Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File:                     XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier:          HBc1joFdvDorpmbUyoEzdnFiB1JsW2wWcayhkmmVwdo=
Subject key identifier:   74:56:42:CD:8D:0A:6D:73:EF:59:4B:68:FA:ED:FA:AA:6D:1D:1B:AA
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer:       /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number:          C3
Signing time:             Mon 27 Jul 2026 09:04:00 +0000
Manifest this update:     Mon 27 Jul 2026 09:03:59 +0000
Manifest next update:     Mon 03 Aug 2026 09:03:59 +0000
Files and hashes:         1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: k8NQbHJQ62zWPh+AWRm5MgaD2GgBGw45uOOvcNyFVRo=)
                          2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: TZHZVxW7CCxI2mCLIvTu0gRF/uCRxB2tLN96dmNIMvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
                          rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
        Validity
            Not Before: Jul 27 09:03:59 2026 GMT
            Not After : Aug  3 09:03:59 2026 GMT
        Subject: CN=6a671eff-996c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:78:91:ed:06:ce:f2:cf:ec:c4:52:0d:24:
                    d5:51:e1:2d:8f:fe:ec:9b:a4:7d:b7:c8:1e:9a:d9:
                    9e:30:51:28:ca:41:61:bc:f8:a5:d5:a7:de:bb:ca:
                    56:47:51:57:b5:8b:ef:e8:b9:ab:4c:cd:d4:d2:99:
                    35:bd:85:78:2b:bc:3c:26:24:73:3c:a7:96:9e:ed:
                    cf:d0:a0:43:2a:c3:dd:0f:44:3d:fe:35:01:ee:24:
                    5e:48:cd:cb:67:0e:a6:a0:eb:8f:f6:f2:1b:c8:49:
                    57:d6:bd:ef:7a:5e:12:d6:35:08:46:15:cf:4b:02:
                    17:d1:7f:0e:6f:c7:0d:a1:7e:0e:55:93:84:d6:2c:
                    9c:9c:51:51:4e:26:0f:20:25:61:39:db:ed:30:52:
                    3d:a6:74:2f:9d:b4:2b:20:e9:cc:5c:ba:90:d1:27:
                    47:86:34:0e:a8:ec:7b:f0:15:4a:da:6b:c2:32:f9:
                    ca:60:5c:fb:49:03:67:ed:2b:c4:a2:c6:00:f5:b1:
                    c7:05:30:7c:64:42:d3:40:80:8a:d5:ab:47:f0:0f:
                    a7:c3:10:aa:de:82:20:1b:82:a4:a5:2b:b9:73:dd:
                    6c:94:15:25:7a:54:52:e2:56:d9:cd:b9:49:cc:f1:
                    1b:93:eb:8b:c9:26:98:dd:73:b2:2d:42:2f:9d:ac:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:56:42:CD:8D:0A:6D:73:EF:59:4B:68:FA:ED:FA:AA:6D:1D:1B:AA
            X509v3 Authority Key Identifier:
                keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:ac:96:f5:4a:d8:41:48:68:58:c5:5e:32:39:e2:13:f9:36:
         e3:21:a1:ab:47:45:25:a5:1c:f2:fe:e7:b9:4c:1f:e7:07:ff:
         cc:1f:91:30:2b:6f:31:ef:c0:51:a1:a5:6d:7a:67:7a:e0:8d:
         11:56:bc:2d:1d:bd:9b:34:8a:1b:6b:4b:9b:f7:4a:c0:b0:b6:
         6f:62:80:c7:cb:18:2f:46:ad:97:e4:7e:33:81:02:a2:01:7d:
         af:b9:0b:89:22:6c:d1:81:e2:cf:b8:bd:d9:13:82:28:82:64:
         39:21:6c:b3:40:70:24:ce:44:9e:c5:d7:a5:40:e5:98:24:87:
         08:f8:2b:86:60:9a:e7:fd:f7:d5:83:cf:28:7d:1f:bf:37:d7:
         80:eb:13:3e:65:78:13:aa:c4:d6:67:b0:12:a2:bc:ce:f6:51:
         12:1d:93:14:ff:b3:b9:86:5e:5f:15:9c:04:2b:4c:79:cf:f7:
         bc:ea:7e:11:56:d5:d4:0b:d9:59:7a:75:0d:c2:77:7e:c7:b7:
         72:fd:7f:c6:0d:77:41:ff:a2:0a:61:83:17:85:51:f1:10:62:
         98:a0:e5:58:64:c1:ed:11:1f:cd:e6:1b:e2:59:71:db:a4:e3:
         a5:64:95:6f:38:47:92:19:43:1e:bb:de:cd:4f:51:b8:c9:45:
         bd:5c:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:01 2026 by rpki-client