Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          8X/7aWsCvwPUHVrls5an2FXfVhYCt8FI+PGuZag+3Mk=
Subject key identifier:   51:74:C0:8E:4B:C8:B2:6A:A6:07:07:37:0D:25:DF:71:F6:88:8E:61
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0C18
Signing time:             Sun 26 Apr 2026 18:44:36 +0000
Manifest this update:     Sun 26 Apr 2026 18:44:36 +0000
Manifest next update:     Sun 03 May 2026 18:44:36 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: ODst2dInQX36wVKJhrAx6RCnZzc0oRZbP+kGtP6uAiU=)
                          2: D9173AE459E811ED85614349C4F9AE02.roa (hash: leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=)
                          3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: PKj9sFGG8PoYLlt4SuP/keqFiSjZV6/K10jPwAvS8jU=)
                          4: D7D5B86859E811ED85614349C4F9AE02.roa (hash: bTCwQurYG8Xk94vaUk8PvdDkAz4L8d6mn3Wu2OIibFA=)
                          5: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 18:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3139 (0xc43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Apr 26 18:44:36 2026 GMT
            Not After : May  3 18:44:36 2026 GMT
        Subject: CN=69ee5d14-bcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:e8:02:ba:ac:07:e0:5a:03:5a:76:b1:52:
                    b9:22:47:57:98:ce:bd:c3:87:9b:d6:af:a2:3d:de:
                    76:14:1f:be:99:fb:a1:38:2b:3e:1f:25:1c:63:95:
                    39:d0:16:f0:89:56:4e:3e:fd:71:7c:9a:4f:7e:20:
                    a0:de:99:f1:6a:d5:12:69:0d:13:ec:d1:fb:3d:1f:
                    6f:01:99:c7:68:b2:f2:b9:fc:87:68:56:ae:bb:f9:
                    bb:f0:c3:04:1d:d0:79:de:93:2a:71:07:ae:df:dd:
                    88:f8:36:92:19:1d:80:86:f3:f8:ed:1c:43:e5:4a:
                    3d:65:5f:50:75:2f:10:26:f4:d0:aa:ae:ee:70:07:
                    b2:59:7a:73:8c:c5:3d:a8:38:2b:86:4a:62:01:98:
                    67:8e:76:5b:cc:b6:59:87:8b:63:b2:29:0e:f3:b3:
                    5a:3b:f1:80:92:29:a6:c2:2a:d3:51:a4:13:ed:c2:
                    0d:22:5f:08:35:3a:7b:ec:f3:db:9e:91:8a:28:c5:
                    f7:8c:fd:98:b0:4c:fe:a8:2d:77:a6:ad:c8:26:0d:
                    dd:c3:6d:e1:c9:db:02:0e:8a:17:3c:dd:da:fc:fb:
                    41:ab:8f:ac:4d:65:7a:a9:11:68:d1:db:5f:7e:a9:
                    89:0b:09:8c:7e:3a:49:2f:ea:a2:0e:48:10:e5:74:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:C0:8E:4B:C8:B2:6A:A6:07:07:37:0D:25:DF:71:F6:88:8E:61
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:c4:21:be:4b:ee:5f:37:c9:da:d5:b1:a3:79:c2:82:4c:
         ca:46:d1:b1:dd:da:a4:37:a8:0f:5d:13:5d:3a:e3:f7:1b:84:
         aa:28:59:0b:20:2e:35:d5:4f:0a:ba:d8:7e:9c:e1:3b:9e:bf:
         7d:85:45:93:86:8c:58:bc:be:50:21:e7:c3:c6:65:58:5d:11:
         22:a4:33:20:82:1b:db:64:e6:87:e1:83:48:7c:d1:40:3f:11:
         04:ad:f5:dd:70:95:3c:74:67:f3:1a:64:68:2f:2a:c1:85:24:
         15:f5:c8:d4:37:6c:4a:29:44:7c:31:92:ae:e3:68:58:25:e9:
         73:d8:3e:e1:0b:23:e0:5d:c0:dd:e2:68:d6:07:16:11:0c:23:
         87:a8:62:4b:e8:30:b8:b8:36:d7:6a:a4:9c:39:6f:f0:52:98:
         63:d1:f2:07:61:c3:8a:ab:51:3d:6f:4d:0c:4e:e8:4b:af:a6:
         23:f8:13:b9:48:84:65:3a:35:ec:9e:70:cb:38:04:9d:c8:c5:
         6c:9f:fa:7f:5c:51:4f:52:55:24:4b:be:3b:25:ea:8d:09:5e:
         91:7c:97:0a:67:4f:c5:ba:92:14:56:02:ad:13:03:e8:b9:fd:
         91:79:c6:74:f1:c4:bb:28:08:0e:6d:4a:13:59:24:3f:6f:b8:
         d6:5c:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:46:04 2026 by rpki-client