Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File:                     lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier:          5OZb4GIsSnk1Bcg4M6yTGjfhkz9e1VuzSc8kV1RSeWE=
Subject key identifier:   EE:63:3F:0B:11:DA:AC:37:0B:4E:F9:33:DE:C5:1A:E5:F8:2B:4B:DC
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer:       /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number:          087B
Signing time:             Thu 16 Apr 2026 20:31:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:31:29 +0000
Manifest next update:     Thu 23 Apr 2026 20:31:29 +0000
Files and hashes:         1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: 5mGPMsjNnM/5nRtSJXTYdM4HitnMKb7G+6Cwgo7cy0I=)
                          2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: 3luUYeTT67yCKVIevcEjzS34/Ev6QIZEGseKDtPOfG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
                          rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
        Validity
            Not Before: Apr 16 20:31:29 2026 GMT
            Not After : Apr 23 20:31:29 2026 GMT
        Subject: CN=69e14722-dc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:d0:cf:81:d2:9a:16:43:6f:e4:c3:0d:bd:
                    1f:e5:00:d3:a4:55:80:5a:ef:bd:5f:36:96:4c:cd:
                    0b:b0:fe:be:19:09:8b:b4:fd:c1:f8:a7:63:91:3f:
                    01:11:2b:22:2f:3f:af:0c:07:68:45:6e:4c:46:2a:
                    e8:7e:07:b4:76:d8:d0:0c:87:e0:ca:92:de:f7:34:
                    3b:3a:09:2c:ac:ad:f2:65:93:4e:a4:11:12:10:b3:
                    56:7e:61:5a:a8:de:88:6c:81:fe:3f:a2:70:97:19:
                    8f:28:26:74:83:aa:0e:ef:7e:ec:36:20:ae:2c:1f:
                    ea:da:0d:dd:5d:31:5c:4e:ee:f7:7e:01:38:18:ef:
                    38:e9:15:a2:48:c3:a2:d5:de:50:c0:d4:00:99:c5:
                    1f:19:a4:71:cc:e0:d3:bd:7e:dd:a7:79:e2:f9:19:
                    ad:bb:99:3b:7d:ca:dc:1c:76:76:b6:c0:e7:f6:48:
                    90:f7:73:ee:c1:f8:5d:47:18:57:35:b0:2e:75:4a:
                    b5:06:06:50:b4:71:86:be:f1:be:5b:6c:f5:a1:7c:
                    2b:ae:4a:e4:af:29:0b:18:3e:ac:ce:ed:c3:4d:8a:
                    43:4c:97:68:a9:3c:df:fb:ec:e6:a3:49:83:e8:5b:
                    6b:44:fd:42:7e:53:25:34:bf:09:df:23:a7:a3:60:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:3F:0B:11:DA:AC:37:0B:4E:F9:33:DE:C5:1A:E5:F8:2B:4B:DC
            X509v3 Authority Key Identifier:
                keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:09:96:ac:a4:4a:bf:39:26:57:5b:9f:08:1b:8e:34:63:
         69:51:8a:4e:ca:d2:2e:44:2f:2c:f2:ca:e6:2d:7d:0a:2a:d2:
         ff:c0:78:ba:a8:9e:10:67:94:66:92:33:73:c3:35:78:fb:bd:
         0b:cb:ae:2c:ea:c1:67:8d:7e:96:2f:d3:b7:2f:4b:3d:f6:ed:
         21:4b:5a:7f:11:b7:7e:1c:77:f5:35:fc:42:d1:1a:4a:ec:07:
         49:0a:4d:38:9f:ca:cc:8d:82:56:b6:28:ba:17:d7:cf:67:30:
         54:f1:7b:87:4d:ae:e8:90:a2:67:88:77:05:00:b0:69:06:7f:
         d7:51:13:c0:4f:96:0e:f4:d2:f6:af:ef:30:5e:cf:8f:39:4e:
         5a:76:0c:99:b5:64:84:11:11:da:39:7e:61:4a:51:49:4c:e4:
         bb:ea:05:6a:65:43:1a:5c:10:b9:c4:71:34:9c:c4:f4:d7:72:
         b0:ff:60:46:48:d6:46:7f:43:1f:b2:d5:ff:73:7a:f5:96:ad:
         36:d8:d4:d8:ee:82:ad:8c:6c:61:b4:a8:f0:d0:f9:19:9c:a1:
         27:fa:53:32:24:d5:74:83:f6:27:7b:8e:61:60:e9:01:33:58:
         72:05:b8:07:c3:7d:dd:e6:fb:a7:36:ee:8c:8f:d3:3e:f7:bd:
         5d:b9:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:16 2026 by rpki-client