Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File:                     LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier:          v41/pFPonZkOiMh3o1kGV/xZ3ds25IsLxRdifs8jtNY=
Subject key identifier:   CF:32:1E:24:09:8F:17:78:AF:5A:CC:8E:EF:47:F3:94:02:E0:84:9E
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer:       /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial:       0A0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number:          09DB
Signing time:             Sat 18 Apr 2026 19:50:17 +0000
Manifest this update:     Sat 18 Apr 2026 19:50:17 +0000
Manifest next update:     Sat 25 Apr 2026 19:50:17 +0000
Files and hashes:         1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: BEJb0kKhL8h42614DuZW4nOdes8cGRTgg2jQcwYOQiE=)
                          2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=)
                          3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: 9cZAA819ZNYxdN7xk7f1AZKeDye0bv4EBp7wGGivMIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573 (0xa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
        Validity
            Not Before: Apr 18 19:50:17 2026 GMT
            Not After : Apr 25 19:50:17 2026 GMT
        Subject: CN=69e3e079-90d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:37:66:38:63:d2:af:c1:b9:90:a6:ec:f9:
                    f8:8c:1d:79:5f:2e:ba:e0:70:0c:87:34:30:26:45:
                    75:4e:58:6e:62:6f:9a:88:ce:83:2a:70:0d:4a:ae:
                    bd:c2:ee:b0:e6:8e:be:1e:62:32:bb:cc:14:c1:a1:
                    36:51:16:aa:cd:3d:e8:92:8f:1b:a9:7a:5c:82:20:
                    ab:e4:d6:70:88:8d:c9:0b:08:a4:24:94:c9:73:4c:
                    43:37:89:57:be:3b:0f:8b:69:0c:38:9f:41:81:31:
                    06:22:89:14:02:49:62:5c:64:67:3b:10:04:87:10:
                    94:7e:2b:1a:a8:1d:8b:4e:07:ea:c0:3e:54:ee:c0:
                    82:74:1f:03:d8:3a:93:79:4e:4f:cf:26:34:d9:92:
                    73:58:96:8b:14:16:a9:f1:e4:e6:fc:15:55:dd:73:
                    32:1d:15:8a:59:85:7b:9e:2f:98:98:a6:48:0a:10:
                    6b:b9:f0:13:a0:ab:72:40:bd:02:76:f8:37:f9:a3:
                    8d:4c:65:34:95:31:b1:7f:4e:d4:8e:7f:7d:5c:84:
                    28:64:00:87:ac:63:01:c3:78:83:cd:17:19:0c:1d:
                    f2:1c:98:6c:4b:dd:45:91:40:a6:55:bb:a5:d3:c9:
                    c7:d4:8a:de:1a:3e:d5:7a:4f:5c:59:0d:b8:42:b1:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:32:1E:24:09:8F:17:78:AF:5A:CC:8E:EF:47:F3:94:02:E0:84:9E
            X509v3 Authority Key Identifier:
                keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:2b:1f:ee:60:84:1a:bf:a5:ea:ca:74:fe:47:18:4c:4d:
         28:31:08:71:7e:39:d6:3c:eb:05:e6:41:3a:49:4a:be:c7:7b:
         50:ca:f8:30:1c:2c:1b:0e:1b:9f:c0:8c:1b:c7:bd:69:9f:1b:
         6e:28:06:5b:95:b2:fe:29:47:63:9f:c4:8c:c2:bc:c3:41:fb:
         1f:ed:3c:6a:13:ba:85:f4:23:e6:31:ce:bd:d7:36:10:ec:8b:
         b7:ba:b2:b8:b0:7d:68:1c:a1:92:a6:5b:78:42:31:f3:bc:fb:
         99:cf:05:bd:07:a0:8c:6c:ae:1e:0f:c7:9c:45:3e:6e:22:7c:
         22:c6:96:3f:a4:06:d0:92:d2:fb:d2:d9:7d:31:1c:b5:78:ab:
         ad:78:c4:8e:11:ea:2c:e8:8b:bc:a2:93:22:89:eb:d0:2c:d6:
         3a:b9:00:c5:13:ce:8d:7b:63:bd:fd:1f:0f:0f:89:65:f2:3c:
         d6:2a:2e:24:91:b7:22:03:aa:43:ce:a6:1f:24:a4:e2:81:da:
         06:0e:00:a0:29:d6:3b:5c:3b:43:c1:7b:e8:3f:b6:3d:ce:32:
         43:c9:92:ac:66:bc:27:39:65:f4:fd:5d:85:e9:6b:22:a9:2c:
         f2:f8:4f:64:67:4e:56:43:d8:29:88:f4:4f:89:53:3d:e1:6a:
         5a:3a:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:24 2026 by rpki-client