    87:01:ce:0d:7e:2c:93:79:37:44:da:7c:13:c5:e4:
                    14:d4:f8:37:e4:36:db:31:71:9d:02:2b:27:82:5b:
                    2e:c0:99:78:40:56:7a:f0:d1:21:30:96:79:64:46:
                    95:5a:c4:20:f4:c9:45:97:79:29:eb:0f:ce:a5:68:
                    c5:60:8f:19:de:8d:a3:f9:7f:7c:28:68:7e:b7:eb:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:E4:9C:4B:E9:E0:AA:B5:EB:A7:40:3B:68:00:49:D7:8B:59:12
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1c:b8:6d:49:4b:d2:b0:1a:00:7b:dd:47:c8:33:68:d8:d2:
         b7:aa:4e:23:5c:20:d9:3b:d1:75:77:f6:39:a4:b3:01:f4:f7:
         7e:b2:af:8d:be:d1:81:97:a6:d8:d0:f6:03:30:fc:93:ae:fc:
         a6:b7:20:b2:99:14:d9:ea:04:2b:42:d8:3d:53:62:29:75:db:
         d3:a3:c9:60:55:ed:29:01:13:c9:23:2c:94:54:78:cd:05:67:
         50:d5:2b:85:51:92:14:fd:ad:60:df:71:96:27:f2:a3:9c:00:
         6a:e0:b9:61:be:61:26:50:3a:92:51:23:37:c8:ed:2e:80:3a:
         32:24:19:23:41:99:ae:50:eb:ff:2c:61:98:c0:a1:aa:19:33:
         80:19:59:dc:3c:da:61:7e:d3:48:82:98:f5:8a:6b:4d:96:5b:
         b4:e5:29:b1:94:d0:71:ac:ef:ca:2b:e3:9b:90:1d:cf:6b:1f:
         75:27:f3:c4:a1:e8:37:64:45:96:05:7f:fc:87:d4:c4:d9:18:
         1e:9e:82:e5:1f:4e:c4:cd:a9:9e:35:4b:bc:e8:1c:85:7f:2a:
         7b:e3:af:ac:b1:b4:f4:09:1f:e8:5c:84:30:ba:73:a7:76:ea:
         1a:59:50:6a:a2:3a:5c:be:5a:7e:bd:a6:64:c6:03:c2:3c:19:
         3c:f2:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:26 2026 by rpki-client