Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          TlgqfZXXQOZLQlfRJqiraKebcLqBlxrhBpPlF7Y1alE=
Subject key identifier:   9A:80:7E:31:19:58:38:86:A8:9D:7F:F2:BE:E0:E4:ED:BF:58:18:28
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          D4
Signing time:             Mon 01 Jun 2026 04:54:41 +0000
Manifest this update:     Mon 01 Jun 2026 04:54:40 +0000
Manifest next update:     Mon 08 Jun 2026 04:54:40 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: gCNFFGpFy640BdnUHhpYLsMP2KczcEJqz+VTtZrqw1k=)
                          2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: x0lQmzxaHQ2KjFQfdwH7Bd9KOXdy+vF4ix2AJe32Cio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Jun  1 04:54:40 2026 GMT
            Not After : Jun  8 04:54:40 2026 GMT
        Subject: CN=6a1d1091-0b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:78:dc:e8:26:87:6a:0b:02:1d:c5:f1:1b:
                    0e:dc:9e:fb:2c:fc:05:0c:46:a1:5f:a3:cd:5d:f8:
                    1e:32:94:16:86:68:48:f4:86:33:94:0d:28:c9:b5:
                    e3:7a:a4:ad:d3:9a:0b:39:0e:23:1f:11:17:10:7c:
                    dd:9e:a0:80:90:f9:e4:b3:71:0a:2c:65:b3:bd:d5:
                    a5:73:2c:9d:a9:c3:b3:57:e8:f5:56:92:16:95:64:
                    7c:45:dc:de:2d:cb:3e:c0:bf:b3:9a:4f:75:ce:0f:
                    c0:6a:62:8d:49:11:fd:14:47:42:86:2d:3d:b3:46:
                    a9:20:10:8c:44:eb:44:77:12:88:d2:48:66:95:4a:
                    e2:10:26:45:1a:81:63:40:f8:9c:18:4d:da:bc:27:
                    79:ef:e1:ad:37:4a:da:d0:86:3f:6c:c1:f0:1d:cd:
                    4b:c1:bf:ed:28:3c:01:2e:eb:ff:cd:4b:2a:0a:ba:
                    aa:f6:3c:fe:61:ee:ae:f6:26:ec:fa:1e:5e:5f:33:
                    f7:b1:f2:f5:c4:3b:a8:b9:a3:0a:a5:b0:cc:60:f7:
                    ee:1b:f9:c2:d8:59:64:5f:7d:bc:d8:89:86:33:dc:
                    6a:d6:91:aa:6f:3d:40:2a:6c:0b:e8:bb:9e:51:3c:
                    c9:cb:de:45:b4:d4:27:ed:cd:a7:e4:b0:e3:6e:fc:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:7E:31:19:58:38:86:A8:9D:7F:F2:BE:E0:E4:ED:BF:58:18:28
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:59:10:27:81:63:89:42:aa:43:e9:f6:87:da:99:46:d8:f4:
         5f:43:46:c6:49:a0:8e:dc:82:fc:83:af:0e:36:26:c9:63:96:
         d3:bd:8d:ef:59:3d:86:bf:23:b8:3a:21:ee:2f:0c:37:9d:b1:
         64:45:33:c7:73:97:2c:a8:e7:6f:7e:02:c0:84:46:95:d7:1e:
         ca:f4:69:49:7f:fe:0f:2e:da:db:89:89:6e:2c:29:af:c6:e7:
         17:8b:7b:9d:98:58:46:e7:2b:ee:26:c5:a4:f0:8c:d3:c7:3d:
         40:5d:72:af:b7:cb:bd:1e:f5:33:4f:e9:8c:d4:f8:fc:28:ff:
         ed:47:1a:d3:77:2a:6e:bd:5c:e8:5d:59:75:cc:bc:a3:06:b4:
         cc:f0:83:62:77:7f:c5:e5:f7:8c:b3:d9:49:77:28:3f:58:25:
         32:ca:58:11:67:f6:18:8d:26:ee:f7:9d:c3:12:aa:77:68:6b:
         4b:45:bb:01:37:b3:a7:0a:b4:8e:9a:23:b2:c4:d6:7a:93:fc:
         ac:ca:69:97:f9:b0:ae:d9:71:69:6c:0b:7b:7b:11:f0:a8:98:
         df:33:2b:25:f8:2c:10:be:39:d6:b6:f0:2b:fd:68:b0:f4:20:
         27:0b:e8:2d:9f:79:21:3a:f2:83:da:99:da:66:f0:ba:fa:3a:
         80:a7:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client