Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          7xsrPdbzMC4FiZgHMEpO470ArkyM01njWkARJfgO7D4=
Subject key identifier:   08:B1:98:96:CF:E9:4D:EC:81:B6:ED:2A:91:A3:91:37:13:02:9C:D1
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          57
Signing time:             Wed 25 Mar 2026 07:22:32 +0000
Manifest this update:     Wed 25 Mar 2026 07:22:31 +0000
Manifest next update:     Wed 01 Apr 2026 07:22:31 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: MB1/ng7x8xllnWJFUVlWjf0ViwxIBCZX42B/0HdIDqc=)
                          2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
                          3: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (hash: G4U39Fy1SJqtjI6+bD1SjtIDsoBsLGQG30f+ReQTcyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Mar 25 07:22:31 2026 GMT
            Not After : Apr  1 07:22:31 2026 GMT
        Subject: CN=69c38d38-9cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:86:e6:63:b6:01:71:0b:52:da:5c:17:81:
                    c6:c9:e9:51:39:ed:73:66:4b:28:77:67:a5:50:a2:
                    cb:fc:27:7c:3c:a8:66:9b:99:57:0a:0f:43:51:06:
                    55:62:dc:98:61:d9:a8:36:a5:0b:da:14:e9:e9:e8:
                    56:b8:6f:36:b6:ba:74:12:70:a4:fa:cb:d9:83:ff:
                    81:b4:8e:a3:1b:2e:f0:a7:05:7e:ce:67:62:02:1b:
                    7f:c6:3e:0e:cc:13:0d:b0:22:9f:14:c6:16:fd:27:
                    ed:b2:a1:a3:ea:a3:f1:a2:39:2c:ff:2e:7a:3c:19:
                    3f:8a:db:ec:8d:9e:99:30:54:74:0f:fb:eb:da:64:
                    67:a4:11:e3:0a:a7:f6:33:aa:f8:41:be:6a:17:a3:
                    c1:f0:be:cc:da:b8:94:f3:02:18:02:31:88:37:86:
                    86:78:3d:b2:c6:45:fc:30:f7:60:52:80:ad:d2:13:
                    41:46:96:e1:00:c0:e6:28:ff:50:d5:45:7a:fc:42:
                    55:14:70:8a:77:19:85:80:f3:de:58:1b:91:95:a1:
                    6e:10:d8:8e:ac:87:76:38:11:e9:8a:99:f9:c3:e4:
                    4d:0b:ae:4f:10:34:d9:56:8a:69:c7:19:90:e6:55:
                    cf:15:52:5d:08:5b:12:89:aa:8c:3d:e1:d7:e8:01:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:98:96:CF:E9:4D:EC:81:B6:ED:2A:91:A3:91:37:13:02:9C:D1
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:66:61:16:1e:b1:69:2f:44:99:f9:76:cc:80:b7:84:99:
         26:93:9a:16:bc:68:f5:9a:96:1f:67:f0:f9:18:2b:ea:2e:9c:
         c7:85:39:d9:47:af:4c:e2:eb:5d:28:cd:ae:31:39:43:d9:f3:
         96:c7:9b:e9:b0:c5:29:ed:c4:9e:13:8b:2f:a9:47:75:a2:ef:
         d7:f6:c6:43:36:63:6a:9f:ff:91:0a:cf:2e:06:13:67:c8:bc:
         45:0f:6a:df:58:5c:fd:8d:a8:4d:61:fb:16:98:44:92:1e:a2:
         3d:b5:0d:74:41:b8:1a:87:4d:11:fc:1d:c6:08:b0:d8:52:ad:
         2d:d9:c8:98:1b:01:41:aa:20:5c:59:68:1b:3d:7e:d0:c6:e5:
         62:af:01:40:0b:92:be:d1:4c:d6:aa:c5:4e:12:48:be:3c:fc:
         92:62:71:ae:e2:35:e9:00:18:5f:31:ac:84:ac:6a:95:0b:b4:
         53:8f:05:c5:94:43:9c:07:60:3b:98:ab:1c:4a:2c:11:eb:49:
         4e:7b:ae:be:3b:7e:83:2e:9d:60:6c:ec:86:ba:70:f0:21:97:
         04:4f:6d:e4:22:58:8b:2e:fa:f3:88:ca:fe:4b:cf:cf:7e:e2:
         d7:a1:33:80:32:2c:8c:74:4c:a2:6b:80:44:aa:24:de:16:16:
         13:46:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:29:08 2026 by rpki-client