Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
File:                     LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json)
Hash identifier:          BrrzW9N1r7uQhu9qOiQJ6R3fADnNFdfPd8Yw9f11viE=
Subject key identifier:   F2:47:B5:1B:F2:EF:0C:A2:EB:6F:F5:D3:3E:38:CC:EF:06:0C:3F:6B
Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
Certificate issuer:       /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
Manifest number:          01AA
Signing time:             Wed 25 Mar 2026 03:26:18 +0000
Manifest this update:     Wed 25 Mar 2026 03:26:17 +0000
Manifest next update:     Wed 01 Apr 2026 03:26:17 +0000
Files and hashes:         1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: VhloKGhYbFSJQAgMb/vA//b38t1Uigor04LlddGBQCc=)
                          2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 341ByImzn/WsspGGEhwYJpQ72ArO+/p3lUbnRz/LSbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
        Validity
            Not Before: Mar 25 03:26:17 2026 GMT
            Not After : Apr  1 03:26:17 2026 GMT
        Subject: CN=69c355da-2093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:58:49:b5:db:9b:a7:db:bd:d5:b1:0b:30:
                    e9:86:9e:0d:00:c5:fd:21:81:13:6a:94:32:14:61:
                    5c:ef:1e:a1:50:50:80:62:12:f9:2c:c5:a7:de:51:
                    f1:27:df:59:9e:9d:8d:e3:a0:db:e4:79:72:1e:f9:
                    7f:f1:b0:ad:1e:04:d6:91:ac:57:64:85:5b:8d:a5:
                    de:66:1a:0a:ed:01:dc:77:c9:ce:e2:ce:e5:01:b0:
                    47:92:82:15:fe:40:98:44:1e:a5:d0:24:6e:e4:a8:
                    be:ec:5e:ca:c6:c5:1e:87:88:52:0e:b7:ac:2f:3a:
                    a1:b6:a8:e3:23:76:42:93:29:ae:bd:05:19:a1:96:
                    75:88:13:9b:13:b0:f3:94:c4:06:df:a0:3f:89:89:
                    1e:a1:93:a2:79:cf:6e:0b:1f:b2:62:d8:ee:6b:4a:
                    9e:29:81:7c:08:11:f6:89:97:55:62:f3:73:77:ef:
                    58:4b:96:69:4f:8e:54:03:f0:66:85:af:5e:78:6e:
                    55:0b:a8:11:ee:d1:f8:70:88:89:c0:97:37:1e:9e:
                    6d:24:77:88:02:c3:e8:43:c3:05:e8:2e:1f:9a:29:
                    d0:dd:41:45:aa:3d:94:4f:89:b8:3e:a7:55:f2:c9:
                    ab:12:48:47:00:ff:ff:3c:a1:77:d6:f2:0c:06:34:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:47:B5:1B:F2:EF:0C:A2:EB:6F:F5:D3:3E:38:CC:EF:06:0C:3F:6B
            X509v3 Authority Key Identifier:
                keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:76:2f:0d:00:4b:8e:d9:e1:65:5f:0b:1b:2c:78:85:a9:
         2d:07:4a:bd:b3:5c:30:f5:2e:07:98:aa:8d:e0:98:e1:b7:ad:
         0a:fe:e6:29:43:36:cb:e4:e9:88:f0:37:af:e4:d0:28:4a:4a:
         2a:2a:8e:ab:3b:d2:fd:7b:ae:60:76:7b:ea:83:29:c3:13:c3:
         7d:ad:00:cd:63:3d:91:11:85:56:74:ed:32:a8:05:70:f1:45:
         27:a2:59:74:c5:e4:5d:cf:2c:9f:63:62:f4:51:a7:8c:f0:80:
         b1:9d:1b:21:30:16:b1:5c:15:1d:34:9e:a9:a4:03:e5:4f:96:
         dc:ab:34:1d:cd:7c:ce:67:54:05:5b:12:e6:de:97:0e:b6:10:
         e9:08:f0:ee:a8:e6:97:b2:e7:76:c2:81:9a:43:86:37:37:14:
         51:d5:2a:0c:c5:8b:63:2a:ad:ef:91:91:dd:f0:86:73:fa:70:
         f2:54:15:c9:19:42:6a:cf:ba:3b:90:1b:91:3a:40:79:6d:3d:
         9a:60:da:2f:fd:86:9f:8c:6c:46:f5:6d:d9:0e:69:01:41:62:
         26:dd:69:b0:6b:3e:01:63:b3:08:3e:04:2f:70:34:2e:8b:d8:
         15:19:01:40:0e:95:82:d5:07:18:a7:21:86:48:ee:1c:25:6e:
         19:7c:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:25 2026 by rpki-client