Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File:                     LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier:          cROQQzxZ7q21eVetsFb/TGy942HniNRNeDxApyq+Ue4=
Subject key identifier:   72:64:77:1E:4B:5D:41:FB:79:DB:8E:9C:28:5A:19:A5:5F:F2:7D:40
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer:       /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial:       0C01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number:          0BE6
Signing time:             Tue 12 May 2026 18:59:30 +0000
Manifest this update:     Tue 12 May 2026 18:59:29 +0000
Manifest next update:     Tue 19 May 2026 18:59:29 +0000
Files and hashes:         1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: DIAqc97V62hgAQNHTu5mUF4giUeOm0SWRAY73DcieAM=)
                          2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: KSLYVs16SK4lbuhA+tQMeKNyI28wiMaASlGHFe6M7ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
                          rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
        Validity
            Not Before: May 12 18:59:29 2026 GMT
            Not After : May 19 18:59:29 2026 GMT
        Subject: CN=6a037892-e47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:22:23:e2:be:10:dd:d6:14:db:df:de:cb:
                    57:80:30:8b:bd:8b:98:47:47:e1:00:74:5a:23:30:
                    40:d2:f8:71:9c:f0:91:d4:c1:32:7b:88:ad:94:fe:
                    00:e0:15:f5:c1:30:2f:cc:1a:7c:83:6c:72:e5:5d:
                    72:b8:78:87:78:de:e9:34:57:23:8e:1c:c0:d7:55:
                    23:27:a6:37:56:86:d7:c2:aa:d8:dd:09:36:6b:f0:
                    42:8e:20:8c:c6:83:d2:cc:cb:13:db:85:16:15:47:
                    54:7e:7c:3b:7c:79:8b:07:07:74:b7:01:75:f7:9a:
                    45:78:fa:c0:f5:04:8a:fe:5b:3a:c0:df:c9:28:4b:
                    71:82:f0:5d:73:d5:72:90:e3:0f:41:d9:3d:f4:e8:
                    95:fb:44:64:d6:13:5f:5e:d3:a0:ab:b4:cb:1f:eb:
                    be:d0:dd:3c:d4:78:d6:4c:bf:7b:d2:c5:46:19:a5:
                    89:12:55:45:69:12:b1:b8:dc:62:df:14:c5:c8:87:
                    f9:75:54:af:37:bb:35:98:d1:dd:f0:eb:c5:65:c5:
                    b9:26:c1:af:4d:4e:fa:1c:3e:64:fd:5c:b8:45:0c:
                    11:30:56:b2:1a:78:2f:bc:4d:db:40:eb:ae:01:93:
                    43:21:69:1b:fc:57:58:a5:5b:c6:a9:35:dd:9d:c2:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:64:77:1E:4B:5D:41:FB:79:DB:8E:9C:28:5A:19:A5:5F:F2:7D:40
            X509v3 Authority Key Identifier:
                keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:59:97:93:e8:de:86:47:a1:08:66:05:91:55:b9:36:25:
         5a:2b:7d:c8:d0:ff:0f:74:b1:23:79:27:2c:40:cd:da:f0:84:
         0a:30:87:77:07:eb:2e:b6:25:4c:6c:0b:6d:5a:93:63:fc:0c:
         91:be:4a:b8:b8:4b:2a:91:5e:7d:75:be:4c:98:63:93:14:d0:
         76:70:bc:20:6a:9a:3a:ba:07:8e:35:33:b5:41:a7:d9:f0:e3:
         1a:7d:86:25:f3:d9:12:9a:67:3b:c3:95:92:17:90:85:61:ee:
         03:79:11:6a:ab:4a:83:7e:e4:c5:94:45:88:db:8e:7a:37:7f:
         cd:29:20:c2:bb:bf:22:bb:e5:6d:b1:e5:f6:7c:70:08:a9:e2:
         70:3b:29:4b:f3:af:35:41:ab:fe:ec:54:3f:56:91:91:b0:b8:
         bd:14:06:e3:00:aa:5d:b5:5f:51:8c:80:5a:82:dc:bd:64:e2:
         99:50:03:85:4d:4b:62:47:9d:b9:fe:42:4f:df:32:16:e6:86:
         03:c6:81:ce:38:9c:7b:21:1b:6c:ad:e5:21:75:97:a3:bb:33:
         e8:e3:33:33:01:1f:c6:f3:bf:d2:28:8e:61:8e:b4:94:0d:ad:
         8a:50:c6:03:40:98:ff:8d:5d:03:ee:6f:91:98:a5:e3:87:15:
         f9:0f:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:26 2026 by rpki-client