Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          mWvfidkO9iOFiEDKSMn9I/TWmDzYefQ+yS+YOtYGLSY=
Subject key identifier:   A6:6D:99:2D:47:02:ED:A9:9F:5A:AA:77:F9:B1:36:9B:68:0A:11:DC
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          7C
Signing time:             Wed 25 Mar 2026 06:57:48 +0000
Manifest this update:     Wed 25 Mar 2026 06:57:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:57:48 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: 3dn3zUCoRsUlTsyItBh2R5gOLEB/KB1EMx/i4F6PK6k=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: JklpsFyowHEwcOoj+ZilnkU1z0N39Fb72KxzXQYDJI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Mar 25 06:57:48 2026 GMT
            Not After : Apr  1 06:57:48 2026 GMT
        Subject: CN=69c3876c-49c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:52:6c:49:fc:92:03:c3:bc:30:60:6e:19:c1:
                    7e:36:d0:15:a3:a5:92:15:86:35:2d:67:59:e0:17:
                    37:e4:78:30:bb:b1:f1:9b:ee:be:82:e1:75:bc:70:
                    c7:0b:85:d8:75:56:ac:c8:87:40:e7:f4:a5:94:a1:
                    53:67:51:4c:24:40:e1:1d:f8:3c:a5:6d:a7:f6:07:
                    cf:40:b2:f1:66:b7:70:2c:88:cb:d0:a7:f2:44:71:
                    87:45:d9:cd:2e:fd:56:9e:70:55:a6:a1:2e:7c:32:
                    e0:de:de:2b:cb:a7:e0:e1:56:66:16:21:95:06:08:
                    80:4e:66:7b:8e:a5:a9:04:1f:d7:8b:7e:c7:69:d9:
                    cd:89:da:29:a7:81:e0:6e:e8:c8:c6:79:fb:a8:70:
                    14:61:e3:19:c1:3e:d7:64:56:1b:46:f8:a5:3a:7d:
                    e2:95:4f:bd:82:2f:f8:df:a8:f0:07:d5:96:1e:4b:
                    61:0d:7d:5c:71:37:13:7c:2c:40:36:11:f0:f2:01:
                    d8:7b:34:1e:f7:68:4a:af:cf:ab:fe:59:fa:60:33:
                    58:72:f4:2c:ab:ab:bb:46:25:06:de:ea:66:4a:f4:
                    bb:62:df:b2:81:d4:09:44:e9:e1:88:de:bc:39:14:
                    9b:75:21:5e:90:49:79:29:1b:c1:97:76:23:d3:2e:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6D:99:2D:47:02:ED:A9:9F:5A:AA:77:F9:B1:36:9B:68:0A:11:DC
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:12:1d:e1:55:04:d8:8d:b6:d0:dc:a2:18:4f:7f:fc:a2:0d:
         c4:97:3f:1c:44:85:b5:d3:dd:65:f4:d3:65:a4:44:ab:2c:d0:
         27:10:17:b5:b3:e5:e2:df:b0:94:76:86:f3:10:22:fa:b2:32:
         b8:01:cb:e2:f2:ab:27:13:a2:7d:f9:52:e8:45:05:7e:5a:c7:
         68:aa:f0:ef:ac:ec:51:75:be:2f:2e:ea:54:38:b7:a4:61:e2:
         2f:7c:a8:b0:2a:76:28:99:06:ae:36:9d:a2:99:37:53:d2:45:
         80:37:cd:91:34:35:e9:fa:d6:26:16:05:30:a1:65:4f:45:8d:
         fc:65:4a:3b:d2:14:05:bf:fd:76:07:c8:95:07:76:76:52:0f:
         ae:c0:c8:29:75:70:30:dc:e3:58:8e:01:a6:92:1e:ea:c2:ae:
         7b:b5:a0:98:da:19:81:14:ab:91:04:32:f2:41:58:83:da:f6:
         19:f8:b5:d3:85:25:d7:57:74:de:7e:ac:cd:5b:64:0c:35:06:
         52:7a:c3:85:d1:bb:85:b4:8d:d4:e3:d9:a8:25:b0:ad:72:40:
         2e:d7:f0:eb:6a:d7:3f:fe:9c:98:7f:78:13:4d:d4:e0:6b:87:
         96:e0:16:d5:f4:61:48:b6:30:18:31:77:d0:2e:bf:e9:9a:23:
         5a:5f:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:59 2026 by rpki-client