Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File:                     LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier:          V/3RuWyFqtxWigCmcMCaEoeXKZrKTtAQChe5SSXtVfw=
Subject key identifier:   10:36:88:F9:08:30:80:D5:A2:6E:D1:27:D3:5B:47:22:F5:E6:9C:0E
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer:       /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number:          0137
Signing time:             Sun 01 Mar 2026 06:24:41 +0000
Manifest this update:     Sun 01 Mar 2026 06:24:41 +0000
Manifest next update:     Sun 08 Mar 2026 06:24:41 +0000
Files and hashes:         1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 0uI8qYvjScXAt2/+NzHqamNBsnnPRROsGfH2XDXTZ2Y=)
                          2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=)
                          3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
        Validity
            Not Before: Mar  1 06:24:41 2026 GMT
            Not After : Mar  8 06:24:41 2026 GMT
        Subject: CN=69a3dba9-7026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:87:97:a5:07:29:7c:be:67:47:a8:bc:6f:
                    5c:71:46:d3:60:df:5b:93:c1:8f:6a:dd:84:1d:9f:
                    40:b4:75:29:e2:27:8b:ef:ad:c6:5c:87:71:bf:18:
                    3d:a0:11:e6:db:c6:cc:88:67:80:79:97:31:6f:09:
                    5b:f1:bf:e6:10:5e:5d:fa:8b:66:a9:59:a7:ba:de:
                    4d:9d:67:82:c1:f8:91:4c:ab:d6:60:f6:0d:83:05:
                    f3:2d:a1:89:84:f2:56:ce:1b:94:ae:1c:14:27:ed:
                    ac:2e:be:2d:94:87:3b:4e:f7:a3:b9:e4:34:41:cd:
                    2b:12:e5:76:b2:4c:94:91:44:a0:bd:47:53:4b:f1:
                    1b:7a:c2:44:77:a5:01:a9:2c:b0:b7:e6:4c:c5:1b:
                    1c:a5:dc:ff:0a:5a:1d:1e:2e:fa:87:2b:1f:5b:1b:
                    2f:ef:fe:0e:f2:f9:c3:68:f7:03:36:14:98:20:3a:
                    2e:c4:a8:d0:98:74:cf:4b:c4:a1:fa:9b:6c:58:0a:
                    e0:61:bd:a2:6f:25:e4:4e:99:3f:3d:25:fe:51:2a:
                    27:6c:78:6f:1d:1b:42:ad:26:44:a0:2a:0b:bf:3b:
                    72:71:f0:05:2a:5b:22:c8:da:bf:d9:e4:e8:4a:c0:
                    24:eb:8a:cd:1f:86:e3:99:a5:92:3d:1d:bf:42:7b:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:88:F9:08:30:80:D5:A2:6E:D1:27:D3:5B:47:22:F5:E6:9C:0E
            X509v3 Authority Key Identifier:
                keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:cf:3c:27:4e:ae:f7:2f:99:63:cc:6e:14:ea:3e:0c:70:
         6f:87:d5:c8:0e:2e:62:f7:21:92:06:20:28:f2:d4:39:bd:39:
         b6:bf:5d:e2:32:b3:a1:a3:3a:fc:34:fe:ac:6c:8b:ea:da:44:
         fc:6c:66:f3:3f:e3:5d:ac:79:de:28:8f:62:a9:51:08:08:8b:
         95:54:7f:e5:91:89:ba:03:ab:4d:e4:5e:9d:2b:6c:6b:9b:97:
         49:eb:f2:f5:99:37:4a:b5:cc:b9:06:77:38:6b:35:1b:b3:b8:
         0d:56:76:94:50:93:4f:34:b4:63:84:21:d0:18:8f:2a:70:28:
         a3:e1:77:00:43:5e:a7:9e:b2:36:bc:4b:c6:19:3b:57:37:07:
         c2:08:ef:ec:bf:c0:6b:bd:d6:c8:0a:ae:d0:8f:02:6c:cc:08:
         f2:6d:e1:64:6d:88:31:82:d3:63:41:e9:94:7d:45:af:f6:56:
         88:43:c7:82:3b:01:af:80:8b:79:40:77:64:0a:c5:25:a0:c2:
         16:f6:22:16:50:6f:89:a1:e4:73:ea:ec:d8:a7:fc:fb:09:fa:
         98:28:01:bd:70:47:36:aa:cd:da:13:18:4e:2a:d9:bb:0c:8b:
         0c:26:9b:c5:7b:da:78:c9:1b:3f:d8:98:a9:ae:ce:df:84:ec:
         01:e5:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:05 2026 by rpki-client