Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File:                     datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier:          MqKouvXIlchl793OGFn6j/xME3MVr5FF5hvat1OzFL8=
Subject key identifier:   13:E4:D7:B0:E3:22:9C:DA:F6:C5:E4:3E:F4:47:C6:A6:86:D4:52:B5
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer:       /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number:          0221
Signing time:             Mon 11 May 2026 02:45:29 +0000
Manifest this update:     Mon 11 May 2026 02:45:29 +0000
Manifest next update:     Mon 18 May 2026 02:45:29 +0000
Files and hashes:         1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: h8ZTt684YFqbT9L1QSMelaXSagYmVBLPrPgC1DJ3GRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
                          rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
        Validity
            Not Before: May 11 02:45:29 2026 GMT
            Not After : May 18 02:45:29 2026 GMT
        Subject: CN=6a0142c9-04d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:30:9f:ed:7c:4f:e8:44:27:03:02:d3:fe:
                    ec:b8:7b:29:51:2c:d9:d2:e3:1a:07:74:81:81:05:
                    64:4b:38:34:bd:39:57:b1:65:72:b7:48:63:7b:9f:
                    6d:d3:ae:cd:bc:f6:8c:64:3f:05:21:92:a6:01:38:
                    d8:f7:80:a1:b2:44:7a:92:1e:73:27:91:a9:51:76:
                    26:d5:89:32:6c:66:20:3a:89:3d:ff:7a:ea:5e:2d:
                    48:ac:57:6c:a7:28:43:23:52:a0:e1:8c:9b:c8:dc:
                    5e:d1:a9:6b:b3:e7:e3:b8:2d:2e:60:49:da:07:d9:
                    a9:79:6d:e7:62:b7:9a:ce:64:d5:17:64:76:dc:46:
                    d2:18:22:44:32:9f:0b:c4:4f:3a:8c:f6:f8:6e:5b:
                    34:cf:27:be:99:ee:6d:90:48:0e:7c:10:87:19:26:
                    8f:14:36:45:0d:18:2e:47:6f:da:89:42:2f:11:6d:
                    bb:db:d9:8a:71:31:08:89:fa:28:fc:78:f0:c7:10:
                    b5:78:16:69:8a:2b:2f:22:b5:2c:39:59:be:53:a8:
                    72:ed:45:ff:ae:8f:aa:11:86:57:ae:01:2a:38:50:
                    0e:e4:5a:11:49:59:b0:37:ef:ee:6c:79:4a:ec:ac:
                    99:b9:e6:a8:a0:81:91:44:25:8d:fe:4f:2d:17:2b:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:D7:B0:E3:22:9C:DA:F6:C5:E4:3E:F4:47:C6:A6:86:D4:52:B5
            X509v3 Authority Key Identifier:
                keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:c2:c4:69:ad:56:2f:09:d6:2c:a7:f0:b4:c8:90:8d:e3:
         9e:fd:f6:3f:f7:32:82:3b:ef:51:08:0b:c6:6d:bd:61:31:6d:
         80:d7:83:85:11:81:68:5c:8c:e2:72:3a:f2:81:0d:e3:f4:af:
         76:21:15:df:b6:61:25:cb:5b:1d:8c:d4:4e:c0:b8:91:7f:f4:
         00:d0:f9:ca:b5:c6:87:b1:d4:f8:ed:f1:bc:41:51:bc:14:20:
         f4:4a:86:b3:4f:a6:1d:15:6d:70:c1:9a:02:36:01:3b:76:b4:
         af:5a:18:c2:6e:61:29:cd:fe:7f:f2:77:c5:d0:c7:eb:f9:cd:
         c0:e1:87:47:da:6b:9f:f6:06:9a:3a:66:a7:dd:17:a5:0c:8b:
         67:f9:2c:4b:c7:9a:7b:82:2f:4d:fb:03:4e:41:c5:4b:b5:d1:
         ff:bc:54:50:95:37:b1:5a:ad:e4:91:74:15:c3:4d:50:b0:80:
         50:39:7f:18:8b:4a:21:45:ec:61:a4:fc:d4:58:0d:cd:10:0d:
         98:80:65:2c:d6:93:b9:99:e9:57:2c:c8:5d:56:16:0d:b6:42:
         4d:4c:59:0f:ea:b2:65:da:6e:f6:86:77:5c:bb:ea:dd:42:1f:
         9b:86:f6:b9:4e:36:ec:00:b7:f9:e7:b1:8a:39:16:cb:02:ff:
         d7:29:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:43 2026 by rpki-client