Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          NrN9A+BdqP/DDsaGaSNVBjRIiFambrCL9NrU3Ny6F54=
Subject key identifier:   27:26:65:33:F0:C5:FE:F0:99:66:1A:96:FE:3F:C8:84:CD:E2:2A:9D
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          89
Signing time:             Sun 19 Apr 2026 07:12:01 +0000
Manifest this update:     Sun 19 Apr 2026 07:12:01 +0000
Manifest next update:     Sun 26 Apr 2026 07:12:01 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: Yqz9EKYJOn3tQqULZ0AJxDduwfaQ+6Bt+H49VmkXMEs=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: JklpsFyowHEwcOoj+ZilnkU1z0N39Fb72KxzXQYDJI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 07:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Apr 19 07:12:01 2026 GMT
            Not After : Apr 26 07:12:01 2026 GMT
        Subject: CN=69e48041-59af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:2e:a5:3b:09:b8:89:28:e6:af:46:7b:f8:
                    dd:65:7e:92:66:56:aa:a2:5e:79:c8:37:8e:36:89:
                    e9:32:31:64:9c:44:c2:48:6d:60:0a:fa:15:03:3c:
                    83:5e:83:cb:90:25:ab:87:e8:e7:37:52:9f:e2:3f:
                    fa:b7:fa:61:5e:b0:ba:36:8f:08:db:70:9e:00:6c:
                    7f:d4:4e:cc:c2:8d:a0:48:dc:93:f0:13:a8:ff:25:
                    71:83:c8:65:60:52:28:a8:aa:7e:d8:eb:0b:59:52:
                    92:3a:22:3b:e9:c5:68:40:1a:cc:42:f7:5a:dc:00:
                    29:aa:77:02:2b:4f:3a:c7:ab:15:55:5f:43:f1:33:
                    8c:49:60:82:65:67:29:9e:da:3c:9c:db:21:20:ff:
                    f6:ea:c1:73:39:a0:21:aa:e3:08:9f:07:1e:6e:31:
                    05:fa:54:ec:a9:56:78:9b:5a:b1:73:60:ce:ac:96:
                    ec:ae:fe:33:24:71:db:38:8f:be:bc:7b:62:96:dd:
                    01:33:d9:3b:25:48:23:57:26:33:f2:89:cb:5d:06:
                    c6:4e:f5:3e:d2:29:1f:ca:61:f9:4c:88:b5:59:e5:
                    87:8f:9f:a7:16:ca:b2:f5:96:25:62:ee:59:b1:3d:
                    67:c5:b6:20:d9:6e:73:6c:41:ce:30:9d:1d:fe:f9:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:26:65:33:F0:C5:FE:F0:99:66:1A:96:FE:3F:C8:84:CD:E2:2A:9D
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:34:73:63:47:9d:45:cc:ce:62:23:61:b9:fa:84:32:c5:d0:
         e9:ed:1c:6a:c3:64:0a:a2:de:0e:cc:55:65:d2:26:9d:d4:03:
         b8:97:05:36:a5:80:8d:1f:fe:58:5b:41:30:a7:ab:40:b2:fe:
         cc:bd:bd:a0:90:13:7a:03:47:9f:df:7d:8b:3d:72:d3:e4:7b:
         cd:21:fe:9c:ea:c1:07:77:c6:d0:3a:fe:0e:c3:e6:46:4d:67:
         8f:30:ec:14:65:6b:06:43:b9:ce:f0:b0:43:3a:66:b4:a4:7a:
         10:99:b4:79:89:9d:cc:e7:f9:52:29:a0:2b:27:a8:10:3a:5a:
         b0:f5:48:92:4d:b2:15:7b:51:a2:4a:c5:aa:31:51:52:d0:c4:
         c1:ca:90:b1:b8:fe:f2:3a:f7:de:d3:2f:31:05:31:e8:21:b7:
         a8:94:d4:4e:14:39:a0:b4:96:db:6c:52:8b:40:2c:8a:d1:96:
         c5:0e:45:19:8e:52:c1:e0:d9:8f:b7:7f:92:6c:5c:f0:79:95:
         60:9d:5a:c5:b6:b3:74:9b:1c:67:b4:c2:de:0f:eb:e8:f2:1c:
         3b:ff:1c:8b:15:23:e7:9a:3c:86:81:07:f0:e9:e3:09:a6:3b:
         7f:aa:80:c1:60:fa:65:fb:b7:d0:8a:b0:f1:4c:ee:fa:cb:36:
         ff:a0:14:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4
QTQwMjczRDMwHhcNMjYwNDE5MDcxMjAxWhcNMjYwNDI2MDcxMjAxWjAYMRYwFAYD
VQQDEw02OWU0ODA0MS01OWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuF0upTsJuIko5q9Ge/jdZX6SZlaqol55yDeONonpMjFknETCSG1gCvoVAzyD
XoPLkCWrh+jnN1Kf4j/6t/phXrC6No8I23CeAGx/1E7Mwo2gSNyT8BOo/yVxg8hl
YFIoqKp+2OsLWVKSOiI76cVoQBrMQvda3AApqncCK086x6sVVV9D8TOMSWCCZWcp
nto8nNshIP/26sFzOaAhquMInwcebjEF+lTsqVZ4m1qxc2DOrJbsrv4zJHHbOI++
vHtilt0BM9k7JUgjVyYz8onLXQbGTvU+0ikfymH5TIi1WeWHj5+nFsqy9ZYlYu5Z
sT1nxbYg2W5zbEHOMJ0d/vl9MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcmZTPw
xf7wmWYalv4/yITN4iqdMB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD
NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODQzMi9GQjY4NUIxRTZDNTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1
bnFvZXVWMHBwWnlLUUNjOU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASDRzY0edRczOYiNhufqEMsXQ6e0casNkCqLeDsxVZdImndQDuJcFNqWAjR/+
WFtBMKerQLL+zL29oJATegNHn999iz1y0+R7zSH+nOrBB3fG0Dr+DsPmRk1njzDs
FGVrBkO5zvCwQzpmtKR6EJm0eYmdzOf5UimgKyeoEDpasPVIkk2yFXtRokrFqjFR
UtDEwcqQsbj+8jr33tMvMQUx6CG3qJTUThQ5oLSW22xSi0AsitGWxQ5FGY5SweDZ
j7d/kmxc8HmVYJ1axbazdJscZ7TC3g/r6PIcO/8cixUj55o8hoEH8OnjCaY7f6qA
wWD6Zfu30Iqw8Uzu+ss2/6AUbg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 13:48:25 2026 by rpki-client