Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          sJYZ0flWCvlXvdoYtUiS4RSkHKpE8vdmCGTBNJKz7ZU=
Subject key identifier:   FA:00:81:74:0D:C0:50:34:BB:9A:3C:E7:F5:AB:54:A3:0B:28:78:AF
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          0A07
Signing time:             Tue 12 May 2026 22:27:27 +0000
Manifest this update:     Tue 12 May 2026 22:27:26 +0000
Manifest next update:     Tue 19 May 2026 22:27:26 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: i/roMKHLN3sgE3Y6kirdBnnmT+yr53wqJP2INewYUzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
        Validity
            Not Before: May 12 22:27:26 2026 GMT
            Not After : May 19 22:27:26 2026 GMT
        Subject: CN=6a03a94e-db31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:b3:d2:ff:f1:20:da:f6:2b:b9:57:bd:99:
                    46:93:c3:db:46:55:54:1e:c3:5b:9b:d4:ff:2c:10:
                    07:f2:e7:9a:59:3b:2e:b5:b5:00:dd:3e:88:9f:00:
                    df:63:f1:45:69:5b:59:c7:b6:e0:a5:49:18:fb:17:
                    eb:2d:be:78:dc:14:ea:6d:56:ef:79:bd:fa:a6:13:
                    bf:5c:49:ae:35:bf:43:18:1c:8f:d6:b6:af:3e:34:
                    2e:64:a8:68:cc:bf:78:a6:03:a0:e3:63:98:32:38:
                    d3:1a:a0:35:3a:c7:80:4b:f2:f8:a3:ef:06:3c:01:
                    24:51:03:85:79:1f:8f:50:90:7c:1d:b5:b5:c1:78:
                    f6:e8:c0:98:fa:ab:ca:88:70:71:54:be:b0:12:d5:
                    c2:4e:3c:96:7c:87:15:67:58:3e:ea:a4:2a:46:53:
                    b8:92:d8:d6:bf:4c:b3:62:24:51:c9:34:33:b5:86:
                    77:03:b5:6a:55:05:76:c4:5b:bc:11:a3:c0:b2:32:
                    21:e1:23:3b:3f:ac:06:b4:72:d5:d1:75:8b:49:7e:
                    8b:fc:2c:ae:33:d0:34:3c:db:a3:b1:a9:62:4b:f0:
                    34:9e:9d:16:1b:22:d3:eb:a9:23:cd:13:17:50:57:
                    d8:e8:ed:8a:fa:3b:96:5a:ce:e3:0a:c1:85:d8:ab:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:81:74:0D:C0:50:34:BB:9A:3C:E7:F5:AB:54:A3:0B:28:78:AF
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:92:ec:76:e7:10:51:12:0a:05:86:6a:ff:96:36:95:06:9b:
         7d:34:5f:2c:d1:0f:15:35:83:3c:63:0b:82:ed:b2:99:1a:c2:
         a1:ad:9c:77:53:d9:6e:1e:fb:e8:94:ed:3d:66:53:4f:09:e0:
         8c:5a:bc:9d:8d:57:f0:1c:e3:8f:9e:5c:c0:f3:5c:29:9d:c2:
         8a:8a:a3:37:bc:51:31:4b:3c:f8:a6:9e:d6:17:d4:e9:0b:f1:
         bc:ea:00:2a:91:3b:6b:ee:ec:34:e6:66:ff:fd:7c:3c:ca:64:
         51:48:8a:30:32:26:6e:d8:74:d7:74:bc:15:8b:e5:21:2f:7d:
         b8:8c:c6:ce:38:3c:b2:bf:85:27:d3:2a:1b:3a:c7:65:b5:d4:
         f4:4b:cf:83:bb:d4:7f:84:af:0e:0b:d9:a1:c9:e3:a4:1d:c0:
         42:9f:1b:6d:0c:4b:09:30:9b:28:e3:f7:28:3d:0d:8d:d4:e5:
         b7:fe:76:5b:63:77:71:9c:b9:4e:b0:cc:de:4b:d1:68:01:65:
         0e:36:9d:e6:18:bf:c7:a2:a2:eb:4a:13:ff:09:73:06:01:62:
         ef:55:28:7a:d9:32:39:a5:51:f5:bd:9c:ad:83:69:1f:c7:ef:
         a0:17:d9:f1:1d:3c:8d:8a:6b:54:3d:78:b3:3f:63:d5:2f:ba:
         a1:9b:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:02 2026 by rpki-client