Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
File:                     LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json)
Hash identifier:          H5dgVG3pj1IWHnYsP5kyy9feeiMYcazcjHXg5NS6Oac=
Subject key identifier:   D3:DD:31:7D:CF:15:DD:3F:88:6D:62:78:7D:5E:7A:94:5A:D6:62:F7
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Certificate issuer:       /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
Manifest number:          02D7
Signing time:             Tue 29 Sep 2026 01:28:52 +0000
Manifest this update:     Tue 29 Sep 2026 01:28:52 +0000
Manifest next update:     Tue 06 Oct 2026 01:28:52 +0000
Files and hashes:         1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: wr3RSPimoCTrkC3VAakWdY/DmZ43zmbhVrzkPPfIjos=)
                          2: 349641F2A03111F1889724EB3511F970.roa (hash: CvTC/pIM80we377avR/pdEAzz4NkXAGS/quK/H+TxIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
                          rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
        Validity
            Not Before: Sep 29 01:28:52 2026 GMT
            Not After : Oct  6 01:28:52 2026 GMT
        Subject: CN=6abb1454-2949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:2a:9d:2d:96:f7:cf:cf:4a:aa:a0:20:76:
                    89:59:fa:14:ef:e9:aa:3d:65:33:33:76:c7:8f:4d:
                    95:9c:ec:32:8e:63:f3:8a:aa:2e:1c:15:c3:be:ed:
                    04:6c:db:29:5e:ce:59:fc:43:0d:f0:c6:c9:ea:18:
                    64:b3:aa:3f:ec:6c:68:13:c7:18:53:ef:27:8e:f9:
                    d5:a6:4d:aa:69:64:27:92:95:a0:43:df:5e:d4:46:
                    bc:77:82:75:7a:b5:17:a0:67:b6:ac:13:63:0a:64:
                    94:c7:18:be:e6:5f:21:c9:a3:eb:c5:10:01:f6:91:
                    df:8e:bb:e6:a1:b5:60:9b:f6:e7:93:cc:fd:7a:a7:
                    c8:fc:77:15:23:17:68:b7:12:12:80:5e:18:e5:16:
                    e4:56:ab:6d:92:81:76:10:bd:fc:51:bf:34:d6:54:
                    a9:15:13:5f:f4:84:d9:cd:06:76:a5:13:87:61:8b:
                    a5:22:c0:1b:7c:02:33:da:6e:b6:44:48:e8:67:83:
                    0b:4e:91:7c:ee:49:db:19:db:b8:5d:6e:51:51:9f:
                    9d:0a:07:37:1b:58:d7:c9:db:23:31:ed:57:8c:52:
                    4f:5c:54:68:58:45:ad:3d:c1:a4:a6:45:df:1a:0f:
                    fd:1b:47:5f:78:d5:af:3c:fa:1d:1b:df:b7:a3:24:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:31:7D:CF:15:DD:3F:88:6D:62:78:7D:5E:7A:94:5A:D6:62:F7
            X509v3 Authority Key Identifier:
                keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:26:b5:a9:de:ea:95:10:15:cc:8c:25:b7:bb:87:fd:fb:
         a5:89:08:d7:c4:b8:7b:50:11:92:6e:40:c1:94:1b:6d:62:7f:
         2e:8e:b8:9e:b1:27:d6:52:00:d8:56:7c:bb:13:b6:fd:d5:72:
         da:11:ed:68:0f:60:db:c0:fc:6d:8b:e0:21:41:6d:19:b5:15:
         55:ab:f4:41:67:18:0a:dc:71:25:1d:fa:8c:27:f5:b0:87:56:
         89:2a:0f:26:a0:e7:53:22:9d:5f:cb:59:b0:ba:ce:74:87:e3:
         ca:2f:69:69:74:a1:3f:ab:75:7b:62:1d:7e:2f:ce:33:ab:4e:
         14:d6:b5:19:d0:55:1e:08:30:41:6c:1e:f8:02:7f:a1:cf:41:
         28:b5:a4:8b:8d:0a:93:95:e8:83:88:22:8c:5e:82:a4:b0:01:
         87:44:e3:c2:44:67:5b:67:96:63:ba:de:f6:02:71:8c:5b:88:
         83:42:71:fa:e9:8a:7d:97:7e:c0:a2:97:3e:ba:00:63:99:7b:
         a7:bd:d5:96:67:f8:ac:37:2e:d4:4d:90:be:d8:d8:fd:ec:93:
         14:5a:4a:eb:2e:bd:a9:80:0d:3a:7d:26:6c:10:24:50:b4:a1:
         da:20:95:db:38:ca:4f:9b:0b:82:42:16:4f:71:9e:b0:b6:d1:
         fc:e5:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:47:19 2026 by rpki-client