Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          15gchud/3ym5E6mMaOixuo5pysNluZ26cQu19oAFdpE=
Subject key identifier:   71:6A:B8:E6:24:57:E7:84:82:2F:0B:E9:B3:48:94:ED:98:00:DE:67
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       03A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          039A
Signing time:             Fri 17 Jul 2026 01:21:57 +0000
Manifest this update:     Fri 17 Jul 2026 01:21:56 +0000
Manifest next update:     Fri 24 Jul 2026 01:21:56 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 5kKQPSAhbwej9jxVelFskuhjr6GZc7zibGUkkLK4Ve0=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: wno/Zpmf7krAlEHHQVbLBHpNiXys3vvcREcGQsemRTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Jul 17 01:21:56 2026 GMT
            Not After : Jul 24 01:21:56 2026 GMT
        Subject: CN=6a5983b4-17bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:cf:b1:a4:51:88:8f:7e:d5:35:7e:41:c9:
                    88:08:77:72:13:70:43:44:70:93:ff:75:72:8c:52:
                    5b:73:97:16:d1:7f:46:c3:a4:f5:23:55:18:17:83:
                    38:8c:cf:7c:9c:4c:00:8d:bf:a3:fb:95:5b:50:88:
                    06:c6:c1:7f:49:4f:98:0e:bf:94:8a:70:86:85:c7:
                    7c:e3:91:3e:52:b3:37:b7:29:dc:4d:5b:ec:85:c8:
                    e0:6b:1f:58:e3:ff:06:8c:88:c2:23:fd:18:6b:37:
                    01:41:77:37:f3:8a:e3:73:e6:d8:42:8a:4a:15:8e:
                    72:9f:61:16:66:f8:25:9d:f1:8b:19:52:36:6e:6f:
                    1a:b6:1f:8f:cb:68:1b:40:2e:90:04:6d:0c:f4:21:
                    89:78:17:e4:49:1d:05:e2:a5:d8:3d:d9:2a:b8:e5:
                    33:2f:2c:16:c4:f8:fc:a6:e3:11:a1:53:a2:9c:a1:
                    eb:f5:a0:9c:62:68:f9:08:04:bc:4f:fe:76:b3:33:
                    4c:10:31:80:68:87:f9:a8:23:09:78:9c:c2:58:75:
                    66:ab:78:dd:22:03:61:16:05:06:7f:a5:89:97:0f:
                    e2:de:7b:9c:bf:4e:86:a4:47:03:9c:24:95:01:2f:
                    13:11:09:f1:2a:42:c9:03:35:f0:f3:20:f5:ff:35:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6A:B8:E6:24:57:E7:84:82:2F:0B:E9:B3:48:94:ED:98:00:DE:67
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:78:1e:7e:25:f6:51:6b:71:c1:5d:ab:1f:40:a3:f9:82:c4:
         7b:25:55:47:91:23:13:1a:91:de:1d:20:0e:67:05:1c:a8:30:
         d6:ba:9e:22:60:98:d6:b5:71:a5:36:8d:9f:24:f5:c7:4f:44:
         7d:71:ca:e3:cd:41:50:9b:52:f6:53:ca:48:75:7d:07:d1:75:
         49:c6:6a:f0:00:52:70:78:12:95:f3:22:4e:a1:72:d8:7a:8b:
         4e:e1:61:35:f0:4e:05:fe:9b:d9:ff:74:a4:6f:57:5d:72:28:
         3f:c6:d1:ae:82:e9:f0:b5:a5:92:0d:b7:bc:93:8d:c3:5d:d0:
         89:6a:11:d7:d1:2f:11:72:1d:24:26:fb:43:21:01:2e:ef:fa:
         4d:b4:30:77:31:2c:ff:cd:cf:9d:8b:56:ae:32:e8:79:d7:e2:
         fc:08:59:62:9d:b8:c7:07:83:ad:17:42:bf:87:2c:b0:20:90:
         06:c8:ee:1f:2c:d9:f4:f0:27:b8:45:39:ba:da:4c:ed:dc:25:
         b7:2c:c4:28:d8:90:a8:35:07:e7:dd:94:d6:40:9f:e8:17:11:
         df:e9:8e:4d:4c:40:5f:7a:fc:b0:11:72:fd:8a:5e:b5:b8:5b:
         38:a4:65:0f:b3:31:ec:76:d9:c9:d7:ae:25:d4:f1:88:36:41:
         7b:93:ca:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE
OTZCQzQ5OTgwHhcNMjYwNzE3MDEyMTU2WhcNMjYwNzI0MDEyMTU2WjAYMRYwFAYD
VQQDEw02YTU5ODNiNC0xN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEDPsaRRiI9+1TV+QcmICHdyE3BDRHCT/3VyjFJbc5cW0X9Gw6T1I1UYF4M4
jM98nEwAjb+j+5VbUIgGxsF/SU+YDr+UinCGhcd845E+UrM3tyncTVvshcjgax9Y
4/8GjIjCI/0YazcBQXc384rjc+bYQopKFY5yn2EWZvglnfGLGVI2bm8ath+Py2gb
QC6QBG0M9CGJeBfkSR0F4qXYPdkquOUzLywWxPj8puMRoVOinKHr9aCcYmj5CAS8
T/52szNMEDGAaIf5qCMJeJzCWHVmq3jdIgNhFgUGf6WJlw/i3nucv06GpEcDnCSV
AS8TEQnxKkLJAzXw8yD1/zXsmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFquOYk
V+eEgi8L6bNIlO2YAN5nMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx
MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM
Yk40Qnp3aEJEYnJaYThTWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw3gefiX2UWtxwV2rH0Cj+YLEeyVVR5EjExqR3h0gDmcFHKgw1rqeImCY1rVx
pTaNnyT1x09EfXHK481BUJtS9lPKSHV9B9F1ScZq8ABScHgSlfMiTqFy2HqLTuFh
NfBOBf6b2f90pG9XXXIoP8bRroLp8LWlkg23vJONw13QiWoR19EvEXIdJCb7QyEB
Lu/6TbQwdzEs/83PnYtWrjLoedfi/AhZYp24xweDrRdCv4cssCCQBsjuHyzZ9PAn
uEU5utpM7dwltyzEKNiQqDUH592U1kCf6BcR3+mOTUxAX3r8sBFy/YpetbhbOKRl
D7Mx7HbZydeuJdTxiDZBe5PKsw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:00:46 2026 by rpki-client