Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File:                     LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier:          xj2vaYQ/Y39BqMobBqDNvKT0jJrpYfcWrsfe1Mb+zP8=
Subject key identifier:   68:FB:D4:46:D1:34:88:C1:99:F5:A4:62:B3:20:EA:96:37:33:B3:9C
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer:       /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number:          0194
Signing time:             Wed 25 Mar 2026 03:38:25 +0000
Manifest this update:     Wed 25 Mar 2026 03:38:24 +0000
Manifest next update:     Wed 01 Apr 2026 03:38:24 +0000
Files and hashes:         1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: yvcZxXlcX2TsJ7Vj+bXOThVF+6u9Nh13m6/lM6x1Pic=)
                          2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: ZHeLDVTIHFJ7UjPrvmwH6xelh/2KaloiHRyyvC19Dlw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
        Validity
            Not Before: Mar 25 03:38:24 2026 GMT
            Not After : Apr  1 03:38:24 2026 GMT
        Subject: CN=69c358b1-7626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:eb:ee:52:fd:e7:62:a2:61:c3:85:59:54:
                    cd:a0:da:df:8b:86:a4:23:81:c9:3d:78:90:0a:93:
                    24:90:50:df:10:64:69:ff:87:aa:d1:92:09:f7:29:
                    22:b6:54:79:f0:62:37:a3:b9:c7:79:06:d9:84:46:
                    d1:35:0b:d1:20:85:8c:f5:a5:c7:19:a2:c9:d2:49:
                    91:2a:8d:56:52:cd:94:03:7a:8e:96:b8:4a:56:e4:
                    d9:68:68:28:91:0c:93:1e:47:49:60:4c:f9:c3:28:
                    f9:a8:16:69:2d:0c:34:23:6c:38:00:8b:29:5d:ee:
                    38:22:ec:ad:7d:20:a5:8c:39:f9:ae:f0:ec:1d:40:
                    5a:50:cd:96:89:a4:82:1e:c4:2d:74:01:29:78:ea:
                    d2:51:d5:6c:db:4d:f0:5b:ef:b0:4e:81:a6:bf:77:
                    4b:f9:a8:8f:50:9f:61:20:04:29:23:33:28:5a:11:
                    92:b9:43:bb:75:a5:24:56:bb:21:6b:e6:71:16:06:
                    33:e6:cd:53:ea:d1:86:a4:6f:a4:54:c3:66:f2:dc:
                    f4:37:5d:82:46:4c:cc:ad:fd:8f:16:9d:c7:cf:56:
                    18:3b:57:4d:88:4b:4d:79:75:b6:14:34:dd:fb:1c:
                    45:30:03:41:07:8a:54:34:cd:3a:4d:dd:29:fc:09:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FB:D4:46:D1:34:88:C1:99:F5:A4:62:B3:20:EA:96:37:33:B3:9C
            X509v3 Authority Key Identifier:
                keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:34:de:9c:42:8d:cc:58:b3:8d:76:9a:e3:af:51:e9:cb:
         ec:c7:ba:7d:18:16:a9:5f:c3:a8:02:a2:81:e5:65:51:ad:db:
         83:54:d4:11:8e:cf:08:bc:23:1b:d4:d7:3c:e0:6f:82:0a:13:
         03:11:a1:5d:ae:87:30:8e:a8:fe:72:30:b9:b4:19:70:51:a8:
         82:df:fa:d5:4f:f5:84:71:d2:49:42:69:a2:c8:47:ce:1c:cb:
         f8:c8:63:4b:15:ed:46:ef:ef:9d:15:aa:79:a2:ab:ca:3b:29:
         4f:6f:1c:d6:70:cb:80:b7:79:92:e6:3a:4c:03:09:52:41:0d:
         71:83:39:3d:b6:7c:96:45:83:e2:52:41:3e:67:e3:bf:14:6f:
         de:11:89:ed:2b:c2:2b:0d:9b:60:29:75:2c:a6:03:dd:cd:dd:
         ab:e9:0f:39:3c:01:9d:8b:9d:7c:40:93:7d:04:ce:e9:d7:1d:
         cd:f2:ae:92:0a:a9:8b:88:c9:47:d1:53:0a:a3:b0:9d:34:db:
         72:57:07:d0:9f:b3:71:40:25:e7:88:1a:eb:2d:c1:3d:ff:27:
         c9:ed:35:7f:42:92:ca:ee:ca:44:ab:f3:16:a9:9c:1b:81:0c:
         e6:d7:60:aa:30:d9:fd:3d:ec:4d:2e:11:21:66:b1:06:b8:a0:
         75:98:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:18 2026 by rpki-client