Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
File:                     lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json)
Hash identifier:          IY92JT6Qw5vFYAN8U0dKeaObsullGplEfdNBEkjqCio=
Subject key identifier:   E3:06:82:A1:42:49:3C:28:5F:4B:C6:4B:8D:34:6D:2A:84:E5:DD:8F
Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7
Certificate issuer:       /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
Manifest number:          51
Signing time:             Sun 05 Apr 2026 07:33:26 +0000
Manifest this update:     Sun 05 Apr 2026 07:33:25 +0000
Manifest next update:     Sun 12 Apr 2026 07:33:25 +0000
Files and hashes:         1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: cHF7zvry9dX0wLc7ojf7mvpnLF1SpRN7CfpMzgpDb34=)
                          2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: gQ9o3ShWhFSXckCOxiyfc9G9ysU3P8Ay4D9+aX74JkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl
                          rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7
        Validity
            Not Before: Apr  5 07:33:25 2026 GMT
            Not After : Apr 12 07:33:25 2026 GMT
        Subject: CN=69d21045-a8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:f2:e9:19:62:32:13:85:de:ca:f4:8c:ca:
                    ee:85:ff:1c:97:e6:00:6e:9b:8c:13:ca:09:51:a7:
                    65:66:7b:6d:26:15:67:45:60:22:e4:b4:a1:c1:19:
                    4b:b1:a7:62:61:77:ce:a4:be:3a:bd:52:71:3f:f6:
                    08:07:83:20:17:13:f1:ed:5a:72:c1:88:29:bb:cc:
                    02:e3:b9:d0:0d:a6:21:60:aa:d0:3b:70:75:2b:9a:
                    60:c2:31:47:b1:45:16:d1:ae:57:9f:be:ee:3a:3b:
                    91:d1:32:bd:ff:35:c2:fa:69:75:d5:55:2c:6a:37:
                    87:4b:d7:c3:40:a3:b4:68:90:86:95:56:32:59:c5:
                    d0:b6:71:36:01:22:42:ce:ee:8b:7e:af:4e:10:59:
                    5e:06:44:dd:41:cb:aa:1f:d5:86:9c:70:4a:c5:c7:
                    04:29:cb:9b:5f:b5:8a:95:4d:70:97:42:a7:91:67:
                    f5:8d:e6:5a:a6:66:7c:14:40:35:43:e9:aa:28:c9:
                    78:51:63:ce:f9:0a:7c:1c:2e:d8:30:1d:7f:4c:b2:
                    12:ad:b9:e4:55:24:02:9c:aa:28:c5:f9:2e:2e:df:
                    27:7e:23:8d:7e:b8:30:76:39:7d:f8:61:10:62:5a:
                    00:c1:ae:52:a9:dc:77:ba:3e:99:1a:51:f2:83:a8:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:82:A1:42:49:3C:28:5F:4B:C6:4B:8D:34:6D:2A:84:E5:DD:8F
            X509v3 Authority Key Identifier:
                keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:87:9e:8b:8e:ef:98:61:1a:db:bb:f7:82:4f:80:6f:67:
         a9:3b:1c:34:2f:16:ec:fb:d3:12:73:fe:77:93:28:c1:fb:93:
         df:c6:b3:04:cd:00:0f:54:24:be:5d:c1:1e:a9:6f:be:04:9d:
         1f:6a:5c:0b:3d:6f:4f:e8:62:b4:28:58:c7:19:06:5c:77:d0:
         aa:81:f0:6d:55:b9:15:cf:41:eb:53:a2:7b:f1:02:bb:92:e0:
         9e:e1:e2:d4:e3:74:e4:f0:aa:74:50:c6:1f:2d:72:8c:de:92:
         2a:39:62:9e:d9:d0:5b:13:2a:2b:c8:c2:8b:f4:a2:70:54:0f:
         7a:8a:9e:53:1e:c7:1e:3f:0d:71:58:4d:bd:a9:ae:8b:92:c9:
         3b:0b:af:7b:92:7a:46:7b:29:4f:cd:97:5e:73:6d:0f:1f:d2:
         01:db:80:48:16:ac:96:43:e3:8d:88:2e:67:32:85:a0:2f:12:
         2d:ab:8c:9c:6b:13:45:42:61:66:d7:a3:82:d8:11:99:6f:b8:
         7e:22:f6:6d:a9:6d:d6:ec:40:dd:e9:9a:b2:f2:6a:47:e6:32:
         dd:6d:29:72:5d:23:4a:f8:4d:6f:4c:75:b7:1d:fe:f6:e3:3d:
         e4:73:f1:17:42:e7:a6:e6:96:a7:fd:7e:a9:a4:fa:c5:1d:c8:
         e4:2f:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client