Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File:                     LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier:          aBPlJnG7kotfMs74QVeo/I5J6hNeaUDQnBNAlOFmA5Y=
Subject key identifier:   E3:9F:4C:4D:C1:D6:EF:77:DF:5E:7A:FC:9F:00:3D:5C:A7:4C:4C:CB
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer:       /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number:          0A0D
Signing time:             Sun 26 Jul 2026 20:22:42 +0000
Manifest this update:     Sun 26 Jul 2026 20:22:41 +0000
Manifest next update:     Sun 02 Aug 2026 20:22:41 +0000
Files and hashes:         1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: Mzif9+56JsRCBUUK6FQk7Qx4x+Q+D9i1D8equvBocsw=)
                          2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=)
                          3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: 9cZAA819ZNYxdN7xk7f1AZKeDye0bv4EBp7wGGivMIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
        Validity
            Not Before: Jul 26 20:22:41 2026 GMT
            Not After : Aug  2 20:22:41 2026 GMT
        Subject: CN=6a666c92-1db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:68:25:44:99:0d:ec:4d:92:51:1c:36:7d:
                    47:7b:a0:8c:a7:2e:32:df:84:69:97:58:88:7b:6b:
                    80:c6:d6:24:19:8c:68:f6:95:9c:e6:01:8b:5d:80:
                    76:88:dc:5f:d3:99:e3:b4:fe:48:70:e6:0e:7e:ed:
                    b6:6e:f6:de:ee:28:82:05:82:65:15:ad:8d:bb:eb:
                    6d:5c:83:3d:f2:6a:00:cb:0d:69:3e:44:11:b4:d9:
                    3a:c8:7d:3b:65:5b:1d:d0:e6:fc:8c:b3:4d:f7:26:
                    34:b8:59:ba:fe:54:77:a3:bf:fd:7b:e8:dc:a9:53:
                    39:ac:bc:9e:08:f0:39:83:d8:38:b7:5c:91:cc:aa:
                    c8:4e:5b:8e:c5:33:a0:26:25:0c:bb:f8:f5:30:fd:
                    2a:e7:40:cd:33:f9:eb:8c:44:9e:4b:28:61:82:94:
                    bd:83:b2:2c:fa:81:de:5c:52:66:e3:6a:09:84:ce:
                    c9:bd:9c:1f:64:9c:7d:d8:2e:d7:83:4a:fb:a7:03:
                    07:00:fe:1e:28:b9:cb:c2:eb:95:41:1f:69:7a:a2:
                    08:34:c0:29:38:79:c4:c6:56:44:85:4f:78:4e:45:
                    3f:a4:49:84:bd:e9:6c:b2:fd:df:a6:46:e1:ad:66:
                    81:7c:30:d7:d4:a7:67:9d:42:8d:17:36:f1:63:3f:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:4C:4D:C1:D6:EF:77:DF:5E:7A:FC:9F:00:3D:5C:A7:4C:4C:CB
            X509v3 Authority Key Identifier:
                keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0b:74:d4:9e:65:30:e1:32:a2:e0:3f:d7:5c:71:be:3f:92:
         f1:30:0f:1b:b8:46:93:cf:04:2e:86:94:16:05:ce:ed:74:a6:
         a6:05:6e:ae:2f:f2:ed:01:41:37:e0:12:e2:48:aa:79:29:cc:
         f3:f9:f6:ac:78:75:17:b3:07:ba:81:1a:d6:1f:53:53:90:4c:
         30:8f:d0:ba:28:c5:e6:29:a3:3b:76:a8:b8:49:27:77:d2:45:
         99:0d:2d:30:7f:4e:e3:62:c4:b4:0e:8a:7e:63:96:6b:e0:9a:
         70:43:95:c4:f9:0a:ff:0d:0c:90:f9:c5:5e:0d:d5:f2:c2:c3:
         fe:1c:9d:08:d1:86:23:9e:bd:77:99:3c:c3:fc:86:10:91:fd:
         9b:3d:2b:8b:c6:0e:aa:21:4d:9c:e8:04:3f:a2:c4:c9:0f:af:
         83:55:d6:a3:1a:22:72:44:7c:87:b5:f7:86:b7:be:20:c1:8a:
         c9:a3:7d:e9:e8:e5:94:02:2f:24:93:3c:5f:d6:71:6a:0e:c3:
         1e:1e:e4:0f:43:82:0f:de:69:bd:fc:24:49:ed:22:e8:c2:40:
         26:01:26:c4:3b:31:96:4c:16:6a:b8:48:7d:d7:3d:fd:67:ab:
         6d:a7:d8:55:92:5d:9c:d8:f8:bd:61:f6:aa:69:87:a3:6b:b0:
         80:df:e9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:04:11 2026 by rpki-client