Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          3N+COBAMhWwpLkauFRc4Ke5y2CztDz7QOROwCmIpNYQ=
Subject key identifier:   A5:92:EA:56:4E:45:BA:EB:E5:3D:AE:26:1C:9E:70:C8:5B:3B:A6:50
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          88
Signing time:             Fri 17 Apr 2026 07:19:31 +0000
Manifest this update:     Fri 17 Apr 2026 07:19:31 +0000
Manifest next update:     Fri 24 Apr 2026 07:19:31 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: 843N9mGA32JK+1CzKkZYbQX0ui4NIQhvhVUhn+imlgY=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: JklpsFyowHEwcOoj+ZilnkU1z0N39Fb72KxzXQYDJI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Apr 17 07:19:31 2026 GMT
            Not After : Apr 24 07:19:31 2026 GMT
        Subject: CN=69e1df03-68fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:90:b2:22:82:28:95:c2:db:49:24:82:a1:
                    ad:43:ab:87:0b:db:cb:8f:81:34:e5:bc:df:7f:d9:
                    1f:9c:14:b4:e9:7b:3e:b8:0c:f2:b1:11:f3:3a:5c:
                    2f:05:91:83:54:01:d8:28:6c:6c:49:62:55:cc:77:
                    64:4e:fd:4b:9d:31:00:28:a8:10:55:6a:93:04:cc:
                    f4:3e:e9:b5:75:0e:db:91:4e:42:01:1e:c4:95:74:
                    75:58:c2:37:fa:45:ae:46:01:21:22:d2:a4:07:be:
                    5a:c6:2a:1d:09:2c:14:fb:cd:35:d7:ed:8a:7c:e2:
                    f8:fc:68:a3:db:a7:17:6f:af:9e:a0:f8:d7:4f:36:
                    e4:08:ea:ee:c1:6d:4d:d2:cc:32:82:b2:d0:c2:7f:
                    65:96:2b:b2:28:90:8f:7d:54:22:6c:cd:8e:bf:e8:
                    90:60:a1:c1:b0:57:f6:d2:38:42:87:17:80:97:a1:
                    b8:b0:b7:6a:47:36:9b:98:61:e8:dc:20:7d:43:f5:
                    1f:b4:86:ef:92:cf:8a:49:f4:30:66:79:ca:b2:f0:
                    c1:11:48:a2:3f:45:2a:12:47:8b:ca:59:45:6f:9a:
                    18:c4:9e:00:1b:da:e6:ef:2b:65:65:1a:52:bf:60:
                    21:58:ab:28:7d:b0:05:2a:37:bc:39:e6:ea:71:e2:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:EA:56:4E:45:BA:EB:E5:3D:AE:26:1C:9E:70:C8:5B:3B:A6:50
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:37:1f:5e:8f:a4:6d:79:01:2e:ed:ce:2e:1c:d0:05:27:
         a3:ef:44:52:56:bb:38:bf:2f:93:c3:55:78:13:b0:ca:5d:68:
         ab:d5:fe:f6:7c:ea:82:92:59:19:1b:db:e2:f5:4f:a0:e3:4b:
         e5:80:cd:25:3e:7c:30:c5:0a:b0:c7:a9:46:51:a6:e0:4b:63:
         11:b2:04:c1:e8:87:e3:46:ac:35:74:7c:c4:19:e5:67:5d:6e:
         89:b8:dd:c7:e6:56:16:e6:e2:48:95:39:23:11:47:6f:89:7c:
         60:0d:43:ed:9d:8c:68:60:71:ba:05:be:9a:e4:12:f0:83:2e:
         22:f2:96:6a:cb:df:64:45:f0:1d:ad:36:f8:99:45:8c:db:43:
         ee:a8:d8:d4:ac:b0:25:a3:11:11:fb:b3:36:54:7d:63:5c:7f:
         2c:51:e6:97:f1:94:d9:13:fc:db:83:de:d7:15:a7:bd:a7:bb:
         b8:b8:a2:26:c1:87:4f:c9:6a:84:8f:bf:b2:41:b0:c8:16:ba:
         46:4e:85:80:0f:ee:88:4a:ff:f3:09:55:7a:30:62:cb:93:2f:
         15:03:59:68:15:d8:bb:17:c9:c6:57:d0:70:b7:8d:ce:d9:b9:
         ed:97:59:99:41:87:b5:44:b8:f1:8b:6b:8d:d5:d6:4c:08:e6:
         48:ef:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:19 2026 by rpki-client