Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
File:                     LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json)
Hash identifier:          2pXhSy74FQsKOCpqlk1wspYkkhnfB9yO1cDdcSgFrIc=
Subject key identifier:   8C:65:A4:CD:87:FA:39:DE:0B:60:B0:01:44:BE:93:9D:1E:A2:A4:F8
Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
Certificate issuer:       /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
Certificate serial:       0C9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
Manifest number:          0C8E
Signing time:             Wed 22 Jul 2026 18:54:15 +0000
Manifest this update:     Wed 22 Jul 2026 18:54:15 +0000
Manifest next update:     Wed 29 Jul 2026 18:54:15 +0000
Files and hashes:         1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: Vio62qBVR/SuNiC7UEk+/A004eauomD9YNBNoIz6yEA=)
                          2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: EZMPtIi4RfMlwSozvCYeJj1btHwEzPWR0TnjWA8hZ7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl
                          rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3227 (0xc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05, serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
        Validity
            Not Before: Jul 22 18:54:15 2026 GMT
            Not After : Jul 29 18:54:15 2026 GMT
        Subject: CN=6a6111d7-e4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:ee:33:57:f5:bc:d6:3a:c9:5d:27:37:b6:
                    52:16:a5:cf:4c:a3:a3:07:97:af:0d:6b:00:95:50:
                    10:fd:4b:e9:b5:66:f3:c8:09:c1:fd:6f:04:7e:a0:
                    72:c8:61:16:cb:01:ea:37:c0:64:8b:20:3a:4a:a4:
                    e2:84:11:f7:65:3a:6d:c5:61:ff:cc:d0:ae:b0:a1:
                    63:17:e3:23:88:b4:e0:2c:3b:72:51:73:e7:36:f9:
                    e8:99:4d:ba:4a:6b:be:45:cb:ea:fb:d2:83:c2:4a:
                    69:77:eb:d1:1c:45:7e:72:6b:d5:5b:30:e6:0f:b6:
                    d0:c5:b8:b6:a0:c6:82:9d:08:f3:b4:94:74:66:c1:
                    7c:8f:cd:ca:bd:54:07:60:62:9a:96:c9:5c:b6:18:
                    47:96:b3:30:3b:13:1d:74:2f:af:0c:35:11:9d:85:
                    08:72:8b:5f:93:c6:a2:02:10:34:76:49:09:8d:1f:
                    47:a8:72:fb:5a:f6:d7:82:5d:26:89:00:7c:b9:3c:
                    ee:21:63:24:09:78:ae:d3:90:a1:81:32:6b:8e:a0:
                    a6:64:7e:c5:ba:db:cf:91:a6:a4:fa:9e:33:58:6e:
                    bd:97:bd:1e:31:e9:e0:f3:db:10:4f:43:21:aa:57:
                    13:0d:04:44:5a:0c:fd:9b:b4:c9:3e:49:5e:dc:f0:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:A4:CD:87:FA:39:DE:0B:60:B0:01:44:BE:93:9D:1E:A2:A4:F8
            X509v3 Authority Key Identifier:
                keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:94:d4:a5:8d:3f:1b:72:a8:cc:15:3d:8e:5a:93:73:e5:
         2e:68:02:39:55:2b:af:17:51:f1:1a:d6:44:da:cd:c6:d5:36:
         7c:0e:10:4d:02:32:59:69:1c:54:73:60:db:34:7a:b1:5a:45:
         af:99:f1:cd:75:99:30:20:8f:28:d1:e2:bf:3f:b2:13:51:3f:
         48:9d:35:f5:9b:95:c0:f2:f1:22:d3:b0:8f:ab:57:87:3f:cf:
         49:a9:aa:3d:ee:ae:e4:9f:ad:7c:0e:ca:d1:14:58:8c:6a:27:
         b6:fb:b0:b5:e5:1b:37:eb:9d:1d:57:33:3b:18:eb:13:35:60:
         13:f0:82:fc:01:66:8f:d2:8a:cc:b6:e9:90:42:bd:37:d0:b1:
         f6:ec:7a:f8:ba:b2:c4:8f:77:37:0e:e0:db:48:f1:83:f0:d0:
         4f:1d:28:10:24:fd:5d:bf:02:36:e4:7c:94:8d:c6:cb:10:17:
         19:38:bf:5e:47:30:43:78:93:3d:a3:4d:f2:47:aa:84:33:14:
         c4:c6:bd:28:76:d8:a1:dc:b6:90:6f:d3:5b:fa:1f:0d:6f:4d:
         9b:d7:a2:91:00:1c:bf:41:28:53:d5:88:e1:bc:b5:7e:fc:16:
         a4:73:76:86:4b:56:d6:14:33:15:7d:cd:79:5c:93:76:6c:c6:
         df:59:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:04:55 2026 by rpki-client