Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
File:                     LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json)
Hash identifier:          PmY/fcujebQjVJ4aXuQjqishXlg8KjUEkqxKd9Ml5os=
Subject key identifier:   13:E4:A2:FD:9F:E3:A5:31:54:77:79:BA:F6:E8:7C:10:D6:1E:10:01
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
Manifest number:          0A32
Signing time:             Sun 26 Apr 2026 19:40:36 +0000
Manifest this update:     Sun 26 Apr 2026 19:40:36 +0000
Manifest next update:     Sun 03 May 2026 19:40:36 +0000
Files and hashes:         1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: ORo95U478CJyLurSwf4+ckX+vKZnZSvIP99vJRf0aro=)
                          2: 76A97C669D2C11F0AB031860C4F9AE02.roa (hash: 8KlVgmZAX4O385wf8K4L0jF1lqlsm5dBNZwyT+vaC2E=)
                          3: 87818166020D11EF916F0D65C4F9AE02.roa (hash: ornbPFQGfx6/yfJwqQC5E8pEyY5xP+J6SQ5GeX/1iXA=)
                          4: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: axE8boHX8yd5f+z+47p5pFgyCJbzp0ULGAKyGmC4lXA=)
                          5: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: I522j1UP6rkopIfKtloa9IQO+dyn5kwps6ThFrAaJLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636 (0xa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Apr 26 19:40:36 2026 GMT
            Not After : May  3 19:40:36 2026 GMT
        Subject: CN=69ee6a34-baee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:33:f8:75:78:c7:89:4f:16:a8:3f:ce:8b:
                    7a:ad:84:d1:f8:de:cf:4a:a6:5b:e9:71:3c:11:26:
                    4d:0d:d6:61:73:b3:f3:e3:a6:93:36:ff:79:39:76:
                    3e:60:eb:4f:b1:02:d5:b6:6d:15:71:ea:6b:16:f6:
                    25:d2:81:31:8a:e6:79:7e:98:0d:7f:8c:b8:df:e1:
                    fa:86:3d:93:18:ad:d6:8d:1f:7c:1a:59:61:53:9c:
                    15:ad:6c:39:9d:41:4c:01:6c:ef:0b:1e:cd:52:1e:
                    6a:b7:44:95:19:53:1a:48:f8:d5:af:93:59:32:ab:
                    c2:8c:65:b7:81:65:f1:2f:18:ea:2d:b4:15:b1:4d:
                    0c:22:2b:42:b3:8f:0b:89:3a:b8:9b:bc:78:f1:16:
                    29:d8:a3:e6:d0:de:74:09:3a:ca:88:25:1a:92:b2:
                    f7:ca:78:bf:f2:1a:7e:77:ef:87:9e:cb:ca:9c:62:
                    fb:57:05:28:ca:cc:83:2d:41:9b:21:c0:b9:59:f4:
                    ad:fd:f7:38:bd:ca:bd:1b:c0:62:a1:ef:56:41:da:
                    1b:ae:2b:56:99:68:27:a7:f3:14:69:94:10:15:e2:
                    76:87:af:3e:1f:ed:75:30:ba:5d:8f:41:b9:21:08:
                    0a:df:02:4e:18:bd:74:29:18:53:b8:85:2f:c5:1c:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:A2:FD:9F:E3:A5:31:54:77:79:BA:F6:E8:7C:10:D6:1E:10:01
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f3:5e:dc:b5:64:2b:de:5f:87:b2:ef:0e:23:11:41:8c:65:
         a6:5a:04:8d:19:67:38:2d:4d:77:a7:dd:7a:c8:f4:26:e4:e2:
         2f:c3:e1:e5:2d:65:78:41:55:29:03:7c:7c:e2:f2:e0:4d:3d:
         b3:6d:e8:bd:38:09:50:cf:38:cf:90:ac:93:5b:e4:95:48:ec:
         62:d3:23:1f:63:7b:b8:5b:f1:09:87:a2:68:b0:5d:5e:73:9b:
         97:89:ae:2d:08:c3:67:f5:fa:14:c7:0a:fd:a9:49:06:68:61:
         b9:27:1b:df:a9:67:d3:c2:ad:6f:8c:d2:7a:92:91:72:8f:c8:
         32:34:0f:25:80:f2:5b:cd:5a:1d:36:ee:ba:8b:4e:db:aa:02:
         72:df:b5:4f:4b:2a:91:12:74:55:28:57:e1:02:f9:0b:ef:f5:
         af:d1:fe:2b:04:67:d7:99:03:96:ec:fc:ac:16:d3:2e:df:15:
         e1:fe:25:48:9c:e2:ce:8d:a8:21:63:dd:6b:cb:47:93:36:62:
         61:b3:81:17:11:68:b0:6a:dd:71:b3:0a:0a:09:e1:71:0a:ba:
         51:4f:87:39:52:7e:d9:54:ce:72:47:4f:c5:c6:21:22:9b:73:
         90:da:84:71:9f:5c:69:ec:10:9e:5f:95:bf:d2:e9:97:d9:a1:
         d1:ec:b8:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5MEMxMTAvBgNVBAUTKDJENTg5ODkwNDhDMjE5RjAxMDg4QUU3MkJGQUUwOTcw
REY1REE2MzYwHhcNMjYwNDI2MTk0MDM2WhcNMjYwNTAzMTk0MDM2WjAYMRYwFAYD
VQQDEw02OWVlNmEzNC1iYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5sz+HV4x4lPFqg/zot6rYTR+N7PSqZb6XE8ESZNDdZhc7Pz46aTNv95OXY+
YOtPsQLVtm0VceprFvYl0oExiuZ5fpgNf4y43+H6hj2TGK3WjR98GllhU5wVrWw5
nUFMAWzvCx7NUh5qt0SVGVMaSPjVr5NZMqvCjGW3gWXxLxjqLbQVsU0MIitCs48L
iTq4m7x48RYp2KPm0N50CTrKiCUakrL3yni/8hp+d++HnsvKnGL7VwUoysyDLUGb
IcC5WfSt/fc4vcq9G8Bioe9WQdobritWmWgnp/MUaZQQFeJ2h68+H+11MLpdj0G5
IQgK3wJOGL10KRhTuIUvxRz5bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPkov2f
46UxVHd5uvbofBDWHhABMB8GA1UdIwQYMBaAFC1YmJBIwhnwEIiucr+uCXDfXaY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjkwQy9EM0Q1ODQ4QzhG
QkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dmQVFpSzV5djY0SmNOOWRw
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWaVlrRWpDR2ZBUWlLNXl2NjRKY045ZHBqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjkwQy9EM0Q1ODQ4QzhGQkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dm
QVFpSzV5djY0SmNOOWRwalkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw/Ne3LVkK95fh7LvDiMRQYxlploEjRlnOC1Nd6fdesj0JuTiL8Ph5S1leEFV
KQN8fOLy4E09s23ovTgJUM84z5Csk1vklUjsYtMjH2N7uFvxCYeiaLBdXnObl4mu
LQjDZ/X6FMcK/alJBmhhuScb36ln08Ktb4zSepKRco/IMjQPJYDyW81aHTbuuotO
26oCct+1T0sqkRJ0VShX4QL5C+/1r9H+KwRn15kDluz8rBbTLt8V4f4lSJzizo2o
IWPda8tHkzZiYbOBFxFosGrdcbMKCgnhcQq6UU+HOVJ+2VTOckdPxcYhIptzkNqE
cZ9caewQnl+Vv9Lpl9mh0ey4sw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:30 2026 by rpki-client