Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File:                     LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier:          28ph0XzH7Q4wXSw4Po/k52M6Vjkx58T71VLleC1+jcY=
Subject key identifier:   34:EB:3A:EB:32:BC:EA:89:04:C9:70:53:E9:7F:0B:20:E3:4A:C3:9B
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number:          01FE
Signing time:             Wed 25 Mar 2026 02:28:22 +0000
Manifest this update:     Wed 25 Mar 2026 02:28:21 +0000
Manifest next update:     Wed 01 Apr 2026 02:28:21 +0000
Files and hashes:         1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: 0g/y3DX7wAU3jbwYDL5CILfkiU+aK12KAoOrMM/sk1c=)
                          2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: Mar 25 02:28:21 2026 GMT
            Not After : Apr  1 02:28:21 2026 GMT
        Subject: CN=69c34846-fcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:b3:ef:3d:ac:21:89:6d:9a:fb:5c:6b:6a:
                    3d:b6:76:7e:b7:aa:81:76:68:1a:c0:e6:52:12:13:
                    59:a1:71:03:dd:32:1d:a3:4a:cf:ff:d7:96:74:5d:
                    45:6f:8f:f5:a5:e9:e9:a6:ce:15:7c:58:cc:5f:c8:
                    f4:1f:04:b2:3a:f3:e8:f0:4e:65:9e:1b:8d:7a:e7:
                    60:a5:59:3a:1a:7f:ac:e0:f2:5c:d4:a3:0c:87:81:
                    3a:93:f5:1a:d7:ce:08:f1:ef:2b:b4:be:c3:ba:3e:
                    aa:89:1c:e9:3d:c1:1a:9a:eb:44:e6:c6:34:10:b1:
                    7c:5f:da:0d:9e:b4:a8:94:85:a7:97:51:db:81:dc:
                    2b:ce:5f:ce:30:75:94:a3:f0:e5:0c:7a:ef:97:b5:
                    62:9e:30:58:7b:22:fd:db:91:df:9d:f6:1e:0c:34:
                    bf:98:5a:ee:1b:f4:63:3e:90:88:89:ae:17:0f:f7:
                    e3:49:af:55:2c:ec:c1:2a:38:21:dc:5d:8e:69:4f:
                    75:18:70:57:7c:9d:20:6a:a6:20:56:61:d2:93:40:
                    61:d2:ba:83:b0:84:e0:bc:66:45:f5:94:ba:8c:54:
                    cc:bb:c0:84:3b:f3:6e:af:38:c5:d2:a6:c3:bd:f1:
                    f3:12:60:98:2a:ba:2d:34:f4:dd:5d:38:82:c3:9c:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:3A:EB:32:BC:EA:89:04:C9:70:53:E9:7F:0B:20:E3:4A:C3:9B
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:40:24:fb:b7:08:6a:12:27:35:47:a7:86:a2:71:96:65:7f:
         71:d4:6d:42:fa:17:29:70:c9:8c:01:68:02:67:8e:7a:c3:a8:
         d5:30:07:b3:77:e1:7b:80:a6:2e:15:8c:c4:cd:c3:45:e5:18:
         54:75:e3:6b:0a:10:16:c5:d3:b7:f0:a0:23:56:67:7b:23:79:
         42:7d:c1:6d:83:52:47:21:f8:05:ae:44:e6:a3:c1:c0:81:6a:
         bf:07:2d:7d:78:b9:51:56:95:f1:96:95:52:8c:92:48:4b:c6:
         9f:c5:2c:bf:34:44:fa:56:36:1a:7c:ca:00:92:11:78:d8:d0:
         a5:80:d4:bd:ea:65:ef:8a:db:a1:c0:c0:e6:43:3e:6e:46:fa:
         a1:b7:f2:eb:a5:e1:62:87:da:ad:5c:fa:45:a2:18:68:69:f0:
         ed:03:cf:d1:da:24:6e:9f:3a:58:95:ca:ae:31:22:e2:bb:a5:
         c4:e7:23:7c:80:99:ce:b8:18:31:c9:40:0e:42:5b:08:0f:b8:
         b1:62:63:f1:d0:9d:15:ff:16:c0:ca:48:54:1b:06:cc:e0:ba:
         e9:cb:5c:43:1c:9b:2d:75:07:32:58:d1:97:31:01:ac:dc:d0:
         45:80:79:21:8f:73:95:af:3b:4a:98:12:2b:0d:47:db:8d:58:
         b4:46:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:47 2026 by rpki-client