Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File:                     lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier:          3zp6keVNcWkK6e9cQTXLerwkAxT/u7xtcMu+5YwG9Us=
Subject key identifier:   7E:98:3B:A3:29:2D:CC:71:BD:5F:98:2A:52:B5:F3:F1:29:83:41:3A
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer:       /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number:          0114
Signing time:             Wed 23 Sep 2026 05:47:03 +0000
Manifest this update:     Wed 23 Sep 2026 05:47:02 +0000
Manifest next update:     Wed 30 Sep 2026 05:47:02 +0000
Files and hashes:         1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: 8E2OdG2t/VMY9O5odxilk2o9Q0usV00cXAZSL2x2x0A=)
                          2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
        Validity
            Not Before: Sep 23 05:47:02 2026 GMT
            Not After : Sep 30 05:47:02 2026 GMT
        Subject: CN=6ab367d6-e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:98:e4:77:60:ad:48:d2:d9:31:1d:d0:ba:
                    1c:cf:66:46:8e:90:2b:6f:92:fc:4e:2d:26:fb:ff:
                    2a:69:1d:b3:63:11:e8:17:0c:89:a8:ca:b9:6a:54:
                    aa:e6:92:e4:f4:2c:a2:ae:e6:af:cf:f5:b0:f8:05:
                    12:aa:2f:07:ba:2a:9c:06:54:6d:86:2a:c9:df:c7:
                    5e:e0:38:37:45:75:4a:3b:da:be:47:45:bc:d3:4d:
                    05:5a:c5:d9:a4:86:05:c5:47:17:9d:e4:a2:4e:57:
                    b2:41:c3:8c:65:79:d7:9c:b7:c0:c4:ae:85:8d:d4:
                    1c:10:37:a4:86:d9:1e:cf:8e:06:4a:25:ad:8e:22:
                    ba:18:c9:a0:50:85:9c:e5:75:21:64:4b:23:69:d7:
                    71:20:df:27:85:a3:64:55:b3:59:57:bf:1b:7a:ce:
                    61:61:d1:94:99:da:c9:ef:d6:82:88:9c:3e:16:c2:
                    d7:4e:27:90:c9:4c:be:d3:77:c9:ab:53:07:3a:f0:
                    9f:bb:27:df:ea:1d:78:7f:0e:f6:38:13:cf:85:21:
                    ac:68:a1:96:cb:79:26:8d:d5:e2:3a:76:3e:c0:32:
                    5c:15:ba:28:88:55:5a:32:ba:8d:c7:7c:a6:13:d2:
                    90:9a:b1:a3:63:c6:4b:e2:00:8c:c3:2c:8b:3a:6d:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:3B:A3:29:2D:CC:71:BD:5F:98:2A:52:B5:F3:F1:29:83:41:3A
            X509v3 Authority Key Identifier:
                keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:12:eb:04:6e:01:88:12:03:3c:0f:04:ae:41:9f:e0:81:3a:
         61:8f:4c:82:20:ef:1e:5a:2d:6d:85:15:72:70:bf:3c:96:82:
         a9:e0:30:64:60:1b:32:53:7c:15:e6:bf:98:d9:04:71:e9:ef:
         a1:68:b4:28:ad:70:9c:d0:f7:1e:86:5e:63:d5:ae:cf:2a:16:
         cf:3e:18:e4:de:db:4f:e2:ef:7d:c2:2b:cb:67:87:ea:d7:02:
         8f:3b:ed:d6:46:23:9d:c8:4f:93:2e:9b:e7:30:5e:d8:a5:3f:
         ab:41:66:aa:5e:63:9b:50:69:c2:bb:64:14:a2:89:dc:f5:37:
         4b:33:23:02:a8:c3:b5:14:61:e8:20:fb:f0:97:a0:12:bd:d7:
         91:ce:ea:b6:19:0c:04:8a:c6:d6:72:89:41:d9:86:4b:a9:52:
         cc:26:29:1a:8f:40:71:85:54:03:f3:a8:06:a9:5c:3c:f6:ec:
         15:b5:af:52:ca:db:49:a3:5e:6e:ca:3a:5d:30:b6:fe:80:33:
         00:3b:3a:c2:6d:80:ce:fa:7c:b3:f2:fc:92:25:97:a1:e9:33:
         35:d8:24:34:08:e6:21:2a:07:17:38:00:25:12:1c:b3:8a:7c:
         73:58:66:ed:e1:53:e7:09:a7:26:87:75:78:a3:e4:0b:d0:84:
         87:9c:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:36:32 2026 by rpki-client