Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          91UCikQLJwXbO6FZze0wD+eZ0s51OBPmLJoU73Ne4lQ=
Subject key identifier:   AF:5E:2B:B9:E1:FA:AF:33:79:EB:C7:71:68:18:79:0D:8C:79:30:1B
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          BC
Signing time:             Mon 27 Jul 2026 09:09:37 +0000
Manifest this update:     Mon 27 Jul 2026 09:09:36 +0000
Manifest next update:     Mon 03 Aug 2026 09:09:36 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: yqWBsEoOC349AImu5xfN3/iC6I67NsjqXYeFcrTIZMA=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Jul 27 09:09:36 2026 GMT
            Not After : Aug  3 09:09:36 2026 GMT
        Subject: CN=6a672051-c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:69:6b:bf:1a:02:3b:85:d5:9c:e0:c4:80:
                    40:d2:a1:b6:92:65:84:90:f5:80:01:47:a1:98:79:
                    8c:b3:d8:0d:81:56:9a:9d:08:a7:51:54:e6:df:3a:
                    2d:5f:d1:d7:09:59:7e:38:b7:df:65:90:d4:c4:98:
                    86:54:a5:10:39:53:d8:42:e4:48:68:f2:d8:cf:e8:
                    ef:76:48:36:aa:72:95:f2:ee:e7:2b:d8:c2:bb:0d:
                    be:82:34:6c:59:c5:25:fe:7d:63:01:04:03:e0:bf:
                    63:26:91:af:68:5e:5d:10:cd:c4:30:8e:e8:a4:d8:
                    c3:ba:de:df:d9:f8:29:5b:f7:04:cd:df:37:5c:6a:
                    6c:e0:9d:62:1e:79:63:1f:0f:0a:5f:5c:b6:34:2c:
                    cc:12:be:13:ea:e0:1d:db:4e:b4:5e:c2:a7:0d:c5:
                    e7:07:75:91:70:03:22:87:9a:ef:89:8f:07:3c:04:
                    22:88:06:d7:c3:5f:5f:e4:5f:fe:58:d0:fa:ee:70:
                    69:eb:55:78:0e:73:f0:29:7d:55:ee:42:8f:1c:e6:
                    86:79:d8:ea:98:26:3d:f6:55:a2:8a:57:6e:29:93:
                    44:2d:42:7d:f7:dd:60:f8:1a:92:cb:d5:18:27:b2:
                    74:2a:9d:be:d6:6a:ac:16:ae:27:30:fa:a8:d8:d0:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5E:2B:B9:E1:FA:AF:33:79:EB:C7:71:68:18:79:0D:8C:79:30:1B
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:2c:86:19:af:10:26:6f:93:50:ff:9f:1e:11:eb:9d:4a:
         16:94:a8:54:16:c6:14:ea:ef:38:5c:f9:f4:91:6e:b4:79:7d:
         ca:df:2a:4c:99:24:c3:a2:03:d0:5d:2f:d5:30:b5:b5:55:db:
         5b:e4:35:99:ce:ae:20:48:21:02:ee:7f:dc:b1:81:65:3d:97:
         0c:19:58:5c:40:7c:98:59:82:9b:1f:33:7c:c9:73:ff:e8:dc:
         e9:f6:63:d7:c0:03:46:82:3c:66:4e:11:7c:c7:83:6f:3e:2b:
         bb:cd:a1:00:7a:2c:9b:61:48:cb:80:f9:ef:b4:48:45:ee:71:
         a4:8e:0c:9b:d4:48:70:8e:21:4c:6e:7a:ed:90:e9:2e:10:54:
         a5:f9:d5:8d:d0:54:02:7d:1b:53:eb:75:a9:f7:d0:1b:0f:b2:
         37:41:fd:2f:f2:50:f4:de:d7:db:3c:88:c0:f6:43:d6:33:db:
         fc:c0:eb:15:97:07:59:78:1a:ec:44:54:57:5d:66:95:15:6b:
         4e:1f:f8:06:9f:94:ba:47:af:15:4b:19:d2:dc:8f:a2:b6:12:
         9d:33:f3:bd:66:8b:ae:f2:69:6c:c4:e3:1b:82:c3:8a:a3:34:
         cb:59:c7:cd:52:31:4d:4f:32:14:60:62:db:b5:83:93:79:cd:
         e1:f4:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:27 2026 by rpki-client