Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
File:                     LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json)
Hash identifier:          KZd8OjoQ0zfKJk5XNHlZraJot1a58jTmWdVXPvaRA6g=
Subject key identifier:   AC:C6:D9:B7:FD:EC:BA:89:F8:4F:35:0A:DE:14:DE:69:DB:CB:0E:04
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Certificate issuer:       /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
Manifest number:          0280
Signing time:             Fri 17 Apr 2026 01:35:40 +0000
Manifest this update:     Fri 17 Apr 2026 01:35:40 +0000
Manifest next update:     Fri 24 Apr 2026 01:35:40 +0000
Files and hashes:         1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: RQlsw/LQPy3ZapVxWvfQXleDBMRnikJffH1nzMdsIBs=)
                          2: 552D155464A711ED99D40117C4F9AE02.roa (hash: D5QNOEYZTaVxGTG0sg1pVADh30TxHcQUWw6CHAWGbF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
                          rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
        Validity
            Not Before: Apr 17 01:35:40 2026 GMT
            Not After : Apr 24 01:35:40 2026 GMT
        Subject: CN=69e18e6c-dafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:f8:c0:31:be:94:cb:3a:bd:ab:be:e0:4e:
                    fd:e7:01:d1:da:36:42:a0:fc:a0:c3:16:70:40:04:
                    14:09:3e:49:d7:c4:e0:0d:03:cb:0b:ce:1f:1f:2d:
                    41:2b:d3:f2:28:62:f0:23:b8:1b:be:55:5e:1b:d5:
                    a8:45:a6:f4:80:a4:03:7f:04:47:54:a8:64:e9:7b:
                    1b:3b:11:ed:9d:36:e4:61:1a:ad:d1:6d:e8:07:dc:
                    91:a9:be:46:2d:06:bf:26:28:f7:ef:b6:38:35:e2:
                    d0:91:59:71:8a:87:18:c7:e6:10:c6:bd:50:3f:71:
                    fe:03:70:79:5f:46:3d:c7:3f:9e:ef:3c:53:c2:53:
                    28:50:5c:0c:e9:b7:81:33:ab:0b:c5:1e:b2:93:14:
                    6a:9c:ed:83:d8:ed:29:70:b7:cc:7f:45:e3:77:9a:
                    e6:f8:9b:0a:e7:47:fe:35:56:c5:34:27:91:2d:6f:
                    8a:c9:e4:31:a5:28:da:d3:f0:ae:0f:e8:d3:43:0c:
                    41:d3:30:96:2d:8e:37:a6:51:2a:15:8f:75:7f:71:
                    22:8a:1c:97:9f:53:af:38:33:f0:05:9f:36:42:a8:
                    37:f4:b3:87:c9:68:aa:f9:f5:f1:e1:e8:01:96:08:
                    07:58:d6:02:e9:e9:57:63:37:0b:8b:e4:33:35:38:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:D9:B7:FD:EC:BA:89:F8:4F:35:0A:DE:14:DE:69:DB:CB:0E:04
            X509v3 Authority Key Identifier:
                keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:3f:02:c1:bd:d0:57:9b:06:d9:17:5d:dc:c8:09:ba:7c:
         cd:e8:4b:27:9e:1e:26:d4:03:01:21:78:8c:9c:32:88:ea:e6:
         72:7f:e3:51:b0:87:7e:cd:1b:5f:00:f2:58:5b:ce:26:e5:83:
         bd:f6:42:99:da:a2:5a:8e:78:09:87:ad:31:72:1b:1d:f4:3b:
         aa:6a:17:8c:92:e7:42:20:49:33:28:eb:41:aa:ee:f5:83:90:
         2d:0c:c2:a2:5f:5f:18:83:d5:93:31:37:73:73:42:e0:a5:f5:
         fe:f2:48:6a:d6:b9:6f:05:d2:99:fd:89:ac:a0:bd:32:84:6e:
         fc:5d:d1:1d:62:4a:32:06:95:81:53:e5:82:3e:3d:b8:de:c1:
         49:fd:79:ee:31:3c:e4:94:21:df:c6:e6:62:89:7e:2a:63:d6:
         c3:d1:f4:24:48:26:2c:2c:6c:b5:36:af:71:44:40:26:dd:1b:
         83:5d:11:52:c9:d7:25:3e:07:55:2c:9a:7e:11:31:0d:65:57:
         c4:42:2c:a6:34:e0:47:0e:9f:e9:d5:cd:3d:4c:c9:1c:1d:fa:
         4d:62:9a:c7:da:1c:f5:a8:b5:b2:23:5d:68:ae:19:cb:df:c3:
         11:6f:15:6d:58:84:23:6e:c2:7d:42:dc:0a:df:93:a5:b5:36:
         a6:b0:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:25 2026 by rpki-client