Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File:                     LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier:          xo8bVKrscOTcjrv7qMtpfmq6/cwc3xMKKHMnClGXtlI=
Subject key identifier:   22:A6:B4:9A:0D:9D:D8:8D:8B:D8:70:EF:8E:B0:EF:EE:55:56:DA:0E
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer:       /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number:          024D
Signing time:             Mon 21 Sep 2026 02:25:20 +0000
Manifest this update:     Mon 21 Sep 2026 02:25:19 +0000
Manifest next update:     Mon 28 Sep 2026 02:25:19 +0000
Files and hashes:         1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: IYSxhvQucYrY6qkhmkgJ9oIlo0f41EYnXaDBha3CRQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
                          rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
        Validity
            Not Before: Sep 21 02:25:19 2026 GMT
            Not After : Sep 28 02:25:19 2026 GMT
        Subject: CN=6ab0958f-a9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:77:b9:f4:ce:b5:49:10:bc:4d:74:b6:c9:
                    7f:f2:01:94:a5:53:40:f0:e3:a8:d9:93:56:0e:70:
                    02:cf:49:b3:a7:ed:c4:d6:d4:83:27:0e:7f:39:8e:
                    97:02:7f:c3:6e:55:5e:c1:e1:8b:6d:e1:96:e7:6b:
                    8e:cb:15:6f:55:cc:0c:0c:1d:3f:02:10:9a:39:65:
                    c6:f8:82:db:b0:70:ed:28:af:5d:ea:5b:29:3b:bb:
                    cb:da:a7:c2:bc:ab:51:f6:0d:08:c4:55:60:59:53:
                    41:7f:00:ac:6d:b6:26:52:35:94:9a:3d:d7:36:ec:
                    99:ed:f7:56:3a:da:77:b0:88:66:ad:87:a8:6b:3e:
                    f6:33:61:45:29:c8:c8:6d:00:35:60:6a:94:24:3b:
                    ad:f1:87:f8:11:9a:a6:cb:a8:92:40:62:36:03:ff:
                    ac:41:31:dd:91:b9:1e:4c:ed:d8:27:7d:d3:cf:87:
                    4d:cb:48:7d:8c:a4:3e:30:f9:c5:3d:69:99:ea:ca:
                    a3:17:24:64:0e:ca:ad:ec:20:3a:1b:44:2c:0a:d9:
                    f5:54:c8:f8:85:14:56:02:c2:d5:33:cd:7c:3b:c7:
                    f5:2f:a6:9d:57:b0:7d:e6:e1:e2:49:8a:cf:82:aa:
                    51:9b:c4:53:90:d2:79:00:4f:92:be:13:2a:45:84:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:B4:9A:0D:9D:D8:8D:8B:D8:70:EF:8E:B0:EF:EE:55:56:DA:0E
            X509v3 Authority Key Identifier:
                keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:05:99:3c:a7:bf:65:a6:a5:6f:db:31:6a:eb:50:06:cd:
         c0:97:59:51:70:2f:c6:21:da:f1:1e:50:96:07:0d:26:a5:ba:
         16:55:3f:7e:ba:ef:80:14:34:05:6b:17:31:e0:b0:ad:45:fb:
         79:a2:63:41:fb:75:1c:ff:19:6a:b2:72:92:a8:ed:29:a6:b5:
         c8:e2:09:14:53:df:a0:c5:44:ff:20:6d:e8:7b:59:e3:86:1d:
         56:d5:0b:39:53:f0:41:62:80:22:e2:69:3b:3b:de:06:9c:1f:
         40:3b:3a:a4:aa:00:ef:5e:c7:ac:ad:3c:8a:75:93:c3:52:70:
         24:e5:f2:0a:d7:e1:56:13:4f:d5:9d:74:3d:be:d6:20:45:4c:
         87:74:05:cd:19:2f:a3:09:83:6c:56:bc:82:c6:63:6c:58:09:
         48:99:c7:fc:71:69:22:5a:ea:ec:ee:a6:5c:45:ba:07:6c:62:
         33:0b:57:fd:e3:0a:ea:39:97:dd:fc:eb:89:cd:61:e6:f6:0e:
         a1:c6:a2:e9:69:95:41:9a:68:04:0a:e9:30:4f:60:1a:a8:6f:
         98:e9:c4:49:e3:77:77:db:64:4c:c4:ce:0d:ac:93:0a:83:1e:
         32:96:35:d1:cb:5c:0b:c6:dc:a8:66:f7:35:cf:4f:43:c8:f2:
         05:21:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:54 2026 by rpki-client