Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          gTl28AIwhgOAOH3wRCEye23lwsAwz13k/Dd7Q9+M8CY=
Subject key identifier:   29:6A:6F:9A:70:69:26:E4:F9:53:D0:CF:0A:DB:9D:F6:F5:46:B2:F8
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       05F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          05D0
Signing time:             Sat 04 Jul 2026 23:26:27 +0000
Manifest this update:     Sat 04 Jul 2026 23:26:27 +0000
Manifest next update:     Sat 11 Jul 2026 23:26:27 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: 6t/vuz2VYkX3QCkIVq4XwgG2wEnlF2THGKkqJHBe/fI=)
                          2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
                          3: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
                          4: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 23:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Jul  4 23:26:27 2026 GMT
            Not After : Jul 11 23:26:27 2026 GMT
        Subject: CN=6a4996a3-6e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:5f:25:38:64:9b:37:d7:f5:6e:c2:2e:75:
                    fd:5c:c8:38:43:17:4a:a1:59:ac:20:75:69:5b:43:
                    c3:e0:b0:6d:53:69:03:3c:ed:78:b8:51:93:05:76:
                    2f:18:25:1c:13:66:a8:cd:e8:df:3e:7c:39:b2:ec:
                    05:04:37:f9:3e:bd:dd:e5:19:bf:6b:5b:29:8d:1a:
                    09:8b:d5:ed:fd:5f:f0:6b:95:55:aa:ad:e7:c7:72:
                    47:fc:02:d1:36:d4:84:f6:56:92:3e:50:45:ef:e6:
                    36:26:2f:e7:e7:94:90:90:78:46:19:fe:30:d4:dc:
                    13:44:58:75:96:77:81:11:21:68:c7:da:86:03:10:
                    67:83:58:d9:2f:72:b7:25:52:47:77:c9:ba:7e:14:
                    99:51:55:df:c3:4f:43:9c:43:bf:6f:ea:50:36:7a:
                    63:61:7e:fb:bd:05:79:00:15:df:a9:8a:eb:d8:8d:
                    dc:2a:d9:76:f7:00:0c:58:33:a4:fb:2a:f6:54:f7:
                    c5:a8:3b:21:35:be:6d:e6:3f:e8:4c:f0:fb:22:26:
                    ee:e2:7d:d1:ec:54:21:cb:d7:d1:b1:38:db:a1:6f:
                    70:b9:aa:d5:7e:10:2f:09:8d:d3:53:ca:a8:f8:c6:
                    fc:ec:c0:f6:78:4f:9d:04:19:73:43:e3:c1:2c:c7:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:6F:9A:70:69:26:E4:F9:53:D0:CF:0A:DB:9D:F6:F5:46:B2:F8
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:c1:81:c6:0a:d3:29:bc:fa:4c:78:7d:95:f2:a4:f1:b5:
         d8:fe:b8:74:61:fd:44:e9:41:8d:b4:03:71:fc:9c:dc:0f:61:
         24:b7:76:00:69:fa:d3:76:36:82:81:89:3c:15:a7:71:a9:93:
         ef:cf:09:bd:08:24:ef:5a:8d:5f:f1:96:c7:ae:b4:1a:02:c6:
         4a:ba:92:8f:48:a0:b2:24:b1:55:0b:8c:16:ff:6e:00:11:db:
         a4:9a:dd:23:1d:6f:8c:21:0c:fe:ac:86:0f:21:d8:90:e5:e6:
         56:55:8f:85:1a:34:13:ac:5f:f7:37:dc:ac:0b:02:b7:35:4f:
         ef:f0:e1:4a:74:26:47:ef:ec:c0:b5:d0:01:f7:70:14:2b:37:
         d5:3a:a8:de:26:b0:b0:0b:99:48:e6:34:b0:2e:bf:13:6a:26:
         0c:a4:0c:c2:44:c1:1c:10:3d:0c:30:fe:63:f9:fb:84:1b:d1:
         18:e8:0b:1d:47:33:f2:a6:ae:bb:55:41:c6:08:36:4c:58:11:
         b1:eb:69:87:8c:81:a6:1e:5f:13:a3:d5:c0:02:99:c4:61:fe:
         1a:1d:fd:6e:29:c5:5f:6c:a0:ba:ef:67:60:85:1e:ea:c2:b5:
         e5:51:7e:e5:24:59:1b:61:c9:8a:2d:de:9d:07:81:5a:34:fd:
         be:77:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:34 2026 by rpki-client