Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File:                     lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier:          XVzUpWOCA2AomCnjOa0shWApQswI4/apT3Uym4QWQyE=
Subject key identifier:   1A:3A:41:66:21:C9:08:59:DC:87:CC:61:3A:09:18:6A:A4:EB:CF:F2
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer:       /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial:       0C3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number:          0C1E
Signing time:             Fri 22 May 2026 18:49:01 +0000
Manifest this update:     Fri 22 May 2026 18:49:00 +0000
Manifest next update:     Fri 29 May 2026 18:49:00 +0000
Files and hashes:         1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: jxiJ8u9mgOHFQYx0Q309iSr13fH3vSoKAOWc7iMYx/4=)
                          2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=)
                          3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 18:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3131 (0xc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
        Validity
            Not Before: May 22 18:49:00 2026 GMT
            Not After : May 29 18:49:00 2026 GMT
        Subject: CN=6a10a51d-5daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:29:77:19:21:07:f4:64:48:15:fc:c1:21:
                    aa:73:ec:9a:6b:d5:b5:3b:37:ce:02:62:29:94:9e:
                    fc:e9:0f:a5:f2:c2:3e:c2:71:07:b1:69:b6:ae:9a:
                    dc:2c:6b:69:89:06:21:23:e1:40:ec:8d:68:f4:be:
                    2e:a1:c4:2e:9d:8e:28:64:93:c7:43:68:29:b1:ba:
                    8b:7b:d8:d3:5b:5e:f3:72:1a:ac:61:09:ec:72:9b:
                    26:04:ac:bf:87:4d:57:69:39:b9:e3:f4:be:4e:18:
                    c1:51:6b:00:80:c9:fd:89:89:d4:56:2d:2d:eb:55:
                    0a:5b:93:c6:8c:b8:a3:0a:44:0b:bf:26:78:d0:84:
                    3c:93:15:0e:c8:40:5b:fb:f9:46:6e:ee:b5:1b:8d:
                    db:c0:90:ed:b9:fe:e8:46:54:56:f2:72:09:df:40:
                    0d:83:c8:e4:20:01:bd:a7:b4:74:c3:93:b4:1b:0b:
                    f4:97:b3:f1:e8:70:ab:6f:30:89:aa:df:cd:0e:88:
                    ef:9a:8d:bb:85:30:91:2b:3c:f1:a5:e0:30:23:5e:
                    48:5b:17:66:1f:e4:cb:74:e9:75:d1:2d:ce:fb:be:
                    c6:68:f0:72:fb:65:9d:7d:16:c6:c9:06:30:a8:ca:
                    3c:7f:1b:87:7b:17:03:54:14:47:b8:1f:3f:c8:57:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3A:41:66:21:C9:08:59:DC:87:CC:61:3A:09:18:6A:A4:EB:CF:F2
            X509v3 Authority Key Identifier:
                keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:0d:0c:a1:b4:e9:55:71:66:3d:91:bb:fe:52:77:79:5d:
         82:5b:18:23:77:d9:40:10:7f:ee:a9:86:bf:4f:f9:69:62:5d:
         1f:28:a2:2c:bd:a9:09:eb:bc:31:2d:e0:ff:d1:98:0e:ec:85:
         e5:aa:cb:d8:65:17:48:4a:eb:0b:d7:f8:c0:27:94:5a:8b:49:
         0b:71:b1:c4:b0:bb:03:5a:17:f2:79:e5:38:44:84:ed:8f:fb:
         2d:81:13:72:3f:b0:d3:16:07:0b:57:21:ee:92:bd:cb:3b:0d:
         e8:81:09:83:a0:c2:03:f9:40:42:99:d8:a7:8b:eb:de:5c:08:
         76:82:bf:51:b4:a0:53:1d:37:bb:42:b9:c9:7e:73:84:c2:71:
         2e:9d:6a:5a:48:9b:38:69:fd:52:4a:89:9b:4e:5c:48:96:c5:
         35:ce:77:d5:7a:5e:ff:e1:8d:b6:ce:79:36:2b:05:ee:de:ec:
         e8:c4:fc:29:1a:f8:24:a7:70:ac:9b:69:2b:8f:52:a5:15:b9:
         3d:8c:2d:86:ec:5d:39:16:f8:3f:62:cd:b2:16:24:25:87:00:
         13:76:3b:b5:91:73:2e:ff:fa:c8:73:ce:d4:7a:35:34:53:d2:
         5c:f5:15:51:8e:c8:7a:3a:5b:6d:b9:84:66:ee:aa:48:4d:4f:
         4d:be:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:58 2026 by rpki-client