Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          OhIh0jxY2zV5o8+NTiPk9N5bQah7IXzGGA1DCgB79Ok=
Subject key identifier:   7D:6A:7B:6E:12:A1:62:B0:02:92:C5:82:83:9C:1E:71:3F:CD:36:A3
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          CB
Signing time:             Sat 13 Jun 2026 06:53:37 +0000
Manifest this update:     Sat 13 Jun 2026 06:53:37 +0000
Manifest next update:     Sat 20 Jun 2026 06:53:37 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: xMVi+3BFWpw0MQUnrdZtTBdu7eMFalqAfZvsdVkgTj0=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Jun 13 06:53:37 2026 GMT
            Not After : Jun 20 06:53:37 2026 GMT
        Subject: CN=6a2cfe71-c62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:41:fe:0a:22:62:38:c0:ad:a4:9f:2d:e1:
                    5c:d1:f0:ad:ac:7c:ca:be:d5:12:9e:41:6c:19:da:
                    c9:ef:c1:2a:bb:1b:f0:60:bc:22:b5:d2:ec:b2:a0:
                    7d:1c:79:0b:7f:20:46:c0:5a:58:1d:61:77:1f:55:
                    e9:0a:f9:0f:b8:0f:0e:3f:4b:de:ac:ba:d4:15:40:
                    1d:ec:1a:cb:9c:c8:f0:58:09:13:0c:57:e0:02:5f:
                    9e:a6:c9:e4:a1:15:97:61:68:01:09:4c:71:30:b5:
                    06:cf:fd:64:13:a1:d4:5e:72:61:6c:cb:ae:af:e2:
                    70:a4:b9:b7:75:5e:4b:08:e6:01:38:78:f4:18:5d:
                    2c:27:a3:cc:78:cf:bd:b7:7e:28:0e:d7:b7:e6:f6:
                    59:20:1f:fc:18:05:72:da:63:2c:02:cc:ef:d4:c7:
                    ab:4c:f3:1d:97:ed:ce:3f:ee:e9:c5:46:80:fc:a5:
                    f5:e0:25:78:1a:2d:28:c9:f4:21:73:17:33:f5:6a:
                    ff:0d:76:33:6c:7a:48:7d:2d:e3:65:d6:fd:04:71:
                    88:7b:8c:8f:27:66:59:f7:2b:99:45:ce:c2:67:77:
                    1f:60:35:98:66:0c:77:64:cf:b3:1e:c9:79:f7:54:
                    9f:73:0f:04:fa:d5:c6:eb:88:6f:b6:6c:84:dc:45:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6A:7B:6E:12:A1:62:B0:02:92:C5:82:83:9C:1E:71:3F:CD:36:A3
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:fa:ff:95:92:37:5a:bd:b2:70:05:79:8f:8e:e4:c5:8c:
         cd:08:af:24:32:a0:cc:55:a4:14:2a:57:c7:85:1e:be:2d:a0:
         d0:eb:c9:4d:d3:88:35:c5:ed:b0:5a:6d:99:f0:b3:c4:45:ab:
         29:43:cc:30:bc:62:29:1d:41:69:7b:e2:a3:d1:67:19:f4:ad:
         24:e6:75:49:9b:f8:4a:5a:e5:94:19:c2:85:10:62:47:c8:19:
         95:27:5e:cc:84:f3:b2:56:0f:3d:cc:b6:96:ea:da:2d:ef:78:
         d3:94:4e:86:ec:48:b3:15:b9:f5:6b:94:43:7c:47:f4:9e:e6:
         e1:8b:09:3c:cc:e4:e8:c1:c3:1f:5a:83:cd:30:7a:a3:55:93:
         55:2a:39:b7:69:2f:a6:7f:99:b0:c5:9c:b1:5a:6a:0c:6e:cf:
         14:a4:29:f1:4d:2e:0c:43:8f:6c:6b:15:6f:7d:a8:10:86:87:
         ab:7d:e6:50:6d:e5:0d:04:d0:d4:79:21:8f:fd:8c:73:c1:0d:
         3e:b7:ba:b9:b1:6a:c2:79:f5:ce:c4:86:f6:e2:18:a4:c4:7f:
         47:e2:1b:57:25:c2:69:67:a8:9e:c7:64:97:f8:37:ae:29:c9:
         d2:a0:c7:8f:bc:e1:13:b9:54:d5:07:3b:71:7a:ab:cb:1f:79:
         bc:98:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:55 2026 by rpki-client