Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
File:                     LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json)
Hash identifier:          yXdqIhJexC9ALxkC43VgQn75+mZc8g6NxeQkaGExk/Q=
Subject key identifier:   FD:FC:6F:DC:8E:1C:7E:C0:B0:A7:77:53:71:72:C6:58:FC:85:04:90
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
Manifest number:          0A4A
Signing time:             Fri 12 Jun 2026 19:44:51 +0000
Manifest this update:     Fri 12 Jun 2026 19:44:51 +0000
Manifest next update:     Fri 19 Jun 2026 19:44:51 +0000
Files and hashes:         1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: U8QcKFcaEc7uPd/SH1vZLfgsJhFs2eY9MLt0NAAJyB0=)
                          2: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: axE8boHX8yd5f+z+47p5pFgyCJbzp0ULGAKyGmC4lXA=)
                          3: 87818166020D11EF916F0D65C4F9AE02.roa (hash: ornbPFQGfx6/yfJwqQC5E8pEyY5xP+J6SQ5GeX/1iXA=)
                          4: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: I522j1UP6rkopIfKtloa9IQO+dyn5kwps6ThFrAaJLs=)
                          5: 76A97C669D2C11F0AB031860C4F9AE02.roa (hash: 8KlVgmZAX4O385wf8K4L0jF1lqlsm5dBNZwyT+vaC2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660 (0xa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Jun 12 19:44:51 2026 GMT
            Not After : Jun 19 19:44:51 2026 GMT
        Subject: CN=6a2c61b3-bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:cf:0b:03:5b:ed:ea:f2:9d:19:77:f4:63:
                    1b:91:6c:c4:37:42:b6:a7:9d:70:bc:a1:4a:b6:0d:
                    19:23:5a:8e:06:98:af:3d:98:c4:c4:8d:b6:1f:90:
                    65:41:15:a4:90:43:70:dc:89:5c:9c:5d:f4:aa:a9:
                    47:ca:c1:e5:35:44:d9:c9:4d:aa:0b:00:1c:c4:b2:
                    39:c0:91:86:3b:28:61:3e:48:48:5e:4e:85:6b:9d:
                    bd:53:9d:58:81:1b:4d:98:e0:14:bd:90:09:9e:81:
                    0f:4a:9d:2a:f3:1f:5b:03:33:42:57:f3:27:a2:85:
                    ca:8b:09:e6:52:c6:94:ae:e5:54:0e:ff:eb:76:f5:
                    18:26:89:da:4b:68:53:9e:ac:f3:ec:af:fd:de:c3:
                    40:70:7c:0e:33:4f:a1:72:5f:97:4d:82:b0:2c:b1:
                    be:14:64:33:4a:f1:e1:fa:18:da:29:a3:6c:58:71:
                    48:83:77:55:cb:d0:5e:f8:af:4e:1d:93:a1:c2:0e:
                    70:75:b8:0c:c7:f4:ce:60:79:a9:a1:91:ff:47:cd:
                    60:3b:80:ff:3d:39:4f:0d:34:e7:d5:4a:10:e0:f7:
                    53:73:df:c8:4a:ab:bb:c7:81:5a:75:56:53:97:8a:
                    46:7e:22:56:76:80:c0:6f:8b:f0:2d:2b:93:a9:05:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:6F:DC:8E:1C:7E:C0:B0:A7:77:53:71:72:C6:58:FC:85:04:90
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:a9:77:41:ac:d6:89:49:d0:b7:b6:f4:30:97:4e:70:84:
         a2:ac:e6:ec:f6:10:8d:30:18:fd:e3:53:be:85:24:a9:e6:7f:
         a8:fd:b7:de:a6:8b:c0:7d:f4:30:af:fa:3c:28:36:5b:15:bf:
         5f:8b:48:01:48:97:ba:f4:28:f8:f4:d8:7d:07:c8:08:1d:09:
         60:42:cc:82:ee:64:84:ad:53:b8:8a:e4:c6:76:ea:d6:f1:28:
         4a:11:4a:cd:a2:a4:4f:12:77:a4:e0:c6:9b:cf:fe:9f:bb:ca:
         d1:93:4f:2b:8d:1f:fe:c3:02:e1:5d:93:14:f1:44:a4:3c:8c:
         07:8f:1d:ca:38:34:8d:e2:4c:6a:3d:b3:2c:1e:ed:cb:66:25:
         90:af:68:3d:2e:17:00:cb:69:a0:09:12:30:f0:5d:7d:d7:ce:
         79:79:c3:4f:e5:45:a5:96:4c:33:2e:3f:20:d8:e8:30:8f:d2:
         4f:57:aa:e7:b0:04:61:92:cc:5a:09:ce:74:b6:dc:84:0f:0a:
         51:60:cb:89:21:9c:3a:d3:7f:ac:a5:5c:53:17:6c:40:55:13:
         ab:09:29:ef:2f:1f:d9:24:90:42:08:51:1d:b9:be:52:f0:94:
         c3:41:c4:6b:28:69:bc:b5:12:f4:2b:b9:80:79:ae:df:6c:71:
         71:5f:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:00 2026 by rpki-client