Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          5QFFGwK+SNEZO+oraYUQSsQKDiZHzXRM09tU1BdXTuw=
Subject key identifier:   68:EB:1D:94:AD:01:C9:FF:5D:00:1C:7A:91:F0:17:53:5B:13:26:27
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          95
Signing time:             Sun 01 Mar 2026 08:43:18 +0000
Manifest this update:     Sun 01 Mar 2026 08:43:17 +0000
Manifest next update:     Sun 08 Mar 2026 08:43:17 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: XEvnbuyQk9o6kcvOXIONRRo9RS9/T9TXQUnW263mHMc=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: 0xN1bZnq0dM0T8Sd8GlQedW1EDR0bZx7h7KAIQ4CSgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Mar  1 08:43:17 2026 GMT
            Not After : Mar  8 08:43:17 2026 GMT
        Subject: CN=69a3fc25-2b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:b2:d7:d5:d9:83:99:b5:35:8d:ee:ff:b0:
                    a6:b9:85:62:fb:20:c3:7e:18:7b:74:cb:e4:27:9f:
                    9b:de:2b:71:c4:7c:08:1a:b3:b3:bd:f0:2c:94:e8:
                    bd:66:c7:b5:e9:51:fc:2d:1c:f3:f1:18:31:e9:52:
                    f6:92:8b:82:af:13:98:7b:7e:a8:11:50:21:e1:c7:
                    fe:a1:45:c3:c8:27:42:c3:9c:84:15:19:d6:a3:9c:
                    ac:8d:7e:f9:5b:02:ff:c6:47:1d:65:9e:fe:9a:68:
                    c8:1e:d9:e0:4e:ac:98:ab:04:51:9d:fd:e2:d3:bb:
                    8e:3f:ed:24:99:e4:34:5b:6f:e0:36:75:6f:6a:3b:
                    97:a7:ad:9a:b3:ba:1b:99:b5:a5:b7:7a:6e:e7:f8:
                    c1:c2:78:00:48:82:4f:9b:b2:db:14:96:90:9a:ae:
                    62:92:4a:95:5d:3a:2a:82:c3:0d:83:95:f0:d0:24:
                    1f:d1:81:35:e6:be:d9:02:d1:f6:90:be:20:2d:2a:
                    da:16:a0:ba:2b:88:4e:95:cc:c5:98:72:cf:07:d5:
                    56:87:8f:e6:ae:42:32:2e:77:a4:c3:be:5d:d2:39:
                    75:4a:83:34:42:49:35:79:fc:98:6d:c7:f5:0a:5e:
                    0b:31:12:87:4a:72:62:41:88:b4:28:d9:c0:b6:20:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:1D:94:AD:01:C9:FF:5D:00:1C:7A:91:F0:17:53:5B:13:26:27
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:79:63:f5:0c:fc:1b:90:93:dd:f3:16:f6:fb:8f:8b:19:
         1d:d7:eb:ab:ce:ee:60:62:ee:57:46:2a:1e:65:37:1d:ae:b9:
         54:a9:83:be:1d:1e:3f:e2:8e:03:09:50:84:0b:87:b3:f4:20:
         65:05:fe:99:fb:9f:0d:3f:c3:c4:f1:4f:ea:a7:55:2b:80:34:
         16:b6:e5:44:38:50:05:60:2a:83:06:1b:de:be:5e:f3:27:7b:
         9a:01:ec:25:f3:d7:d6:7b:67:20:58:25:61:f1:3d:a6:39:7f:
         0f:8f:bb:05:a5:e3:72:ec:ca:43:41:38:60:d2:4e:cf:26:e2:
         36:12:b3:cc:87:cd:c7:f0:97:a9:dc:dd:91:f3:1c:bb:97:c4:
         42:30:37:03:fe:20:85:2e:f4:ae:0c:08:1a:7f:a3:a3:cf:21:
         84:fd:ea:6a:5f:14:a4:d8:91:5e:34:51:35:be:66:17:92:fe:
         f7:b9:11:f0:ba:18:26:33:40:e5:e6:48:53:4a:b3:ef:3b:7b:
         3a:86:b4:cb:b0:ab:1b:f7:1d:c0:ba:71:d9:d8:23:c6:63:5f:
         1d:c1:ed:c8:3b:67:dc:37:c8:fa:0b:17:1f:46:82:7f:80:05:
         a4:eb:62:31:98:8b:29:22:86:0d:fa:5e:90:60:19:82:82:23:
         3f:95:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:09 2026 by rpki-client