Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File:                     datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier:          GA8r6adjHqxOn2zsRmQrZFYSePX3vxCOMMdyKZGAG7I=
Subject key identifier:   CD:89:D0:36:8E:24:4C:88:04:DE:AF:3E:BC:83:BF:7C:E9:F5:26:2E
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer:       /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number:          0257
Signing time:             Tue 25 Aug 2026 02:11:04 +0000
Manifest this update:     Tue 25 Aug 2026 02:11:03 +0000
Manifest next update:     Tue 01 Sep 2026 02:11:03 +0000
Files and hashes:         1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: Kt/SXkrWpT4iA1WEDlprQ3jJINkwwRRdaXfm1XHmZMc=)
                          2: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
                          3: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
                          rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 02:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
        Validity
            Not Before: Aug 25 02:11:03 2026 GMT
            Not After : Sep  1 02:11:03 2026 GMT
        Subject: CN=6a8cf9b7-64a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:84:bd:d0:5e:11:95:04:dd:a8:79:97:6e:
                    6a:64:d7:fa:90:8c:5e:3b:de:cd:e7:8b:d6:27:5b:
                    02:75:9e:5f:78:20:71:ba:cd:4c:6f:62:04:f9:10:
                    b8:25:68:07:b8:e5:85:19:f2:45:3d:04:13:00:d5:
                    e1:59:bd:9e:50:13:94:03:a6:12:52:94:8a:a6:9d:
                    0c:6d:bc:43:43:25:7b:06:2b:d8:56:40:9f:fe:44:
                    61:99:cd:cf:46:58:7a:5d:92:fc:d0:d6:89:be:8a:
                    e5:be:5a:83:d1:e1:e7:9e:f9:4d:23:5c:bb:7d:7c:
                    15:31:96:49:9a:cf:c1:10:4f:0f:ed:68:da:86:cc:
                    b5:e3:4a:2a:a6:e4:7d:23:32:67:7d:e9:b8:07:62:
                    44:61:dd:b7:22:0b:50:26:fc:27:00:e9:5c:c7:c8:
                    cf:2f:41:aa:10:c5:c3:4a:ee:99:68:dd:cd:55:e7:
                    68:7e:9b:9f:33:f4:39:04:b2:9c:86:c5:1d:5e:dd:
                    4b:83:35:5a:47:ec:24:ec:17:58:09:e5:22:f5:19:
                    21:a4:f7:c4:56:ce:a1:10:51:76:6e:a6:4b:a4:09:
                    f7:3c:bf:4f:5f:e8:26:8f:c9:df:97:2a:22:a3:65:
                    5c:c6:9f:7b:b4:eb:b0:52:85:14:f9:a5:cc:9d:02:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:89:D0:36:8E:24:4C:88:04:DE:AF:3E:BC:83:BF:7C:E9:F5:26:2E
            X509v3 Authority Key Identifier:
                keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:22:8a:5c:28:2e:14:11:c7:ff:a5:71:36:b2:64:d8:72:
         d1:42:35:36:ca:71:54:aa:cc:92:a4:fb:37:fd:ea:52:86:8a:
         75:b3:c8:2e:4c:52:bb:ec:6c:62:43:15:ea:98:61:cf:62:12:
         97:a5:3d:f8:c2:ef:b9:64:04:0c:9a:7b:a5:51:8a:ed:6a:35:
         fe:21:09:d0:43:b8:8a:14:6b:f0:e4:65:83:d6:5f:69:e8:9d:
         b3:cd:e5:47:6a:1f:7d:82:d9:93:9f:5e:42:02:87:a8:f9:55:
         8c:36:29:89:d3:f0:51:aa:c4:64:e9:94:0d:56:0a:d2:ba:29:
         2e:1b:cf:e3:19:14:cf:d9:70:48:d9:4e:cb:f0:a4:66:b3:1c:
         f6:ad:2b:bf:98:e1:81:d9:94:b4:45:22:f9:02:52:70:a2:23:
         07:4a:e2:6a:c1:65:d8:f8:e9:32:e4:d2:1a:b4:f4:c5:b0:01:
         22:d9:69:ae:dd:b6:35:32:3e:ab:56:ee:68:20:bb:67:36:65:
         dd:10:f9:03:a7:6d:37:f2:af:06:14:2e:97:d4:82:17:f9:01:
         75:09:b6:ff:b8:9c:75:93:0f:e8:08:41:69:b0:21:ee:cd:37:
         bc:ec:a7:12:bd:54:bc:20:89:72:56:90:1f:c6:aa:a8:fc:f8:
         3e:a0:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:04:23 2026 by rpki-client