Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File:                     LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier:          xi0Eluqz0xA8d0SlSPF0t4yNalAN1CNPyv8ocCdknuw=
Subject key identifier:   5E:68:95:9C:5B:A2:EC:46:1C:CF:A6:D9:26:7D:A0:80:15:6A:31:7B
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer:       /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial:       0A5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number:          0A29
Signing time:             Thu 10 Sep 2026 19:45:42 +0000
Manifest this update:     Thu 10 Sep 2026 19:45:41 +0000
Manifest next update:     Thu 17 Sep 2026 19:45:41 +0000
Files and hashes:         1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: puCABeLMtB99ZhGCYhJXBec39okyU+aoIZxLJrJtDKo=)
                          2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: TwfOtqELROfwbdGW94mJ46Jldk9YfuE63pysMVGHVgU=)
                          3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: qA6m0DYMiRUmJ031ZSlgBYMv/3TYzZQxA8v1f3tCGXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
        Validity
            Not Before: Sep 10 19:45:41 2026 GMT
            Not After : Sep 17 19:45:41 2026 GMT
        Subject: CN=6aa308e6-65dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:3c:ce:33:d0:4f:a6:81:38:1a:e0:92:58:
                    b5:2d:29:60:0c:11:64:5c:53:2a:0a:b6:e8:4f:c4:
                    e8:d3:83:33:88:85:b4:02:4b:80:6c:ef:a0:55:66:
                    79:4f:e0:dc:95:0c:d7:28:e4:4c:0f:8a:37:bb:aa:
                    7d:57:e5:b1:16:1b:d8:7f:57:7f:10:4c:3f:13:2d:
                    9d:62:64:ef:73:65:a3:54:14:0e:cc:b2:0c:e5:34:
                    27:71:30:40:94:e4:de:0e:5a:89:dc:a4:9e:4a:fe:
                    62:e8:99:87:24:a7:b1:1b:7e:ad:19:47:ba:30:8c:
                    ca:d7:1d:06:75:8e:a7:3f:e8:3f:5a:82:a0:4c:f1:
                    9d:82:70:02:07:6b:ae:f5:31:60:f0:cc:97:2e:0c:
                    08:8a:bf:e3:74:27:6e:83:a5:4b:4c:f0:5f:34:82:
                    a7:97:26:0e:48:4e:37:b1:66:29:c6:76:fa:c1:57:
                    67:91:d5:fb:d2:98:d6:2e:c2:a0:2c:4c:a9:ec:17:
                    a8:fe:be:5b:66:d6:41:e7:42:2f:40:5f:65:72:05:
                    52:53:6f:68:ec:e4:55:e7:05:ae:f0:84:29:8e:15:
                    8e:a9:b8:d4:38:72:b5:cc:33:42:ff:eb:79:20:17:
                    24:af:b0:d4:5e:76:37:5a:96:20:fc:a5:67:6b:6b:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:68:95:9C:5B:A2:EC:46:1C:CF:A6:D9:26:7D:A0:80:15:6A:31:7B
            X509v3 Authority Key Identifier:
                keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:70:f6:67:3c:66:27:ab:dd:31:2c:34:10:3c:52:60:bd:67:
         06:cb:7b:fb:5b:d9:d1:a7:0b:9d:25:ba:15:c8:a3:44:f9:c2:
         d6:bb:f5:8d:49:4a:ec:72:fa:dd:d8:e0:ac:bd:86:e6:af:9c:
         79:a9:5c:c9:0c:90:b8:2a:c0:c2:ae:76:89:0f:9d:4e:bd:7f:
         06:f3:eb:37:1f:00:9e:18:77:8a:53:8d:6c:2d:64:e7:fb:8b:
         56:38:7c:8b:56:4b:77:fc:f9:92:5e:8b:55:34:fd:2f:b8:f1:
         a2:fb:ce:ee:04:44:e8:b9:79:a3:84:f9:dc:27:7c:74:11:e9:
         51:c7:29:f9:b0:0a:e8:02:a1:0e:31:e4:13:11:07:54:d0:96:
         a2:75:7d:90:3f:72:19:75:ba:25:bb:bd:1b:0c:94:4c:61:9f:
         89:70:90:67:af:5a:d8:b6:00:f0:91:81:e8:ba:78:49:be:7c:
         b1:bc:58:dd:c7:e3:89:e2:00:08:e4:55:7e:08:65:28:71:d0:
         dd:a9:a8:2c:68:b2:b0:00:ab:75:92:c2:6d:ee:38:2d:8c:d2:
         64:94:88:4b:1b:ed:58:75:7d:0a:a6:dd:5b:ff:ae:28:9a:f1:
         77:4a:73:b6:b2:a2:fa:da:23:24:a6:81:b1:6f:7b:57:93:84:
         53:67:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:00:11 2026 by rpki-client