Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
File:                     LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json)
Hash identifier:          VDhoDt7853jEgBL9WJakCVpFy9XA5wv/ApT104jsEfE=
Subject key identifier:   9F:F6:C1:1A:80:9F:45:6D:62:B8:E6:E4:68:16:0D:58:B3:69:24:61
Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
Certificate issuer:       /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
Manifest number:          9B
Signing time:             Mon 21 Sep 2026 07:22:38 +0000
Manifest this update:     Mon 21 Sep 2026 07:22:37 +0000
Manifest next update:     Mon 28 Sep 2026 07:22:37 +0000
Files and hashes:         1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: gYBfKQhGLhk47B4S/w/zJGd1mnv9E4xxcuOE8r31ebw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
        Validity
            Not Before: Sep 21 07:22:37 2026 GMT
            Not After : Sep 28 07:22:37 2026 GMT
        Subject: CN=6ab0db3d-4b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:f9:c5:0a:bd:61:f1:a2:ad:64:0c:92:22:
                    5f:a0:84:77:3a:ab:5b:0e:9f:f1:38:88:66:20:06:
                    c2:b7:af:df:be:e1:37:dc:0d:d8:22:83:d0:7a:a3:
                    7b:eb:58:d5:b9:ea:ea:7c:15:e2:3d:ee:7b:c7:ba:
                    9b:5f:86:82:df:61:31:fd:15:c8:28:0f:ca:c9:94:
                    0e:34:95:c5:de:76:aa:7a:07:c5:08:41:5e:dd:6b:
                    63:5a:bb:43:9c:db:87:38:1b:fb:74:ff:c2:bc:d6:
                    bc:5a:2a:38:7d:7e:9a:29:3d:a1:24:9a:30:69:87:
                    5d:51:83:b2:12:24:50:df:6d:12:93:54:91:19:9a:
                    97:64:79:fa:01:13:11:80:f5:bd:0e:62:d7:91:8d:
                    86:25:00:94:02:59:05:dd:3d:6e:51:ec:71:36:6f:
                    3a:85:7a:45:e7:3d:9f:43:a8:86:be:96:87:e0:a7:
                    7e:86:aa:27:d3:01:de:43:e5:93:8a:85:03:7d:5a:
                    ac:4b:c1:23:03:01:ae:ee:d0:a9:e2:44:13:e8:5e:
                    25:c0:30:8b:07:e0:41:1c:1d:bd:ab:e3:68:7d:2f:
                    f6:1d:d6:79:71:5f:25:f1:47:7a:4d:52:3a:7e:94:
                    16:0c:be:57:3c:d6:ec:8f:19:3a:7a:ca:91:3e:81:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F6:C1:1A:80:9F:45:6D:62:B8:E6:E4:68:16:0D:58:B3:69:24:61
            X509v3 Authority Key Identifier:
                keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:25:19:f9:01:25:f3:0f:51:ac:23:e2:30:89:5f:e7:7d:6a:
         4b:ca:a6:3d:dd:4e:b8:4b:4b:2b:9e:91:61:18:72:7f:c7:5b:
         7e:3b:97:e7:79:bd:33:51:d7:5c:bf:a1:00:05:49:ad:1c:f9:
         45:f8:08:b9:62:98:ab:5a:ba:69:6f:36:df:c1:ec:9c:66:35:
         72:68:67:af:5f:78:a9:cb:cd:cf:49:c4:c5:03:57:60:e1:fe:
         10:13:d8:5f:c3:92:82:95:97:01:58:a4:01:b7:4f:7c:66:32:
         c4:3f:a1:dc:b1:5b:d5:e4:8c:89:d6:ce:0e:3b:86:a9:05:eb:
         22:41:0a:84:a2:fd:48:65:30:8a:05:f5:6e:a6:e8:49:42:58:
         9f:d6:24:83:02:49:57:2f:c1:63:b7:e4:d6:4a:f7:af:af:f1:
         41:9c:5a:8c:ac:7a:f7:4c:ee:c7:10:c2:87:eb:01:05:23:72:
         99:90:2d:8d:e5:7d:c6:fa:27:36:c1:09:6c:2c:01:aa:b4:e5:
         93:89:73:c8:7d:14:3f:94:8c:a4:26:36:63:57:bd:66:5d:25:
         b9:e1:36:eb:0b:67:7d:87:4f:41:da:ac:01:f3:e4:32:f7:32:
         ca:25:df:61:ce:e5:a4:23:dc:14:33:fb:a3:a3:8d:08:14:ef:
         44:d2:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:34 2026 by rpki-client