Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File:                     datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier:          inWHfZaKTj2vp+KYB/BlCLPYmdLWfTnPKGo6ALjoOck=
Subject key identifier:   39:0C:F3:5A:CF:12:C8:D8:E5:85:76:01:7D:6D:DA:92:D2:86:18:44
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer:       /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number:          0266
Signing time:             Wed 23 Sep 2026 01:56:55 +0000
Manifest this update:     Wed 23 Sep 2026 01:56:54 +0000
Manifest next update:     Wed 30 Sep 2026 01:56:54 +0000
Files and hashes:         1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: 5frVrm79VI7p3mbgLue0cSlH7ss8BJO9x+8Nj/MdcgE=)
                          2: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
                          3: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
                          rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
        Validity
            Not Before: Sep 23 01:56:54 2026 GMT
            Not After : Sep 30 01:56:54 2026 GMT
        Subject: CN=6ab331e7-8bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:db:6a:f9:4d:90:ae:97:cc:12:7b:d2:81:
                    bf:21:a6:95:9e:ff:76:9d:b3:76:ef:6a:14:9c:d5:
                    9b:d6:5b:2f:12:6c:bf:42:32:36:dd:01:d8:ba:1a:
                    7f:8d:21:29:f6:be:9b:e5:8b:03:dd:32:2e:f1:d7:
                    ef:c6:43:c7:d3:1c:73:3f:c2:67:63:22:a3:f1:10:
                    78:96:ee:7a:f0:df:8b:0c:82:d7:05:44:c6:94:7d:
                    63:1f:d7:54:46:a2:fd:c0:27:80:21:99:e8:dd:36:
                    ed:fe:15:e6:7c:92:57:70:cd:bf:2e:5f:f2:4a:8b:
                    3f:db:5f:36:e4:1f:77:c3:80:3c:7a:3d:13:db:30:
                    b7:04:bc:01:94:8e:d5:63:1b:ed:1e:62:90:1f:37:
                    a6:fc:00:8b:c3:f0:75:c3:27:a7:91:82:06:c6:a2:
                    1c:7e:9c:8f:c5:59:32:ab:7b:19:09:3d:f0:02:f2:
                    2c:3f:c4:20:c6:0e:f2:04:af:d4:a0:51:32:6c:14:
                    5e:f8:86:43:8b:c8:19:01:98:2a:29:ef:da:12:93:
                    cb:1b:73:87:f0:cd:91:ec:8b:58:41:b3:33:63:b7:
                    ac:19:34:7e:aa:bc:45:b6:48:f1:7b:45:23:79:b3:
                    d8:38:1c:fa:a4:05:a5:50:b0:63:be:80:ff:92:f3:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:F3:5A:CF:12:C8:D8:E5:85:76:01:7D:6D:DA:92:D2:86:18:44
            X509v3 Authority Key Identifier:
                keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:41:60:7c:f8:64:b7:2f:96:1c:29:4a:6c:10:c8:dc:7b:a4:
         59:69:75:46:17:4e:63:54:3a:79:34:ba:73:b9:30:ee:4a:98:
         18:10:50:4a:a9:e8:5f:a2:3f:b9:3d:8f:e1:58:58:55:b6:0f:
         e9:3c:6a:77:43:35:68:0c:c4:c2:53:24:8a:17:c8:45:b6:9a:
         d0:c2:80:09:d4:d0:77:38:ca:10:15:dd:59:38:b6:92:73:10:
         62:e4:4f:c0:46:ee:ab:ae:af:9a:d9:62:9d:cc:61:73:ca:e5:
         05:94:ba:25:ad:cb:17:a8:88:4a:c9:40:b9:3e:92:a4:6f:b9:
         e0:6e:43:ae:7e:07:5f:a5:04:f0:3d:fd:0d:70:97:71:85:2a:
         f2:ac:4b:3d:e3:73:a6:d2:25:93:dd:90:26:e4:d2:4e:e5:00:
         e5:be:02:f7:e6:1d:bd:2b:c9:e3:74:25:a4:5a:7b:bc:a7:27:
         4f:27:0f:6a:49:75:35:e8:7a:ec:b2:83:d9:98:38:b3:65:a3:
         4a:91:84:0a:22:60:d0:0b:e7:76:ad:6d:e5:76:9e:ab:27:1f:
         e3:6d:11:27:d4:ad:00:f7:54:5e:43:67:d5:84:ed:ab:0e:5b:
         13:aa:f3:59:c4:13:d6:2b:42:cd:a5:22:0d:e4:9f:ca:35:02:
         5f:be:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:11:49 2026 by rpki-client