Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          wMkMxVv23lWGVgakk882j/ViteSBGuly4hjOQ+eNCvo=
Subject key identifier:   B7:2D:BE:87:28:12:A3:03:53:1C:D0:92:EC:AB:2E:54:6F:CF:A1:97
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          EB
Signing time:             Wed 25 Mar 2026 05:36:18 +0000
Manifest this update:     Wed 25 Mar 2026 05:36:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:36:18 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: 12hGOU+sX0liHGHk2gVpJhcSgasLYiA/iGhRDdGDWa4=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Mar 25 05:36:18 2026 GMT
            Not After : Apr  1 05:36:18 2026 GMT
        Subject: CN=69c37452-2cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:90:1b:10:e9:8c:5e:f5:60:d6:3d:c3:d2:
                    07:13:f0:f0:7d:0c:fe:f1:78:bb:dd:18:c2:55:0e:
                    7f:3e:63:56:f6:d2:5e:0d:6d:a6:e6:a2:57:d7:ac:
                    f9:22:fb:8f:85:dc:30:64:c2:2a:2b:9a:97:9d:6b:
                    dd:21:ad:8f:9e:ba:1b:d0:8f:f2:f4:8a:cf:5f:15:
                    25:68:73:76:09:c5:98:c0:91:20:53:aa:2a:41:37:
                    ea:11:9a:a8:ad:90:e1:8e:f8:1d:fb:e3:99:db:a2:
                    d9:65:48:e0:0e:d8:df:56:3a:2c:aa:82:24:37:eb:
                    16:69:37:ec:85:58:40:67:67:6b:b3:cf:e6:4a:71:
                    57:e8:8e:7a:4a:1d:7c:e6:d6:cd:87:51:5f:aa:c7:
                    9b:07:6b:6d:7e:0a:74:d0:bf:4c:70:84:0e:4e:db:
                    15:1a:8d:ba:43:87:42:72:a1:1a:00:a9:bd:b5:5e:
                    b4:3d:ff:01:d8:7c:52:b4:b4:ea:74:ee:cf:eb:d3:
                    53:1c:76:d3:18:9e:a8:f8:70:e4:f2:9d:43:54:92:
                    86:ab:11:36:76:5c:b4:37:9a:43:ce:d9:76:61:f4:
                    79:17:bd:2c:99:02:86:7d:6e:25:d9:d0:56:61:d5:
                    92:72:c3:e2:35:ee:94:0f:f4:29:98:eb:34:ba:f4:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2D:BE:87:28:12:A3:03:53:1C:D0:92:EC:AB:2E:54:6F:CF:A1:97
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:23:ec:67:a0:9e:50:c3:1b:a3:bb:d2:25:3b:90:ab:40:0e:
         af:97:8d:e8:8e:8f:ce:44:a5:12:02:4f:7e:9b:a9:aa:99:36:
         43:f3:3b:0f:b0:b8:24:ef:ba:18:85:8b:84:e8:bc:ad:7e:fd:
         3d:a0:e6:e3:82:90:35:bd:ec:cd:48:3c:0f:95:38:a7:af:ff:
         53:a1:5f:48:ad:18:9c:30:46:3b:d5:ae:89:83:b0:ea:a9:f9:
         10:87:bf:97:97:91:ba:f4:42:95:ba:46:38:ce:04:e5:e5:17:
         9d:22:b8:c1:6a:eb:4a:c0:57:62:40:de:89:4d:28:2d:e3:70:
         34:8f:3d:aa:70:99:0c:db:09:ee:1c:c2:a9:82:89:51:8c:43:
         3c:b0:32:fa:8f:e1:a1:4b:67:19:4d:bf:47:9f:dc:64:b5:7d:
         c6:84:85:16:b7:1c:5f:21:88:af:c2:fd:33:d6:43:6e:91:f1:
         9a:54:66:55:45:06:bc:77:66:bc:10:96:5e:70:a6:af:66:6b:
         20:5e:92:07:2b:dc:68:08:1f:fa:5f:3d:f3:f5:0f:a4:53:66:
         7b:ef:70:73:61:1a:b7:1a:55:a6:34:93:93:46:70:f9:6b:4d:
         40:73:b1:e0:ac:6b:c7:8c:fb:8b:8d:ae:7f:da:aa:9e:a9:ff:
         32:ee:d0:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYwMzI1MDUzNjE4WhcNMjYwNDAxMDUzNjE4WjAYMRYwFAYD
VQQDEw02OWMzNzQ1Mi0yY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7aQGxDpjF71YNY9w9IHE/DwfQz+8Xi73RjCVQ5/PmNW9tJeDW2m5qJX16z5
IvuPhdwwZMIqK5qXnWvdIa2Pnrob0I/y9IrPXxUlaHN2CcWYwJEgU6oqQTfqEZqo
rZDhjvgd++OZ26LZZUjgDtjfVjosqoIkN+sWaTfshVhAZ2drs8/mSnFX6I56Sh18
5tbNh1FfqsebB2ttfgp00L9McIQOTtsVGo26Q4dCcqEaAKm9tV60Pf8B2HxStLTq
dO7P69NTHHbTGJ6o+HDk8p1DVJKGqxE2dly0N5pDztl2YfR5F70smQKGfW4l2dBW
YdWScsPiNe6UD/QpmOs0uvSyBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLctvoco
EqMDUxzQkuyrLlRvz6GXMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVCPsZ6CeUMMbo7vSJTuQq0AOr5eN6I6PzkSlEgJPfpupqpk2Q/M7D7C4JO+6
GIWLhOi8rX79PaDm44KQNb3szUg8D5U4p6//U6FfSK0YnDBGO9WuiYOw6qn5EIe/
l5eRuvRClbpGOM4E5eUXnSK4wWrrSsBXYkDeiU0oLeNwNI89qnCZDNsJ7hzCqYKJ
UYxDPLAy+o/hoUtnGU2/R5/cZLV9xoSFFrccXyGIr8L9M9ZDbpHxmlRmVUUGvHdm
vBCWXnCmr2ZrIF6SByvcaAgf+l898/UPpFNme+9wc2EatxpVpjSTk0Zw+WtNQHOx
4Kxrx4z7i42uf9qqnqn/Mu7QOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:54 2026 by rpki-client