Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          97H0L9PzEmDGJ6DTeyme2nTBRv8eNxA1J9DoH1eDSXk=
Subject key identifier:   21:54:24:C7:2E:E9:B9:A4:60:73:8B:9D:AA:39:76:2B:DE:95:7F:BB
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          ED
Signing time:             Sun 25 Oct 2026 06:51:55 +0000
Manifest this update:     Sun 25 Oct 2026 06:51:54 +0000
Manifest next update:     Sun 01 Nov 2026 06:51:54 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: +40FyVqvVm0HmyB9905Jg2YgzvS4TUSWg8N6J8uDh7o=)
                          2: AFD8C9F0A4E311F18DF958E06811F970.roa (hash: Lrk9LTcg/bv+vbM0honqqAUz9KhJdQc3X7h5xz+fH0E=)
                          3: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg=)
                          4: vm-m4NmypyOFpQCYpZK4hhgAvvg.asa (hash: DOI9hPKC1i4e0v5+qepnp8+dbckDpzsHh7vM8oGqjpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Oct 25 06:51:54 2026 GMT
            Not After : Nov  1 06:51:54 2026 GMT
        Subject: CN=6adda70b-776f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:f8:ae:2c:84:4c:df:e7:2e:47:4f:af:a7:
                    30:c8:07:2c:16:de:97:e8:de:0f:a0:21:b1:f0:46:
                    41:2e:ea:9e:37:23:78:ba:49:6e:64:ac:be:20:0d:
                    1b:24:47:15:7b:5c:c3:4c:1f:ad:c6:fb:2f:a9:c5:
                    c2:f1:cf:bd:78:ae:2d:35:32:36:8d:2a:46:5e:04:
                    20:dd:e3:41:e6:ea:ec:48:de:e4:71:b1:d0:c8:9d:
                    11:dc:ba:e8:f3:25:1d:fb:96:bd:1c:98:5e:de:4d:
                    0f:24:da:0b:83:37:fd:b4:ab:74:bd:1d:ee:7b:84:
                    95:20:c5:56:a8:7e:fb:15:5d:55:c0:42:e1:17:7c:
                    b8:cf:12:97:bd:31:1a:e4:ca:1c:49:03:f5:a1:77:
                    a6:a1:2f:a4:ed:a5:32:fe:48:e3:c8:2e:8a:34:b7:
                    81:ef:04:83:b1:8c:12:27:0e:a0:9c:7c:69:8c:64:
                    95:b4:11:a3:4e:f6:ee:02:00:5a:05:f5:b3:24:41:
                    ba:cb:14:79:b4:d7:a5:ac:8d:73:5b:96:19:17:64:
                    8a:05:c6:bb:b0:e9:b5:ed:ea:0c:fa:ef:a3:ef:d7:
                    53:98:19:99:0a:d8:96:ce:db:e1:a3:44:48:7f:50:
                    d7:ee:60:47:db:19:09:8c:ea:ea:1f:dc:c9:93:ed:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:24:C7:2E:E9:B9:A4:60:73:8B:9D:AA:39:76:2B:DE:95:7F:BB
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:32:3f:88:b7:26:48:a1:21:ff:f3:7c:d0:ab:d1:4f:e7:
         b8:c7:26:ba:b1:9e:95:fa:ca:73:4c:66:ce:0e:1f:88:92:db:
         60:69:a1:ff:9f:33:8a:95:7c:d8:e1:dd:1c:c4:57:b7:13:d4:
         a5:62:bb:d9:67:cc:f5:6e:4e:cf:05:3b:36:9d:07:2b:fc:f8:
         41:e4:a8:49:32:36:fa:f7:b9:4f:7f:27:b5:a6:aa:92:93:ce:
         15:8f:10:5c:63:d6:8e:31:10:9b:32:93:2b:3d:48:d5:14:23:
         26:8b:5b:78:94:39:aa:73:a8:14:de:9c:63:49:17:81:86:98:
         f2:64:6a:14:40:1d:fc:5e:2c:2e:08:43:9c:81:1c:3f:01:fc:
         d1:1e:f3:57:b9:99:86:8a:08:4d:ea:5e:22:da:0e:c6:18:15:
         68:51:ec:a6:88:d2:a0:ea:43:63:f6:19:6c:48:b6:bf:9e:7a:
         f3:3a:6f:22:c6:a0:c8:39:e9:a9:8d:16:d9:0b:74:70:5e:f6:
         e1:7f:df:0b:cd:8f:e2:d6:dc:86:d5:c2:ab:a8:d4:4d:34:12:
         06:bf:33:dc:22:45:bd:19:2e:ff:1e:3b:59:cd:68:d4:65:16:
         3a:db:3e:6c:6b:04:14:0c:da:40:40:04:44:03:fe:cd:24:3c:
         31:69:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:25:39 2026 by rpki-client