Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          xs1PLDd42yGCnqYdv3LfRmlMfdUSvP/diTHWIvgG9cs=
Subject key identifier:   D5:12:62:A3:75:19:0A:92:22:98:8F:3D:16:E1:AC:29:1F:8E:5D:32
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          05D9
Signing time:             Wed 22 Jul 2026 23:50:22 +0000
Manifest this update:     Wed 22 Jul 2026 23:50:21 +0000
Manifest next update:     Wed 29 Jul 2026 23:50:21 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: VVTGVd9UAaHSG3EyMInlgam4h5owjZTfNSKU073+mZ0=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Jul 22 23:50:21 2026 GMT
            Not After : Jul 29 23:50:21 2026 GMT
        Subject: CN=6a61573e-bd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:9e:01:35:f2:7e:e6:84:c7:74:35:b0:92:
                    61:f4:b3:44:19:05:e8:54:93:58:98:91:03:ed:ef:
                    ea:fc:bd:3f:c3:91:d2:4c:cd:97:b7:20:c7:6f:cd:
                    77:09:99:d6:64:d5:00:bc:05:a2:7f:eb:85:51:8c:
                    34:f9:da:4a:53:94:78:37:31:35:2f:78:dc:ff:10:
                    f8:0c:be:fa:0d:f0:65:35:0a:ee:4a:d1:60:b5:7c:
                    df:87:8c:16:7c:9c:68:ec:58:d4:d2:5e:89:0e:d3:
                    26:37:a0:b1:c1:b9:39:7c:ea:2a:50:9d:87:93:ec:
                    a4:86:c9:df:3e:92:40:ce:0c:8d:22:33:14:ef:a2:
                    cb:7a:c8:45:45:a3:a2:2f:9b:bc:ad:54:31:8e:12:
                    39:7b:20:69:b7:8d:61:99:4a:16:a9:d2:1a:7d:f7:
                    22:b4:f5:81:54:b1:96:60:cf:a3:10:ed:0c:96:b8:
                    8d:51:2c:28:56:ea:fa:c0:ba:3e:ac:ef:43:86:7f:
                    59:56:7a:4d:eb:e2:e5:a7:1a:3b:fa:85:c4:c5:53:
                    4b:55:7f:e7:a3:fb:ec:c5:be:62:3e:30:0f:d8:a3:
                    14:3d:24:3d:e0:8b:a6:8b:91:10:5d:51:95:e6:51:
                    86:11:a3:37:48:fc:07:9f:c5:9f:08:4b:c7:9d:b9:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:12:62:A3:75:19:0A:92:22:98:8F:3D:16:E1:AC:29:1F:8E:5D:32
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:76:57:44:c3:74:61:6f:fa:45:fa:2e:89:75:ae:88:26:b8:
         58:92:10:a2:2d:f8:a7:b5:ee:06:43:c6:a9:56:38:08:71:9a:
         26:68:a4:a5:2d:3b:21:68:65:4d:54:b1:fc:af:69:67:83:d5:
         ad:70:70:1d:40:00:45:a0:79:1c:90:30:8a:1c:9c:c2:f3:24:
         9e:a3:a7:79:d5:63:74:fb:18:64:2b:d4:bf:4a:5b:f8:2b:62:
         4b:0e:0c:85:83:27:d9:7c:73:15:ad:5f:5a:12:6b:a5:bb:9a:
         af:ab:d5:88:31:60:4f:c9:49:2b:7d:1d:9f:db:cb:54:6e:24:
         3e:84:eb:14:cd:61:9a:df:3a:e4:40:be:42:5c:63:3f:1a:ad:
         75:b2:72:a4:eb:42:c8:45:a1:6f:85:7c:66:44:22:ff:b7:0f:
         b5:4e:58:7e:f0:76:49:11:39:42:cc:3a:10:6f:2a:9c:94:ed:
         94:77:c3:20:01:e1:ae:27:1d:cf:d0:05:66:4b:5b:c7:bb:b5:
         7e:95:16:7f:d2:03:7b:a1:62:8b:9d:24:e6:64:65:73:fd:e3:
         67:d7:16:fb:5d:37:ad:cf:0c:bd:92:fb:dc:44:3f:a1:c7:d8:
         64:e3:fc:69:32:45:93:41:0e:2b:1a:87:f7:7a:1f:55:ab:f9:
         82:42:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:57 2026 by rpki-client