Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File:                     LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier:          uVLisEHd89yk+AOBL5kHBW4CQlSgEIa5MdvtuSQTNBk=
Subject key identifier:   D2:07:DF:F8:12:AE:2B:55:0D:3D:83:5E:B2:21:9A:C5:CD:05:83:BD
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer:       /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number:          0147
Signing time:             Tue 02 Jun 2026 19:09:52 +0000
Manifest this update:     Tue 02 Jun 2026 19:09:52 +0000
Manifest next update:     Tue 09 Jun 2026 19:09:52 +0000
Files and hashes:         1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: CmLgs6W1pIenQbvKWHe1FmVBLXTCBniOTACrgwut1dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
        Validity
            Not Before: Jun  2 19:09:52 2026 GMT
            Not After : Jun  9 19:09:52 2026 GMT
        Subject: CN=6a1f2a80-75f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:d2:e8:21:aa:d6:ca:d6:9c:f0:b5:b0:a1:
                    7c:d6:80:a2:a3:06:e7:bc:44:5a:e4:d3:51:ba:81:
                    e4:d2:ce:ee:99:78:46:3d:de:27:40:a0:77:49:7c:
                    54:ac:2a:ae:4f:5b:d0:40:0a:6e:77:3c:7a:e5:23:
                    6d:70:0c:e5:ed:76:a7:af:4f:7c:db:34:36:e1:9e:
                    de:0d:a2:76:c4:fa:9f:b3:2c:55:14:cb:59:20:54:
                    7a:27:09:c8:1f:e7:8f:ae:a6:6a:1f:26:82:58:a4:
                    51:a5:fb:1e:8f:43:ce:e5:57:64:c8:c9:b2:a0:a3:
                    58:4d:58:e4:9f:76:7e:89:11:58:15:5f:e0:93:89:
                    74:96:df:f4:0b:2a:70:7e:40:a0:f0:22:af:ec:89:
                    7a:bc:41:cd:05:0a:9a:d9:4e:f6:85:ff:1b:41:8f:
                    a3:6d:61:54:25:31:df:f9:41:5c:ac:6b:38:42:9b:
                    e9:4d:42:ac:fa:31:4b:45:5c:f1:35:9e:9c:f8:f3:
                    22:e1:81:a4:1f:3e:30:20:3c:fa:1b:82:59:bf:b4:
                    f8:56:43:a1:f8:2f:7b:3b:6d:79:21:fa:07:33:d1:
                    2e:39:89:8d:75:fb:ef:45:a2:65:81:fe:57:c4:d1:
                    2f:ca:74:e4:00:11:88:e5:c3:ec:6f:56:40:dd:11:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:DF:F8:12:AE:2B:55:0D:3D:83:5E:B2:21:9A:C5:CD:05:83:BD
            X509v3 Authority Key Identifier:
                keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:67:e8:ec:19:14:68:09:ab:96:54:49:ea:68:5c:23:95:
         3e:e0:76:0f:39:e3:ec:33:a2:3f:be:9c:7f:8c:9f:7e:a5:e6:
         82:26:63:a9:6d:9d:6b:a2:b7:9a:ec:12:9e:57:2a:ac:14:78:
         e3:ed:5f:1d:5f:d8:e0:b9:11:bd:f2:3a:fe:54:90:a3:00:2f:
         c1:8a:90:b2:8f:79:da:23:ff:5e:63:12:e3:c0:8c:bb:42:98:
         23:59:d7:e7:82:77:3b:b6:ef:85:0b:06:c3:5f:82:ea:cf:b6:
         de:26:71:53:85:bf:28:a1:64:c3:53:7f:72:fe:a7:d3:46:9e:
         72:ca:71:e5:16:4a:b3:a9:51:1a:e4:39:7c:08:35:5f:06:83:
         b7:90:d1:c4:00:9c:ab:b7:da:1b:54:c5:20:62:3e:66:f6:2d:
         5a:25:2a:db:3c:3a:15:24:84:91:04:75:9b:03:b0:1c:45:8e:
         4c:b8:2e:31:c2:a5:6f:8b:da:41:92:91:d4:09:07:62:42:1f:
         1a:07:7d:91:78:c3:1b:a4:a3:58:cb:ea:d3:c3:c7:68:d8:8a:
         1c:72:63:27:d1:94:2d:ed:7c:bb:54:71:19:68:c8:06:2c:7e:
         f0:ff:6e:b3:9e:53:74:11:ca:99:2a:a5:76:66:66:c1:69:54:
         f2:2a:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client