Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
File:                     lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json)
Hash identifier:          +zvsMUOJWNR/ETmTrGkVOCbpseA1VJaPC4Bd3y+mQ5U=
Subject key identifier:   2B:4C:7D:29:EB:55:C9:41:E6:7F:60:24:0F:26:67:5D:12:8C:61:CC
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Certificate issuer:       /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
Manifest number:          D0
Signing time:             Mon 11 May 2026 06:54:53 +0000
Manifest this update:     Mon 11 May 2026 06:54:52 +0000
Manifest next update:     Mon 18 May 2026 06:54:52 +0000
Files and hashes:         1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: FRR//RSVat5BZnawG5BQ9hU6Q/xKaTDNkunoSOvvumc=)
                          2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: Yf6MLTE9tq8pjPlLkH+wZ+1CKhmF9Uc2g/SsSZqXjSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
        Validity
            Not Before: May 11 06:54:52 2026 GMT
            Not After : May 18 06:54:52 2026 GMT
        Subject: CN=6a017d3c-b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:3a:67:e4:b8:c9:2a:9c:5f:03:d0:67:39:
                    23:fa:3b:ca:f1:4d:68:d1:45:c3:dd:fa:7d:97:00:
                    71:16:0e:68:44:f0:49:ad:00:c9:e9:ef:7c:a7:4d:
                    ba:bd:82:e4:37:4f:4e:53:ab:83:88:22:5b:1c:c7:
                    b6:e5:61:af:ce:a4:96:bd:78:d4:5a:cb:b5:94:65:
                    e2:76:e4:c7:6f:05:19:a5:fc:77:cd:a2:01:c4:91:
                    e7:63:bf:76:24:f0:b9:99:ce:36:66:7e:38:21:8e:
                    b6:e9:a7:69:c2:bf:60:5f:13:6d:bd:14:d5:eb:ed:
                    7c:d8:91:00:16:4f:f5:ad:c0:31:44:a3:cc:1f:99:
                    da:66:60:a1:07:38:88:32:fc:20:03:5e:cf:a3:f0:
                    ac:37:64:36:b5:de:96:14:a0:5b:48:79:1c:37:4f:
                    c4:e3:3b:05:dc:b1:aa:69:44:6b:f2:fe:90:c9:b1:
                    39:48:a9:b2:87:85:ec:a6:3d:2b:6d:9a:86:71:28:
                    d7:75:1e:4e:0e:35:d6:2e:73:16:fe:38:dc:1f:ad:
                    7e:68:78:c2:0a:ea:bd:0f:a3:d6:5d:4a:b5:1f:b5:
                    e8:3c:76:7e:c2:16:2b:d5:63:f4:c3:af:be:a9:b6:
                    2c:53:7a:86:cd:9d:c4:46:15:4c:d6:85:65:24:cc:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:7D:29:EB:55:C9:41:E6:7F:60:24:0F:26:67:5D:12:8C:61:CC
            X509v3 Authority Key Identifier:
                keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:ab:90:2a:42:b0:17:7a:48:2c:78:90:8c:38:76:fe:c2:
         29:2e:f3:7b:31:35:fa:99:fb:67:f5:1b:b5:8b:59:61:3e:10:
         0c:d0:92:75:65:63:70:c9:e2:46:b9:62:a4:61:52:33:1b:37:
         bf:9e:c2:9b:12:c7:c6:31:0a:4d:96:56:5c:84:e3:d0:06:27:
         a5:cb:fe:26:1a:e1:a7:52:7d:72:24:c4:78:a1:85:cc:c2:d3:
         d1:93:d5:76:76:37:92:0a:36:51:a8:b5:d7:bd:9b:7a:2a:81:
         a5:f6:93:b3:23:67:d9:09:a6:88:b5:0d:c9:66:ac:de:23:2d:
         9a:51:f6:79:58:9e:2d:35:8f:76:ec:cf:cf:72:80:56:53:ff:
         f1:c8:90:a2:2e:76:5b:26:1b:27:2d:6f:9c:44:ae:e3:d6:85:
         04:f5:7c:2d:4e:06:f1:d8:58:11:6b:06:99:35:81:d1:5a:3a:
         82:0a:f4:3f:2c:7c:17:74:bf:cb:09:4c:61:53:12:7b:d1:3e:
         5b:58:56:cc:50:c0:99:c4:ac:fc:af:6a:98:3f:47:55:e0:48:
         94:04:ea:f9:3d:9e:91:b0:d7:30:ba:2a:cf:44:7b:38:dd:f7:
         f2:83:ed:7a:6d:47:71:c9:3b:6c:19:e6:a0:15:03:ff:ab:19:
         1d:02:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:26 2026 by rpki-client