Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File:                     LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier:          cy8FZDh7ZsJOElE7mSpBXLFoTHJKh2lp6mA0ZkJDZuE=
Subject key identifier:   74:F6:D1:C9:C6:84:F4:62:C5:FD:D2:1D:16:5A:37:E3:A5:90:34:67
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       0982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number:          096A
Signing time:             Mon 22 Jun 2026 20:09:33 +0000
Manifest this update:     Mon 22 Jun 2026 20:09:32 +0000
Manifest next update:     Mon 29 Jun 2026 20:09:32 +0000
Files and hashes:         1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: hdPHRCtyfq1IvW0BIiFr54lADowNm6+5fRZdkKVVShw=)
                          2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Jun 22 20:09:32 2026 GMT
            Not After : Jun 29 20:09:32 2026 GMT
        Subject: CN=6a39967d-988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:bc:86:bb:2e:c4:1a:71:24:06:c2:06:bd:
                    78:c5:6a:87:7b:0a:4e:ad:f7:32:b7:fe:a5:8a:18:
                    bf:c9:ae:23:4a:15:e6:70:ae:1f:17:cc:29:66:4e:
                    26:df:e9:3f:d2:3f:de:ed:a9:48:ec:fa:26:91:77:
                    ce:91:79:26:ee:f5:5a:91:8a:82:29:04:f9:de:5b:
                    0d:6a:c2:e0:aa:a5:bc:f3:9f:4a:40:21:a8:34:3f:
                    26:70:0d:67:81:ff:2b:c0:f5:66:d6:40:59:7b:9b:
                    b9:07:bb:12:a0:54:e6:e3:d4:91:ff:48:0d:82:d2:
                    a8:eb:8a:ea:54:f0:80:46:33:70:e5:90:ec:73:30:
                    00:13:eb:48:9b:22:54:7f:ae:29:98:84:95:07:e4:
                    62:8e:4f:f4:e0:74:9f:9c:44:5d:1e:9e:96:a7:01:
                    33:6b:45:1c:a6:e7:d4:4b:72:a7:11:99:1c:23:5b:
                    a5:63:d2:08:5a:71:f4:12:d1:de:89:77:e2:1b:79:
                    ae:46:9c:d7:49:35:88:56:f6:e2:26:b1:1f:c0:b5:
                    c1:95:93:a9:7e:bd:6a:12:c8:70:c2:8d:9a:fc:24:
                    df:c2:c8:65:42:e2:a6:5d:52:67:25:10:34:3e:e1:
                    f7:84:e5:86:1b:e7:fe:48:b7:e1:9a:cb:10:cb:61:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:D1:C9:C6:84:F4:62:C5:FD:D2:1D:16:5A:37:E3:A5:90:34:67
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:0b:74:0f:36:df:23:8f:fd:8a:27:f6:57:f9:bb:9e:83:
         6e:38:95:9d:65:0f:70:01:bf:8e:0b:6f:11:44:cf:3e:31:32:
         44:f5:26:82:77:49:83:18:82:5f:9c:3f:c1:1d:a0:b5:52:ca:
         93:59:01:90:30:42:9b:d5:83:a6:da:37:75:aa:ba:ee:dc:ae:
         9f:05:e5:46:70:c6:ef:4e:ea:76:66:68:79:65:5f:dd:ca:bc:
         32:15:d5:26:0c:d7:40:cd:d9:71:1a:ed:bc:ae:48:8a:a0:5b:
         07:88:c5:b7:d3:ad:9a:7a:7f:be:53:19:79:5b:64:b4:40:98:
         9f:75:02:49:66:b8:3d:73:b9:0b:47:b9:cf:69:f8:21:1e:25:
         f4:f4:d3:bb:19:2c:e6:eb:89:fb:fa:7e:cc:55:f6:c0:30:b5:
         11:14:42:81:90:2d:5c:32:34:78:6c:58:cf:a6:fd:21:3b:50:
         6c:a6:f9:b9:6d:44:9d:e9:40:f5:41:6c:7b:58:f0:41:15:a7:
         68:2d:df:3e:a5:24:8c:4d:8f:ec:1a:23:4b:73:27:5f:7e:33:
         08:07:93:28:32:d7:9b:34:7e:d0:ce:8d:b2:07:0f:7b:14:d9:
         9a:f5:c3:e9:ee:5f:12:68:c0:25:92:db:a0:0e:e1:f4:d2:21:
         4d:66:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:22 2026 by rpki-client