Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File:                     XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier:          HTog7gDWDoP7GtBCN9LkmX3LBbp6wlvJYgLCG010SKk=
Subject key identifier:   42:1D:24:E4:22:B1:5A:8E:AF:94:BD:CE:CB:FD:AA:1C:F7:C6:BB:EA
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer:       /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number:          9B
Signing time:             Mon 11 May 2026 07:32:04 +0000
Manifest this update:     Mon 11 May 2026 07:32:04 +0000
Manifest next update:     Mon 18 May 2026 07:32:04 +0000
Files and hashes:         1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: 1p2fa/E8Qb7ggxJX/5D66nHYsxVgPlW0LJEcg+zJZHI=)
                          2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: VYc3OiknOZk5D+JuTCHA3ZgN5xV+C9RS9FUO4Z+WkyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
                          rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
        Validity
            Not Before: May 11 07:32:04 2026 GMT
            Not After : May 18 07:32:04 2026 GMT
        Subject: CN=6a0185f4-528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:11:22:f3:33:ee:bd:b0:fc:64:5a:52:2b:
                    88:1e:e1:e1:63:71:92:f7:db:08:3d:34:8a:47:22:
                    76:07:a9:a9:b6:2a:d9:5a:98:27:f7:51:9a:05:1e:
                    25:e9:07:7d:7b:85:b8:69:df:3e:32:90:3c:1a:0a:
                    28:b7:48:c9:0a:67:63:e1:48:bf:fe:34:9c:86:56:
                    8e:92:e2:74:43:6c:0d:71:74:9f:41:01:05:2c:30:
                    1c:ef:fe:8a:81:45:4d:35:15:ba:cf:55:ee:b9:4b:
                    24:3c:f9:89:0e:78:a0:42:53:56:e8:d1:d0:aa:54:
                    39:12:9f:75:6f:1d:ec:70:10:41:26:12:27:57:74:
                    59:5a:78:33:f8:60:ce:30:4e:db:dc:87:7d:6d:57:
                    78:92:d9:e5:05:c8:a2:c2:73:45:c8:29:b2:8d:50:
                    ff:d6:16:2e:e8:3a:76:99:b3:d6:23:24:80:b2:6b:
                    6b:5f:ec:aa:2c:d8:1b:e1:e4:02:00:83:12:af:1d:
                    76:04:de:d0:e8:39:6c:cd:2b:b7:f7:b9:55:58:fb:
                    12:24:3d:f1:57:92:b5:3c:fb:7d:94:a7:fb:b3:ef:
                    ec:a5:76:c8:03:cf:8e:e7:75:3a:48:39:ce:05:e0:
                    91:58:34:b6:f9:af:63:eb:48:52:e9:08:b5:d6:25:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1D:24:E4:22:B1:5A:8E:AF:94:BD:CE:CB:FD:AA:1C:F7:C6:BB:EA
            X509v3 Authority Key Identifier:
                keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:74:9f:6e:67:5b:1c:38:09:96:e5:88:96:bb:bf:f5:23:48:
         a0:76:b0:cd:f7:6d:a2:58:c7:4d:1b:a5:82:c0:71:ad:36:90:
         07:8f:53:53:16:2a:83:e6:27:12:73:82:62:7d:18:19:88:77:
         30:f3:fc:d4:05:e5:b4:f6:69:3e:28:dd:d6:0b:fa:b4:04:78:
         88:8f:ed:6d:93:66:e1:06:a4:e3:11:9e:dc:7f:e5:01:e4:67:
         7d:c6:68:a9:28:e6:8b:68:a3:1d:7a:41:0d:1d:d4:fb:b0:f3:
         18:8f:36:da:47:7e:84:75:23:e0:98:21:06:26:e3:9a:92:68:
         d5:be:de:6a:5f:3b:b7:10:ab:2e:a7:6e:5a:2c:c0:95:89:f1:
         e4:f1:c1:b8:56:eb:8a:fc:29:f2:de:4a:7b:ea:b8:c5:d3:89:
         c8:65:68:f4:4a:05:ad:7e:31:87:99:63:ec:41:02:1f:76:72:
         9f:d6:c0:53:1a:b3:22:4b:eb:6b:e3:63:3b:da:4b:2d:1e:e0:
         58:f7:72:06:34:05:93:bc:17:cb:0a:84:6e:5d:48:62:4b:2d:
         5f:35:64:2d:68:fc:0f:a6:98:e2:90:77:c2:ab:6b:7f:75:08:
         29:cb:5f:20:a1:ca:9f:7d:ca:d7:07:53:5d:da:50:bb:5e:e1:
         b9:51:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:34 2026 by rpki-client