Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          HAaCLLulXOaY5my3gbajx0s2dJtj3wxtAwoLD+aY7Us=
Subject key identifier:   FE:15:07:3D:80:C2:A3:2F:56:C5:C0:B3:EF:A5:31:BD:EC:36:A1:25
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       06B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          09D4
Signing time:             Thu 26 Mar 2026 22:16:58 +0000
Manifest this update:     Thu 26 Mar 2026 22:16:57 +0000
Manifest next update:     Thu 02 Apr 2026 22:16:57 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: 1hscaCAxjK991edChW0M6mGMlgzLMjRW2GCged9rH78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
        Validity
            Not Before: Mar 26 22:16:57 2026 GMT
            Not After : Apr  2 22:16:57 2026 GMT
        Subject: CN=69c5b05a-f2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:49:07:c2:a2:b2:87:fd:78:36:f1:29:4f:
                    d5:35:bd:97:4b:ef:f3:9a:b9:7a:2c:89:55:62:38:
                    a3:70:f1:79:4b:3d:81:db:c8:07:af:c2:40:55:87:
                    69:34:83:23:63:43:70:54:40:c6:1b:7c:a9:af:7d:
                    07:5f:57:78:d0:d7:7e:9d:61:8c:6c:ad:26:48:24:
                    9a:61:41:6e:50:56:95:fd:37:9a:5a:04:af:0a:6d:
                    ca:2c:3e:bf:bc:0f:6a:e3:e3:d5:a4:3f:4b:64:89:
                    ce:51:a2:17:87:91:33:64:36:50:c0:d6:4b:98:f5:
                    17:0a:87:89:0c:44:40:0f:7a:33:e0:e9:5f:f4:ec:
                    7b:c1:4f:48:f6:c6:0a:6b:4f:1e:1a:d7:be:da:c7:
                    db:7e:27:68:19:dd:ee:c2:db:83:51:79:31:6d:76:
                    d6:35:8b:20:3d:ab:67:db:52:be:13:ae:d3:57:8d:
                    62:5b:4b:4b:7b:12:a6:da:24:0d:61:26:3b:84:7a:
                    7f:fd:62:94:b4:0a:3f:79:8b:1b:09:cb:38:64:68:
                    af:8f:fc:12:a6:c8:60:68:3a:d9:7a:69:2a:b2:14:
                    81:07:0b:50:af:d5:72:96:4d:be:c9:13:83:f7:c7:
                    bf:a9:1b:06:8e:b1:6e:4a:7d:ec:b9:3f:c7:83:60:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:07:3D:80:C2:A3:2F:56:C5:C0:B3:EF:A5:31:BD:EC:36:A1:25
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:99:d3:37:4f:5d:89:b2:1f:dc:0a:7d:8d:7d:5c:21:01:
         78:ef:8a:a1:4b:1a:c2:ce:cd:31:13:b9:6f:09:89:d7:43:40:
         ce:9b:b8:87:6e:1c:49:82:a5:0c:98:da:a6:b6:dc:d7:e1:c5:
         b4:c1:fc:4d:87:eb:06:da:68:5b:2c:53:48:ea:75:13:48:25:
         5f:f9:7d:70:aa:2b:78:42:40:bc:a0:6f:b4:3d:9c:64:af:02:
         84:0c:98:ba:32:42:9e:61:c2:f5:a7:60:d2:5c:8d:87:6d:c8:
         da:71:ed:61:d8:c9:ad:b0:e8:08:5c:6c:cd:b0:6b:dc:1d:2f:
         a6:69:05:49:ca:6b:52:33:e7:c9:77:6d:c2:97:cc:f6:60:9b:
         48:aa:33:90:8e:d6:5b:f6:36:46:c6:3d:94:61:31:6e:a9:d7:
         11:9c:dd:70:31:96:70:ac:68:08:1d:d8:01:35:7a:ae:28:10:
         69:b3:ce:62:8d:f4:fd:27:6b:af:a4:41:38:5e:37:cc:7e:96:
         6e:d8:49:1c:96:bb:75:5b:47:9e:40:02:10:a5:26:0c:44:5e:
         ad:24:70:e7:9c:ff:4c:c0:f3:89:cb:a9:bc:6b:b6:b4:76:16:
         ed:f6:7a:9f:61:d4:58:9b:c8:a3:f5:50:f8:e1:9a:fa:c7:7a:
         d0:f5:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:15 2026 by rpki-client