Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          BTHrmza40pGuvn+fmTGGarDWqbD53mvRMhOWLXNlQu8=
Subject key identifier:   67:CB:BF:8E:1C:B7:27:E5:8C:2E:D9:F7:52:CD:13:5E:FA:20:75:38
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          A4
Signing time:             Tue 03 Mar 2026 04:19:24 +0000
Manifest this update:     Tue 03 Mar 2026 04:19:23 +0000
Manifest next update:     Tue 10 Mar 2026 04:19:23 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: 2VfVIjeKG0AjL8/jipOsVjJIxqfGL6FykWxCcQcugAs=)
                          2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: OU+mhLZle+EP1xDm2dufdCPvv2y3/vJOiy9NfS4fNUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Mar  3 04:19:23 2026 GMT
            Not After : Mar 10 04:19:23 2026 GMT
        Subject: CN=69a6614b-33ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:4c:6a:5b:02:0d:a1:35:34:b6:17:8a:e5:
                    99:59:cb:03:b2:e2:0b:8b:6e:d5:d4:ea:e5:85:5f:
                    fd:ee:b8:15:e7:da:97:50:a4:26:d3:df:14:3c:e4:
                    e0:68:29:e7:a1:c2:c7:7f:c2:38:3a:4c:7c:5e:15:
                    46:02:f8:83:c8:5b:13:55:33:6e:66:f5:c3:38:35:
                    86:33:c1:71:10:a9:b1:c6:9b:9c:5e:16:40:45:40:
                    b7:53:6d:26:1a:8c:df:49:f1:19:db:89:ca:64:c9:
                    80:d8:61:1d:8a:b4:06:e4:f2:96:09:39:42:e6:55:
                    2a:6a:25:d9:06:ab:bb:3c:5b:2f:4f:2a:39:bd:3f:
                    cc:14:8c:1c:65:19:d3:2d:c8:bf:4d:f3:b0:99:03:
                    1b:7b:2f:21:35:4b:33:6a:1f:45:c8:f0:f3:58:70:
                    18:0a:61:ce:23:3c:b8:b5:71:ee:41:77:59:28:48:
                    bf:12:d4:a7:e9:a4:7e:e1:c6:bb:c1:bf:9b:1a:8c:
                    27:55:00:64:e2:d6:32:6d:d8:f2:75:79:93:c0:7f:
                    f2:f0:b0:9f:21:60:33:0f:f8:ac:1f:bf:f5:26:f2:
                    6b:9c:c8:cd:6f:99:43:18:6a:a0:25:b0:d5:55:03:
                    1e:72:c6:a1:2f:ac:78:c0:2b:b0:16:66:2c:2b:0b:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CB:BF:8E:1C:B7:27:E5:8C:2E:D9:F7:52:CD:13:5E:FA:20:75:38
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2c:ce:4c:46:25:61:75:c4:3e:97:c4:dd:95:33:16:fd:34:
         1b:e7:a8:b2:c8:03:3c:2e:69:76:10:b9:94:60:46:4e:63:28:
         d0:f4:a3:19:47:29:11:b4:95:86:d5:7e:cb:f7:4f:ff:02:a1:
         3b:de:5f:48:f4:f7:2e:01:51:21:c1:97:62:cd:36:8c:75:f3:
         8d:e8:13:f8:88:5a:27:26:f1:73:00:17:af:0f:ea:0c:dc:37:
         20:fc:5a:95:cc:81:88:c2:67:a3:bb:8a:ab:b6:8f:14:a3:e0:
         8c:bc:55:a7:b2:ad:5d:dc:2b:bc:33:48:92:fb:76:00:e2:f4:
         da:4d:06:b4:c2:db:8f:46:44:b9:e2:70:4d:28:90:3f:c4:8c:
         28:80:14:fa:7d:3e:7c:47:91:17:c2:ed:72:bb:5a:7e:c7:f2:
         3d:34:cb:c1:40:20:a0:c4:c7:0d:ef:7d:96:6c:2a:0c:e4:fa:
         88:90:56:e7:ac:c1:33:79:da:dd:8f:c4:69:d7:ab:8a:ea:ae:
         69:e5:3d:dc:10:75:a3:97:63:27:92:fe:2a:1e:ec:71:1e:0f:
         c5:c3:ff:81:b3:37:6a:4c:05:e8:33:cb:0c:ad:a6:ee:d2:c4:
         33:21:0b:00:81:a0:71:36:e7:10:8b:4c:a5:1f:c6:6e:bb:9e:
         49:6a:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:32:25 2026 by rpki-client