Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          B2HsPpTmTK9y0LWapYH7Z7cL2V4t0bIg4T74cpk0Yys=
Subject key identifier:   98:4E:F6:FB:60:0E:6F:CA:CC:7E:99:81:35:D8:F0:7E:28:3D:87:76
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       03D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          03CA
Signing time:             Mon 19 Oct 2026 00:41:00 +0000
Manifest this update:     Mon 19 Oct 2026 00:41:00 +0000
Manifest next update:     Mon 26 Oct 2026 00:41:00 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 7Uwc7vZK9JNaBCzgLizu099CnhLN35aBGk0rqeOBrDI=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: wno/Zpmf7krAlEHHQVbLBHpNiXys3vvcREcGQsemRTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 00:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Oct 19 00:41:00 2026 GMT
            Not After : Oct 26 00:41:00 2026 GMT
        Subject: CN=6ad5671c-9665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:35:72:b1:1a:73:a7:51:4e:68:de:9d:5b:
                    47:92:19:0f:2c:b7:7a:45:34:64:71:5b:4b:5a:21:
                    69:00:fc:d3:9e:4b:20:ab:39:01:eb:ca:40:79:b3:
                    4d:0d:63:b1:5f:de:98:1f:f3:74:bd:71:d4:06:8f:
                    4b:32:ec:3c:59:d8:d4:87:01:e1:63:5b:9e:d8:70:
                    7f:e0:80:df:1f:f3:42:ef:1b:2b:9d:03:df:f8:bd:
                    96:4c:ed:60:34:31:0a:aa:8c:bd:f3:2e:4a:93:35:
                    87:4d:dc:86:87:bb:a3:cf:19:18:94:e7:ae:1f:1b:
                    92:72:85:88:29:4d:7e:b4:39:7f:73:d0:24:7c:41:
                    71:98:71:22:a1:87:a5:f2:29:6b:64:28:a0:60:e2:
                    96:be:e5:26:21:7d:17:d8:a0:5f:28:1d:92:39:c8:
                    85:0a:c4:e2:7a:c1:13:73:ad:a6:71:9e:41:fe:44:
                    fe:5b:67:ca:f7:07:ac:fa:d7:bd:b5:fd:b2:e2:c6:
                    68:65:9a:1f:fb:9d:5f:92:bc:df:19:3b:d5:63:be:
                    f0:33:e6:cd:13:32:67:d8:32:8b:f5:35:31:e1:28:
                    b2:f1:74:16:1a:81:87:f0:1d:a8:74:ca:7d:cb:4b:
                    b7:01:42:66:60:25:c2:31:5e:79:2a:f0:cd:cb:3b:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:F6:FB:60:0E:6F:CA:CC:7E:99:81:35:D8:F0:7E:28:3D:87:76
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:dd:db:07:ad:e4:42:5a:ab:38:58:5c:df:3e:af:ba:1a:95:
         f1:6d:27:fa:fb:30:85:08:73:d1:d8:1d:66:ea:38:de:c1:68:
         00:5e:46:59:67:e9:a1:c0:61:b9:de:2f:13:81:22:87:41:ad:
         a2:5e:d0:20:7e:43:58:5a:ec:96:bf:93:94:7c:44:a4:3a:20:
         f3:c0:f8:7f:84:4c:06:56:8e:62:b3:e1:a6:0e:b6:5f:85:a5:
         b2:94:f5:f4:be:97:ee:24:f0:22:75:5d:15:c1:f5:5b:47:7f:
         5b:ba:09:cc:4c:67:00:7d:51:7c:44:f5:a7:2f:a7:ca:bd:6e:
         86:77:1a:52:40:82:e3:8d:f7:ca:59:df:85:75:b4:50:d0:d2:
         6b:f6:52:3e:a1:41:ff:3c:d4:c6:06:79:ad:61:3d:cc:f7:b2:
         39:88:27:ad:3c:35:5f:2c:3a:e4:e8:6e:47:90:5d:7b:54:ab:
         df:5f:2b:45:ce:7c:94:1f:df:be:da:07:82:2d:1c:3d:64:98:
         03:18:c8:af:af:46:9e:bd:1c:29:46:60:e3:df:5c:d4:9b:f3:
         47:0d:b0:28:d3:91:d3:16:d3:a5:b3:21:62:a5:09:8c:53:66:
         e8:b5:f2:7a:d7:e9:a7:3b:74:23:0e:f6:34:81:c5:01:c6:f0:
         84:ff:37:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:22:32 2026 by rpki-client