Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          BrOpFGVezOCZ5ck8ejupIG2/Cd6c/SuS8bJdB6QCg3c=
Subject key identifier:   82:46:B9:45:54:D7:66:D9:E5:06:DF:82:61:2D:42:A2:9F:86:75:EF
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          DC
Signing time:             Mon 21 Sep 2026 06:38:30 +0000
Manifest this update:     Mon 21 Sep 2026 06:38:29 +0000
Manifest next update:     Mon 28 Sep 2026 06:38:29 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: FVgi2B+5oVJi78vPrrSsc5MqF9xK5oI4ApZRIw5mxX0=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg=)
                          3: vm-m4NmypyOFpQCYpZK4hhgAvvg.asa (hash: DOI9hPKC1i4e0v5+qepnp8+dbckDpzsHh7vM8oGqjpY=)
                          4: AFD8C9F0A4E311F18DF958E06811F970.roa (hash: Lrk9LTcg/bv+vbM0honqqAUz9KhJdQc3X7h5xz+fH0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Sep 21 06:38:29 2026 GMT
            Not After : Sep 28 06:38:29 2026 GMT
        Subject: CN=6ab0d0e5-ab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:e8:46:48:e6:85:d1:b7:32:1e:ef:ed:f9:
                    b6:d2:2f:1f:c2:7c:ba:c3:89:26:51:0e:4c:e0:18:
                    e2:a4:ac:63:98:7f:07:f6:b7:99:eb:6e:2e:7f:d3:
                    6a:77:25:90:74:4d:4a:05:7c:67:5f:1c:c9:09:02:
                    56:9c:ad:7f:ee:03:51:53:a1:d8:00:ef:79:ad:11:
                    48:27:1f:7f:9e:da:61:53:17:49:22:24:a5:b4:78:
                    e7:bf:dc:bb:0d:0a:45:c4:2f:35:97:61:27:62:f7:
                    6b:c6:b0:c3:90:ec:a5:cf:d1:73:ec:26:a3:d9:3e:
                    9f:b3:40:8a:92:41:b1:1c:aa:60:21:2a:60:4f:c5:
                    43:1e:fb:c7:19:f8:46:60:e7:7c:47:1e:4d:71:ce:
                    e2:04:d1:de:b3:8b:e5:61:08:11:6f:e2:be:2d:27:
                    b0:ce:d0:58:8a:80:1c:25:56:b2:dd:d9:b4:67:fb:
                    e0:36:8f:04:6d:5e:75:33:c1:a4:8a:75:fc:e0:83:
                    cb:29:31:a3:df:92:f3:4c:8a:f0:fe:f8:a9:73:71:
                    74:49:a3:ae:63:15:96:47:74:10:8f:a2:1d:44:09:
                    f4:92:ed:4c:e8:8b:40:0c:35:3d:88:13:96:70:f3:
                    b9:4b:bd:96:8b:6f:a9:40:67:ae:a4:72:67:0a:db:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:B9:45:54:D7:66:D9:E5:06:DF:82:61:2D:42:A2:9F:86:75:EF
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1c:1a:6f:17:6e:3c:25:5a:a7:81:0e:f5:46:94:f7:c5:45:
         f3:88:3b:80:ae:97:2c:95:8e:1f:96:21:a5:36:42:5f:ce:7f:
         9c:e6:a7:0c:33:5f:32:7a:6b:1d:ab:78:07:4e:40:15:0a:10:
         b5:cc:83:f1:b2:e0:6c:0a:c3:60:0f:9a:03:ba:e5:e5:2b:b0:
         8e:57:7b:9f:27:7c:47:f8:8d:cd:59:7b:2c:85:ac:ce:4b:26:
         e2:57:bd:d9:37:31:1f:06:11:19:d6:ec:9a:5d:f8:95:15:96:
         0d:29:33:85:4f:58:d1:ba:57:10:c7:90:0b:08:b6:eb:00:cb:
         f4:1d:a3:de:2b:c0:21:8e:84:03:cc:cf:2f:f5:e1:3b:09:1d:
         42:d8:bf:74:47:f0:5e:aa:fa:e2:e9:ed:54:40:ec:7b:5c:5a:
         34:b5:d3:23:b3:e0:2a:a5:31:52:b4:00:d8:ad:01:12:cc:f6:
         9c:51:fc:01:c5:a2:e9:b2:aa:1c:ed:33:1f:08:9e:c4:ff:93:
         a7:da:d4:08:b1:ad:f2:97:92:24:e2:fe:6d:0b:40:e2:26:5c:
         55:90:20:b0:13:9c:4f:6c:59:c6:1c:5a:0c:8b:74:7a:30:ac:
         85:ff:2f:e5:34:ff:18:18:2d:c7:12:b3:3b:af:10:a0:71:f7:
         3e:73:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:25:26 2026 by rpki-client