Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
File:                     lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json)
Hash identifier:          uPGWIjmWiWgncLW/GaWzecQ90aw7m6SQKdaQpbbF68M=
Subject key identifier:   14:56:A7:6C:30:46:8B:FD:71:1C:6A:13:D9:E4:64:7B:30:CB:BA:39
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
Manifest number:          089B
Signing time:             Tue 24 Mar 2026 20:38:35 +0000
Manifest this update:     Tue 24 Mar 2026 20:38:34 +0000
Manifest next update:     Tue 31 Mar 2026 20:38:34 +0000
Files and hashes:         1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: wqZexYvaWpRRIPumIS/6Bx3JQrlT9kRlTJVNOSg939g=)
                          2: F539311C7DA011F08A71610EC4F9AE02.roa (hash: zuOnKl7Ra5fTAdkhJCdRbWwvMsV4axmICBuK3Fon6uM=)
                          3: D3148936F04D11F0ADCEC652566F56BC.roa (hash: JpBcmYX7vhkzKbx6B5+SUfTpThWFFWkRmqfYfwES20Y=)
                          4: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: sTzRTjegS6pXcKJix4GmDLpe4+EUgN+B0F9yGltkFT4=)
                          5: 37B1E57EFD6D11F09CB822DF526F56BC.roa (hash: WIWaaL6J0bqMMf0KvezWt+PHFUVrDbYuMF14salkaWE=)
                          6: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: H/A7iGan8l2ZEGP/7yLh7s7H/bnN8gR/289pNjnbFDM=)
                          7: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: vdQ2xrptBn7xNAJo3kWc/DGcrDKO04tseFsh6m019NM=)
                          8: 2820099CFD6D11F0B9F4BFDE526F56BC.roa (hash: 82As9ZSFLFNPFgULYktow3wN3qL7htWgj1lzIw//GVI=)
                          9: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: mxO7b7RvGtlPB9HynwXd3uHeWp2ebdT0RMpPUyZ35Zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Mar 24 20:38:34 2026 GMT
            Not After : Mar 31 20:38:34 2026 GMT
        Subject: CN=69c2f64b-eb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:aa:04:05:0f:a1:17:2c:af:6b:8c:5d:13:
                    f0:2b:ea:fe:55:32:d6:b2:6a:11:0a:33:2c:b8:2d:
                    43:44:a0:b5:0d:7d:c5:cf:98:44:a6:97:ec:a7:57:
                    2d:3e:68:da:78:63:29:d3:7b:81:cf:44:92:68:2e:
                    3c:bd:d0:06:58:5f:31:6e:19:88:40:5e:cd:94:0a:
                    c9:8c:1e:bf:7b:aa:9c:94:ba:95:29:9e:b5:38:a6:
                    0a:22:63:de:be:95:96:a0:98:ad:2d:1e:de:64:6e:
                    98:4d:e8:c7:0b:13:3a:d3:14:64:27:1b:cc:7f:f1:
                    72:e1:28:41:63:ae:ae:03:61:dd:76:fa:b2:f4:e6:
                    02:41:5f:af:67:12:39:0f:9d:eb:e1:ae:15:d6:02:
                    f3:55:1a:32:62:8b:65:77:4f:d8:a9:ff:e6:ff:1b:
                    22:63:79:b6:91:60:7e:be:c0:24:b2:3b:ae:3e:04:
                    5c:e0:b2:1f:5e:dc:3e:d4:64:96:6f:46:ce:8e:24:
                    e4:67:fd:dc:f8:29:c4:0e:a3:5f:8d:ea:7b:bb:74:
                    96:0a:cc:38:ad:8e:e5:24:12:ed:d0:58:1f:1a:43:
                    4a:6a:4c:f6:d9:cb:7b:03:3c:69:1a:7c:0f:8c:04:
                    c8:09:fb:37:0a:d4:ab:28:df:95:23:bb:9d:1c:75:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:A7:6C:30:46:8B:FD:71:1C:6A:13:D9:E4:64:7B:30:CB:BA:39
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:e6:0a:18:29:52:cc:dd:47:50:01:b8:8c:b4:db:9a:f0:
         dc:cc:84:10:fa:27:e5:4f:6d:83:d2:5c:ac:f5:e3:ef:0b:c3:
         90:c5:9a:8d:ac:08:82:6a:11:ba:c2:51:b1:95:b7:61:18:fd:
         f0:b8:49:87:6e:b8:b6:84:4b:82:d9:d0:f0:a5:39:ee:e0:45:
         49:13:d2:c2:3d:3f:d0:54:9c:4f:1a:cd:f6:50:80:16:b3:1b:
         b2:40:98:6d:84:cf:8b:43:59:3c:4a:b0:e6:03:47:be:4e:9f:
         42:79:7d:dd:20:58:b4:db:b4:6d:1d:d0:4e:d7:32:e0:d6:bb:
         db:4a:89:64:2c:66:01:56:ec:2e:60:25:09:29:81:59:dd:90:
         f8:07:f5:b5:a2:2e:f6:22:ca:f5:d8:14:9f:cc:37:96:0d:59:
         f0:5e:4f:fa:57:d6:3a:d4:54:ce:53:b0:39:7d:54:24:fb:a6:
         29:72:71:df:8c:78:3a:63:3d:f7:b8:cf:80:f9:81:e0:5c:28:
         3d:d7:39:86:f7:cc:a9:55:f9:d9:88:cc:4b:5b:6a:08:22:33:
         25:31:ee:c2:06:2c:ba:6b:6e:90:14:4d:7f:67:cb:66:2e:98:
         a1:e0:2b:65:ce:a3:09:fa:5b:2f:60:88:01:e9:13:3f:5f:7c:
         0d:16:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:43 2026 by rpki-client