Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File:                     lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier:          PzPJ5ckK7aY9+VgKrhH+Jdh64S87W9n6ozvc07X19Ug=
Subject key identifier:   1D:CD:FE:6F:E1:93:5F:EF:1B:A8:23:09:34:F8:85:D6:62:0F:A1:94
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer:       /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number:          B8
Signing time:             Wed 25 Mar 2026 06:16:50 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:49 +0000
Manifest next update:     Wed 01 Apr 2026 06:16:49 +0000
Files and hashes:         1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: 5+6FQO6VC+OAf8R1nJdAqDw9StDjrmM3XBHiHlJsPTk=)
                          2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
        Validity
            Not Before: Mar 25 06:16:49 2026 GMT
            Not After : Apr  1 06:16:49 2026 GMT
        Subject: CN=69c37dd2-13c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:1b:aa:6d:99:42:55:da:8d:68:44:49:3c:
                    f7:c1:73:1b:3d:ca:bb:a7:02:29:ae:f2:81:af:4b:
                    08:0c:71:16:dd:63:19:f5:0f:22:b2:0d:dc:c3:e5:
                    e7:6d:97:bf:ed:a7:1e:e1:f5:52:e0:c8:44:1a:ed:
                    2e:68:8e:1b:77:ed:60:64:e2:08:e3:6b:af:5b:9c:
                    24:d7:ec:3f:9b:54:c4:49:0d:b7:0b:ce:d3:25:4d:
                    62:ad:b3:51:16:45:df:04:c9:12:d0:cb:3e:de:53:
                    87:92:69:be:e2:11:c1:a2:5c:9a:e3:99:2d:db:3b:
                    16:2b:4d:de:00:b4:07:5d:c0:3c:ec:b8:97:b6:24:
                    41:f2:0a:18:68:e8:b4:24:19:75:61:c0:db:01:a8:
                    dd:c8:5f:a6:b7:49:94:6a:01:97:b4:33:17:3a:c2:
                    ab:06:d7:09:3f:5a:6a:84:b5:b3:bd:2d:59:cb:ae:
                    1c:a5:ca:9f:8f:56:5d:3a:8e:24:ec:c7:96:41:39:
                    11:7a:71:91:c8:45:f2:b5:4b:fb:85:5a:59:4f:00:
                    b9:46:c0:6a:30:e0:27:cb:8a:c5:4d:b6:fe:03:9e:
                    24:64:18:22:09:53:cb:21:67:74:38:1b:66:11:57:
                    6b:13:6b:a5:37:68:8c:08:bd:1f:ef:12:04:e6:9c:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:FE:6F:E1:93:5F:EF:1B:A8:23:09:34:F8:85:D6:62:0F:A1:94
            X509v3 Authority Key Identifier:
                keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:9a:39:b8:77:b9:3c:34:e4:8b:49:47:4b:1a:f7:47:75:
         65:75:28:5b:58:68:8c:ae:bb:16:83:79:bf:f5:6c:3b:fc:79:
         e9:10:ea:18:d3:96:e6:26:ae:16:60:10:8c:94:79:da:06:19:
         44:1b:67:d1:4a:39:15:8d:8c:79:b5:eb:d5:15:7c:c8:9b:50:
         58:8a:14:0b:31:fb:57:86:30:01:4a:8e:24:6e:f2:b9:1f:65:
         f2:df:94:48:1b:a3:06:a4:04:48:fd:20:b9:75:29:61:2b:a1:
         55:55:12:a7:d2:1d:9b:29:d0:0c:f4:ff:2b:b7:c8:ae:6c:fe:
         f6:9f:bd:03:ad:71:3e:1e:8c:88:99:70:ec:a9:dd:de:8e:35:
         2c:d6:da:d7:7f:5e:8c:f2:87:12:fc:27:9f:a6:85:d1:30:6d:
         ca:5b:ba:a3:69:bf:0b:81:4d:21:fb:d5:23:4f:3c:b1:5d:33:
         bb:28:d9:fb:da:52:a0:08:02:d4:22:fa:5e:44:37:59:28:48:
         cb:0c:72:94:87:ab:b1:aa:92:87:ef:93:8c:0a:62:bc:04:1e:
         6a:08:8e:ce:d6:97:ad:55:c2:07:9d:30:e9:c8:96:bc:c5:b1:
         1f:10:43:ff:60:df:29:3f:d4:09:ec:78:ce:0e:1b:12:76:b0:
         a2:ec:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:50:29 2026 by rpki-client