Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
File:                     datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json)
Hash identifier:          +JKrZ63/RX6rvdjNKZ93kWvhlpQ75Dc/eQgseicepX8=
Subject key identifier:   1A:F4:49:9C:09:C0:6F:B6:1B:57:78:17:37:97:36:7C:4B:57:42:8A
Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A
Certificate issuer:       /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
Manifest number:          0246
Signing time:             Thu 23 Jul 2026 03:34:42 +0000
Manifest this update:     Thu 23 Jul 2026 03:34:42 +0000
Manifest next update:     Thu 30 Jul 2026 03:34:42 +0000
Files and hashes:         1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: f8RL2r5B7Vab3b3WoXm121NQkj4SAxqbZcPM7EH7f7E=)
                          2: 25C794C0652411F196C4FA3A8447A888.roa (hash: N45LL33IihqS/P4Wkd4Y5RM4yOWChQgClLZI5lkYTq4=)
                          3: 252E9EB4652411F196C4FA3A8447A888.roa (hash: uLZNLe/3LKewURqIVc5uNnrl/e0YDlahAtsJGHncajc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl
                          rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A
        Validity
            Not Before: Jul 23 03:34:42 2026 GMT
            Not After : Jul 30 03:34:42 2026 GMT
        Subject: CN=6a618bd2-db22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:71:db:b0:77:ad:fb:56:ec:a8:4a:fe:dc:
                    7e:d3:b2:f9:56:2a:3f:b3:c4:56:60:78:5d:15:18:
                    23:49:fd:3a:9e:b0:f6:2b:6f:ac:e5:2f:72:7f:a1:
                    a5:dd:97:35:b4:06:68:00:e1:38:33:08:b3:d8:76:
                    d8:f1:48:12:f2:39:d4:eb:e8:a5:12:17:67:48:d6:
                    d4:16:c2:a6:30:fb:d2:b6:8e:04:31:d4:e8:ae:9e:
                    e8:99:11:fb:bf:64:20:80:07:b2:4b:5e:4b:6b:e9:
                    35:da:d3:f1:9c:59:7b:34:70:bd:d7:65:cc:52:2c:
                    76:81:e1:17:12:9e:53:89:0b:81:f6:b4:d4:02:6b:
                    eb:15:d5:71:09:3d:9a:1d:35:ad:07:21:1b:cc:2a:
                    47:65:76:00:62:0a:5b:05:73:7f:73:74:8f:0c:29:
                    7a:80:c3:52:73:2c:d5:47:22:5f:9f:cb:b1:df:45:
                    7d:fb:ab:d4:cc:13:a9:fb:ca:bc:c6:4e:b8:53:b7:
                    20:1f:01:14:04:f6:d4:ec:57:86:a8:55:74:ba:3f:
                    dd:87:3c:a4:58:a5:fb:57:07:61:fe:0e:4e:60:c4:
                    e8:ea:b8:3d:b9:7c:60:74:93:83:09:58:b0:46:fd:
                    b7:10:70:bc:57:59:26:7b:3e:62:88:49:ce:71:88:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:49:9C:09:C0:6F:B6:1B:57:78:17:37:97:36:7C:4B:57:42:8A
            X509v3 Authority Key Identifier:
                keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:15:d8:d0:98:2d:8f:8d:d5:a4:d8:f2:98:3a:a4:8e:1f:d0:
         db:d2:5b:04:11:db:90:1c:99:eb:d4:35:49:90:91:1b:46:ce:
         ad:e1:67:f5:8c:96:12:84:60:eb:29:d7:30:c8:25:81:05:4f:
         f3:c4:9f:c7:10:24:f7:1a:2d:f9:82:12:96:99:66:ea:4c:0c:
         b7:60:b1:4c:06:5c:76:51:5b:23:be:68:da:52:9c:32:74:9c:
         3a:94:df:f7:db:67:76:9f:6f:f5:35:37:d7:47:f3:cb:9c:f7:
         a7:57:70:73:77:4c:67:ed:53:3a:8e:4c:bd:c4:6a:2b:29:54:
         1c:c6:5f:ab:9f:0b:c9:52:cd:ac:15:f1:5f:65:2a:45:2c:b3:
         e1:11:d1:2e:51:88:62:9c:d9:c5:d6:88:be:24:ae:ad:4f:41:
         20:80:f0:e9:5e:d2:a8:ed:39:52:fc:01:dd:6d:57:39:7d:1a:
         8e:48:05:a3:e2:ce:b7:7e:a9:a0:1c:fa:9a:f3:82:7a:37:e0:
         9d:87:8b:c6:20:e5:54:4e:85:37:1e:c5:a7:be:b6:f3:8f:5f:
         c1:9a:4b:de:14:a7:53:8c:18:b6:ad:2a:e3:62:17:8c:6c:fe:
         50:ff:e6:50:e3:27:8b:88:c5:77:0b:68:53:e7:4e:57:13:99:
         f4:3d:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:21 2026 by rpki-client