Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          0gU9qSjoR42oRPsfVwVX8My82cPdzSCbNxI32qmehZw=
Subject key identifier:   0C:A0:73:15:72:71:7D:6A:23:55:FA:E9:8F:63:89:EC:C5:0E:F1:19
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          0383
Signing time:             Mon 01 Jun 2026 01:32:29 +0000
Manifest this update:     Mon 01 Jun 2026 01:32:28 +0000
Manifest next update:     Mon 08 Jun 2026 01:32:28 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: b2qRX0zRU+I3rzoAZAlqqOJGJ0xpXpzh/9DHM+GQicA=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: wno/Zpmf7krAlEHHQVbLBHpNiXys3vvcREcGQsemRTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 01:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Jun  1 01:32:28 2026 GMT
            Not After : Jun  8 01:32:28 2026 GMT
        Subject: CN=6a1ce12d-0229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:57:e8:c9:4e:9b:e3:de:a0:c0:19:03:29:
                    22:d8:86:83:f7:21:3c:a5:4a:b0:b2:7b:f2:cf:1c:
                    f7:44:18:09:df:41:c7:4b:4b:df:be:f4:fe:26:e6:
                    c5:ed:53:93:ce:d6:b7:3c:d2:ad:ba:57:38:10:30:
                    fa:9a:23:53:92:70:e2:1a:4d:fe:17:95:75:3b:92:
                    fd:da:78:d5:98:ac:f0:b0:a7:2b:c3:ba:c0:71:3c:
                    f1:66:4a:de:25:a1:fd:9d:7f:03:20:7e:03:7d:55:
                    35:af:e6:13:fe:96:db:60:af:f1:81:6b:4a:16:f9:
                    2f:ed:f0:95:7e:cf:38:c6:3e:0e:6b:a3:29:5d:0b:
                    56:35:a8:ba:f5:0e:6f:66:78:a5:58:62:f3:74:bf:
                    21:28:55:5f:30:57:62:39:25:41:d2:27:3b:5d:e6:
                    5f:bf:f0:45:33:42:8d:d0:ca:a2:b7:00:22:1f:8e:
                    f6:d1:81:22:c1:35:53:cc:85:7c:87:ed:9e:76:07:
                    a8:27:97:ac:5f:6a:ac:ec:51:43:dc:64:36:82:af:
                    dd:19:02:06:08:84:ce:da:5d:44:75:97:38:45:99:
                    24:71:0d:7e:ff:0a:51:17:d8:b2:42:99:3e:92:ee:
                    16:3c:35:ff:51:a6:52:25:cb:6f:a4:57:ec:2f:f5:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:73:15:72:71:7D:6A:23:55:FA:E9:8F:63:89:EC:C5:0E:F1:19
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:84:16:97:7e:04:6e:44:58:c1:5f:65:6d:ee:28:6e:24:
         81:28:18:17:57:39:3c:0a:b4:ba:fd:b3:fd:04:0a:6d:c4:27:
         a7:34:4d:6f:5e:32:f5:5e:f3:d3:9e:fa:c3:06:65:7a:47:eb:
         dc:74:07:97:95:d7:4f:b9:91:0e:ad:30:64:ec:ba:9d:06:ab:
         c6:31:09:4e:ee:1f:cf:0f:da:a0:d6:22:bb:d3:79:f8:3d:8f:
         5f:ff:0e:c7:28:43:32:5a:f1:87:d9:5c:8f:36:40:c2:f7:d2:
         d6:74:2c:f7:fe:85:38:29:f1:bf:0a:bf:01:e8:24:35:a0:a3:
         a3:a5:0c:9c:bd:a3:79:1a:ab:cd:50:d1:70:09:55:66:30:60:
         8a:3d:17:12:58:e8:7e:36:24:07:82:54:13:1e:e1:fe:2e:3a:
         04:61:5d:2a:4f:f7:13:be:7c:4c:4c:39:d1:bd:38:92:b6:46:
         a1:a1:28:03:40:f5:06:6b:da:36:4f:34:c1:65:d3:a8:8c:15:
         66:dc:a8:48:b9:e4:32:4d:79:49:a9:1d:10:03:42:55:e3:4b:
         f3:36:94:ad:65:53:92:57:f3:18:fb:e1:0d:de:42:7d:21:6e:
         a5:59:2b:3a:75:aa:5d:ca:36:b5:97:d1:75:fe:d0:6f:fd:df:
         78:84:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:15 2026 by rpki-client