Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File:                     LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier:          JJEc+cLK3O1Q7Wzut9rH9oyVr6vTcROUXWxY5DiPS+I=
Subject key identifier:   CD:0F:A8:FE:8A:39:40:DE:D9:13:91:F8:06:2C:A8:31:B3:16:69:73
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number:          DF
Signing time:             Wed 25 Mar 2026 05:59:42 +0000
Manifest this update:     Wed 25 Mar 2026 05:59:42 +0000
Manifest next update:     Wed 01 Apr 2026 05:59:42 +0000
Files and hashes:         1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: aIEEnqhZ8ZDuQoywTRiZcjjTp6Md8Q54A3wMGCnDnyA=)
                          2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: pizZrRpp7EtZmMmAPMiiQe1fW3ilBMwPXOOFCE28GA4=)
                          3: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: JRxe6WQ5i8FSwSqbtx1T3zxfQy2HORxOSSN4JwBWN5k=)
                          4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: VTSafZ+7u6OX5754WOMalwu0CW4B42L0MtvZncW5Mw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Mar 25 05:59:42 2026 GMT
            Not After : Apr  1 05:59:42 2026 GMT
        Subject: CN=69c379ce-586b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:13:e4:fb:f1:61:f6:60:f3:b9:a2:66:b5:
                    7f:44:f0:a6:07:03:e9:94:27:df:4b:af:20:68:d9:
                    b3:ab:bd:1f:0e:0f:b2:5b:72:93:0e:9c:34:bd:6d:
                    c5:9b:af:89:f4:7b:e3:d8:6d:23:2e:8e:02:33:54:
                    86:f7:df:60:c3:b8:e0:74:71:34:52:bd:f3:8a:65:
                    ff:61:4c:43:2c:2d:0b:ec:02:5d:0c:71:f8:10:a1:
                    da:9a:d3:c9:2a:e1:b8:eb:82:85:5a:63:22:11:4c:
                    fc:bb:c7:40:72:66:3f:4f:98:6c:4f:df:66:bc:e0:
                    cd:96:b6:e2:8e:59:4f:b7:e1:0c:46:01:01:e1:da:
                    b3:07:ce:62:a0:84:c9:7d:b0:29:e9:a9:77:de:51:
                    32:c5:aa:45:a9:66:56:3d:1a:ee:71:61:b7:78:98:
                    ad:2f:16:33:f2:d1:7c:2c:67:3c:ac:18:c4:a4:0d:
                    a1:b3:7a:38:11:fd:a2:ff:75:13:64:c0:5c:db:0b:
                    cb:ca:ee:1d:89:00:f6:a1:91:20:bd:3f:19:6f:e7:
                    0d:a0:d2:19:07:f4:34:6b:0a:f9:b2:b1:4f:bd:29:
                    87:86:9d:ac:2d:0b:f8:b1:39:a4:cd:8a:1b:c4:84:
                    07:a8:40:46:21:55:11:92:af:a9:d5:aa:86:4b:46:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:A8:FE:8A:39:40:DE:D9:13:91:F8:06:2C:A8:31:B3:16:69:73
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:4f:4f:e7:ec:fd:79:bc:d1:61:69:3b:54:fb:3e:19:fc:
         55:24:be:b9:41:55:3d:c0:3d:e4:09:88:8d:b1:9c:e9:fc:9d:
         30:e1:20:0c:17:cd:e2:14:96:89:33:08:98:dd:54:6c:27:13:
         96:5a:94:a3:e0:29:db:40:31:c0:60:96:ce:89:19:ca:69:98:
         e1:8b:21:4c:2d:d3:73:51:05:bc:a6:16:61:05:bf:7a:74:43:
         64:54:0a:38:04:8b:3a:73:e9:10:63:e1:5c:0b:95:20:b9:f9:
         6a:48:17:70:ef:98:95:4b:2e:c1:9f:f6:19:c4:75:0f:a9:e2:
         d9:ed:e9:5e:c2:f7:8a:33:ef:a9:a9:07:dc:99:eb:d2:b9:94:
         47:08:48:48:e2:65:27:09:e6:13:ae:25:70:a6:51:75:d5:4d:
         20:6e:2c:ad:f2:90:01:63:c2:9e:81:ce:a7:f8:db:87:60:a1:
         8e:10:cb:ad:23:94:e8:fb:d3:84:94:17:b0:21:e1:33:d5:20:
         28:56:da:dd:7d:75:65:00:09:2c:ee:25:3b:eb:dd:cb:7c:48:
         83:bf:1f:8e:35:ab:1e:27:7a:1d:0c:1e:7b:69:a9:26:18:3f:
         7b:71:66:6f:97:6f:a1:e1:ab:d1:e4:0f:47:67:08:b8:57:6a:
         88:7f:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:28 2026 by rpki-client