Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File:                     L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier:          uWGVAk9dTrYS2jFuBNWnkbBwzQoct8U36DeaE/xvT6w=
Subject key identifier:   B3:A7:C7:F7:0C:3E:2D:9A:EA:27:A0:1A:36:60:7A:E5:0E:58:68:A6
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer:       /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number:          20
Signing time:             Wed 25 Mar 2026 08:04:04 +0000
Manifest this update:     Wed 25 Mar 2026 08:04:04 +0000
Manifest next update:     Wed 01 Apr 2026 08:04:04 +0000
Files and hashes:         1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: D1Y2RnuQqg2lWN6YKHQXP24eyKzu35VzhCKew3n4PEA=)
                          2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: BSJrDK4V2E7MvwhAcVSpnI4UVhMcWhhRV5ZmWLsrKWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
        Validity
            Not Before: Mar 25 08:04:04 2026 GMT
            Not After : Apr  1 08:04:04 2026 GMT
        Subject: CN=69c396f4-3c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:23:75:9e:6e:ac:8f:7c:58:15:84:f7:33:
                    1d:68:bb:29:2e:aa:e2:db:6d:ef:af:de:87:f2:47:
                    10:43:5b:cc:fb:ac:39:64:64:db:52:41:35:1c:80:
                    4a:e4:52:9e:22:54:7c:dd:d5:c0:2a:30:22:a7:a3:
                    27:02:ef:4e:41:d7:19:9e:94:e7:74:e9:ce:ab:94:
                    af:5d:40:c3:aa:2e:c8:14:10:68:1d:aa:07:40:61:
                    e2:53:d8:5b:9e:29:c9:58:c3:97:70:bc:4e:e5:df:
                    56:4f:f2:f1:c2:82:0d:7c:75:78:e9:1f:6e:66:9c:
                    c4:2c:b3:20:ec:40:0b:71:2c:94:0b:f2:6d:84:e2:
                    77:7d:d5:c8:fa:77:ad:cf:e2:39:47:f3:db:4f:b6:
                    95:5e:9e:2e:37:ce:45:f7:9b:17:32:20:f0:23:56:
                    a7:87:6a:e8:b4:be:5f:f9:17:a7:12:71:6e:de:b8:
                    2e:9e:e4:42:37:3c:80:a8:2f:e9:6d:38:e7:fb:1f:
                    49:10:51:50:10:79:fe:91:7d:14:01:f1:fc:40:a1:
                    93:6d:e1:55:49:c4:9b:0e:59:c7:29:7e:f7:f0:9e:
                    c8:cd:3b:07:7e:5a:2e:84:79:08:82:11:a7:a7:47:
                    1c:ba:b9:02:98:0e:b5:7f:bd:26:b4:4b:75:c1:da:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:C7:F7:0C:3E:2D:9A:EA:27:A0:1A:36:60:7A:E5:0E:58:68:A6
            X509v3 Authority Key Identifier:
                keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9f:4d:8c:25:93:89:e6:36:52:fa:bb:98:6d:8e:69:23:e1:
         32:3f:c9:8b:f6:f9:a7:52:00:cd:0c:04:20:e0:02:23:8d:b2:
         f9:19:25:5f:4f:35:80:82:b2:c4:89:fb:89:88:64:43:c3:5b:
         a1:ae:7c:96:14:c7:9e:ef:56:da:3d:ba:92:07:b8:ca:0f:63:
         89:b3:2a:64:19:06:a3:7a:13:19:b8:f9:50:1b:01:4d:16:eb:
         05:91:c3:79:23:3e:99:ab:05:45:36:ee:13:5f:e0:0a:46:ee:
         0b:b7:80:e8:b9:0e:74:da:52:dc:6a:57:46:65:2c:fd:78:d3:
         d5:ba:5d:e1:8f:95:ad:f6:7e:8c:51:d7:12:d6:dd:55:cf:75:
         3e:22:32:bb:e1:b6:42:79:be:4a:52:3e:d9:ef:35:95:d6:0e:
         7d:9e:ab:d0:47:69:5e:6e:c1:59:52:71:6b:33:c6:28:00:ae:
         b3:0b:61:3e:cc:05:30:23:73:21:0a:3f:6e:75:16:6c:ce:f7:
         07:4b:1e:3b:81:78:09:e7:ba:2c:e3:06:0a:93:35:25:e7:34:
         0e:9b:8f:9b:72:bf:a7:ee:85:72:51:b2:74:da:52:79:12:a8:
         e7:f6:65:90:7a:46:49:30:96:9f:76:40:02:fe:29:b7:22:ec:
         da:56:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:13:52 2026 by rpki-client