Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          yv9pN7YgXe0hkI7uITGFwqNvHijB8JjTgUjJ8JkQ1Bc=
Subject key identifier:   28:86:D3:1E:02:35:8B:57:9A:DE:3A:04:7B:D2:08:2A:AD:20:CB:81
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          0103
Signing time:             Mon 11 May 2026 06:12:28 +0000
Manifest this update:     Mon 11 May 2026 06:12:28 +0000
Manifest next update:     Mon 18 May 2026 06:12:28 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: H1xnOO8aE9/TsHOFEw9r/yUxmfk7To75kF8IZa06KpA=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: May 11 06:12:28 2026 GMT
            Not After : May 18 06:12:28 2026 GMT
        Subject: CN=6a01734c-d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:af:80:47:5f:48:32:43:e0:2a:40:34:b0:
                    58:04:fa:d1:c7:b9:c2:9e:92:36:04:e6:c1:9e:3a:
                    c2:7c:59:00:56:41:27:d3:2f:f2:8e:11:3c:37:17:
                    64:dc:6d:86:c8:eb:a3:92:63:dc:0e:26:06:4b:60:
                    a6:db:c6:00:51:b5:a8:1c:72:b1:fc:26:0b:4d:bc:
                    b5:aa:0b:8a:79:99:f3:99:0c:d1:51:88:2e:18:8b:
                    8f:bf:ce:6c:d6:59:5d:3e:4c:d8:10:ee:22:ae:a0:
                    ea:e4:b3:00:56:a6:0e:72:8f:db:0c:0d:47:de:31:
                    56:86:7e:f1:e3:71:a8:95:f3:ce:a4:9c:67:0f:7b:
                    9e:41:24:6c:6e:e0:19:1d:6c:48:56:30:81:c1:c6:
                    cd:2e:11:9f:9a:18:8d:b9:11:f1:aa:01:eb:d8:16:
                    a3:8a:d1:49:58:4d:68:02:fd:2c:05:77:64:47:66:
                    8c:2e:09:17:3b:e5:81:f0:2e:3d:96:31:25:4b:5a:
                    6c:f8:e7:30:6a:df:a5:be:0b:46:b3:36:67:b6:6e:
                    e0:cb:8b:6d:e2:5e:ce:de:e9:a7:dc:64:d1:d8:b2:
                    41:f7:52:82:cd:59:37:80:65:ee:96:58:bd:0d:13:
                    f9:d2:d2:fc:46:93:a2:64:d1:a3:6a:6a:63:02:39:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:D3:1E:02:35:8B:57:9A:DE:3A:04:7B:D2:08:2A:AD:20:CB:81
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:f9:d8:3c:4c:04:9f:54:6b:5b:70:5a:69:1f:a6:81:1c:
         ea:eb:c3:ea:87:5f:f8:9b:e2:69:d2:b5:f1:76:42:2e:88:a4:
         f4:86:4b:df:e5:2c:a4:84:db:30:77:88:30:e9:5d:f1:a9:13:
         49:46:08:8b:90:62:08:cd:6d:85:b4:fd:1f:4b:8e:39:df:72:
         59:e6:df:da:8c:c2:1c:07:4e:32:fb:49:8a:fb:00:fe:60:3a:
         a0:2a:34:0e:85:dc:9c:df:96:a3:68:58:6e:17:e6:b1:14:80:
         14:07:00:6a:0c:cf:8e:2c:82:55:40:b8:d6:36:bf:4f:12:7d:
         ba:a0:89:56:0e:b3:a5:a7:97:24:c3:f9:f8:d7:a1:f4:ae:7e:
         5e:08:84:e5:48:5b:a0:1e:78:54:d5:0c:96:f3:c1:32:a4:57:
         8b:24:ef:01:b4:28:c9:32:67:0a:0d:ad:25:cc:2d:51:d1:a0:
         d5:31:95:13:6e:22:ae:c6:29:fe:42:88:d7:03:41:01:d6:95:
         fd:07:b6:88:9d:20:d4:14:bd:3f:25:47:e5:3f:e2:4d:f6:65:
         7f:bf:68:4e:3c:10:bd:8f:43:d5:f8:d5:d2:b8:ac:83:96:12:
         b5:1b:8c:5e:71:85:e0:94:fb:23:68:41:19:a4:d6:c5:60:10:
         bb:70:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:07 2026 by rpki-client