Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          ktiFNmfow9LjisEfO+73DEEUFn/EAH0TgMEOUD7LJBw=
Subject key identifier:   5A:9B:65:72:6E:67:46:40:DC:73:8E:81:75:B7:40:1D:C6:F0:37:C7
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          D9
Signing time:             Sat 13 Jun 2026 04:06:33 +0000
Manifest this update:     Sat 13 Jun 2026 04:06:32 +0000
Manifest next update:     Sat 20 Jun 2026 04:06:32 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: tZlPxIcc6Wh2jpr/j0E2I9HG+eX4IGH3Vl9wkSdtAOA=)
                          2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: x0lQmzxaHQ2KjFQfdwH7Bd9KOXdy+vF4ix2AJe32Cio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Jun 13 04:06:32 2026 GMT
            Not After : Jun 20 04:06:32 2026 GMT
        Subject: CN=6a2cd749-7040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:5b:48:ad:3b:60:cf:4c:25:fb:f7:e4:fe:
                    29:f9:c1:75:4d:42:09:2b:c1:d2:4a:12:ec:f8:76:
                    13:1b:35:74:5d:2e:e2:0a:41:8f:0b:3b:30:2c:5e:
                    5c:d1:13:30:aa:fc:f1:2b:96:36:22:e7:e7:88:9e:
                    c8:11:80:85:ba:ff:dc:07:5a:49:40:00:7a:c1:c8:
                    06:cc:5f:35:6c:2c:77:01:33:8b:0a:95:8e:13:44:
                    57:92:aa:dc:67:e6:26:0c:0d:9c:d8:85:8d:fe:44:
                    a8:9c:c0:3d:cb:24:04:46:5c:f6:6c:f9:a2:e7:f8:
                    24:f1:75:c5:62:01:b1:d8:3d:be:00:3b:89:30:60:
                    b4:9c:e4:35:b3:53:16:97:0d:cf:5b:25:dc:35:46:
                    68:d9:71:cd:76:1e:7f:cb:81:cc:6f:46:e2:dd:ad:
                    96:f9:84:92:fa:21:31:1b:a1:f4:c2:b7:69:d2:c9:
                    1c:d9:52:9d:eb:69:5d:72:2e:20:93:e8:0d:f8:83:
                    d9:66:87:79:d0:88:21:45:1a:84:11:aa:d5:e2:74:
                    b6:48:6e:8d:7b:cf:1b:4e:7b:f1:17:42:75:88:83:
                    6d:e4:e7:eb:58:c0:1d:8f:81:62:0e:64:ec:35:4b:
                    0e:6a:85:18:1e:35:54:2c:85:79:17:1b:96:9e:e1:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9B:65:72:6E:67:46:40:DC:73:8E:81:75:B7:40:1D:C6:F0:37:C7
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:8c:13:8a:cb:a8:4e:6e:3c:26:86:1e:02:f9:a6:23:4a:
         39:eb:b4:28:bd:3b:9e:6d:31:be:bc:6b:14:d5:0d:53:12:01:
         a0:ab:69:67:69:a2:f8:54:5a:72:7d:90:86:25:95:53:08:8b:
         30:7f:21:1b:90:86:78:4a:cd:8a:e3:83:8a:fd:7a:51:04:e1:
         d6:6e:c5:22:e6:e9:9b:67:27:e2:fe:63:4d:41:ee:51:95:a3:
         7e:00:64:5e:5e:b9:db:64:2b:53:01:a9:ff:6f:f5:48:f8:3c:
         b9:c1:a4:dc:b8:48:60:5e:55:93:a5:de:58:25:35:75:2b:78:
         9b:bf:5c:e5:0c:d9:42:63:83:e8:d1:e6:cc:75:fc:a2:5e:15:
         c4:9d:8f:dd:c1:89:35:f4:ad:ba:a3:de:a7:75:7a:d0:c1:0e:
         a1:7f:6e:aa:74:04:2d:2a:96:5d:ec:df:39:db:5b:a0:f3:82:
         a5:5c:43:ce:ae:50:1b:9e:f6:c5:ee:b3:62:c7:c2:6b:7b:15:
         31:62:63:6c:66:77:7d:31:19:a7:d1:6a:25:c4:b5:d9:bf:35:
         ab:fc:95:72:c8:4d:13:5c:82:46:66:e8:e3:e0:f0:ad:4c:d8:
         dd:17:68:d7:9d:8e:38:c2:a4:f6:27:9f:58:64:e4:f3:f1:4c:
         84:90:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:22 2026 by rpki-client