Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File:                     LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier:          eY8qbhW4mU102QPop+l5h4gaq/l6AgOpNp4TOkXJ3Qw=
Subject key identifier:   12:4B:58:23:08:C1:7D:E4:4E:3B:1A:E7:CB:ED:F8:51:60:98:4F:1D
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer:       /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial:       09E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number:          09BC
Signing time:             Sat 28 Feb 2026 20:17:51 +0000
Manifest this update:     Sat 28 Feb 2026 20:17:50 +0000
Manifest next update:     Sat 07 Mar 2026 20:17:50 +0000
Files and hashes:         1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: tJYy9VGiuaIUnsRHTSUIyTQn7D9mKLbsK/ITPV/0HQg=)
                          2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=)
                          3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
        Validity
            Not Before: Feb 28 20:17:50 2026 GMT
            Not After : Mar  7 20:17:50 2026 GMT
        Subject: CN=69a34d6f-df8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:f1:d5:11:70:af:60:38:97:fb:1f:d9:7a:
                    39:43:fb:ee:f4:73:a7:8c:6a:bf:6e:50:81:58:c7:
                    89:4b:0e:17:e4:7b:b3:21:85:d7:a8:fb:44:e1:12:
                    42:04:d8:e9:9a:70:01:74:b6:f3:86:c6:8b:76:17:
                    55:7d:40:53:c7:46:3b:0a:f8:28:e0:76:49:d7:ad:
                    26:92:36:e0:18:74:65:c7:54:2a:33:ea:3b:52:af:
                    36:b6:b4:96:a3:11:a5:5e:4d:5b:f7:e2:a0:98:37:
                    80:07:d8:65:34:e0:81:55:7c:8b:f9:6a:d9:4b:9c:
                    6c:eb:79:9c:1a:fa:f2:8d:16:1a:79:95:d0:79:90:
                    bc:fb:79:f9:34:69:51:59:87:dd:27:a2:44:2f:4f:
                    92:79:cf:c1:7e:40:fe:28:89:28:5e:41:75:bb:d3:
                    12:c5:c1:78:a9:02:fb:7a:2d:33:d7:85:33:26:3e:
                    3b:f1:42:7e:ef:de:9d:32:2b:a2:fd:c4:ae:56:0b:
                    15:56:fa:98:11:ab:c0:8e:c8:85:e2:6a:99:ac:b7:
                    da:bf:44:f8:2a:6c:43:c0:51:56:78:5e:54:cd:66:
                    cf:1b:5e:b8:b0:1b:dd:67:c5:18:35:85:83:22:a8:
                    d9:ae:1d:63:42:7a:d4:30:0e:c3:5b:bf:f4:22:31:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:58:23:08:C1:7D:E4:4E:3B:1A:E7:CB:ED:F8:51:60:98:4F:1D
            X509v3 Authority Key Identifier:
                keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:d2:d9:1c:75:50:2e:a6:30:f4:f9:fe:c4:1c:b9:39:6a:
         f9:5b:8d:e7:1f:db:1a:ff:a2:f2:45:30:d5:ae:59:79:e5:f1:
         0f:d1:14:a2:c9:30:e1:85:09:5d:96:74:d5:fa:ff:cf:e7:3b:
         5b:0d:91:6b:bb:c4:2d:75:71:8e:61:6d:5a:7b:95:46:27:cb:
         bd:71:77:c6:ac:43:59:00:e6:68:bd:91:95:d4:db:a4:fb:b0:
         f5:70:4d:0d:3b:f9:45:ad:89:32:d3:4d:b1:92:b2:4d:e9:b0:
         7a:3e:d2:89:44:91:56:ac:dd:5b:21:06:41:e5:1c:55:b4:d2:
         43:ac:2d:ae:e8:bf:17:c3:2a:2e:88:52:50:25:53:d7:5d:c0:
         bc:58:6b:64:49:12:9e:b4:df:8e:0d:d9:fd:e0:d0:b1:5a:c0:
         ef:03:ef:8e:a8:9e:72:4a:15:f0:0b:c8:17:a5:c3:e8:7e:16:
         d9:63:16:2e:78:86:43:7c:b6:54:eb:20:3d:08:2f:cd:c7:c8:
         93:24:0c:8d:93:31:fb:83:06:d3:4e:2d:97:11:3a:ad:3a:30:
         f4:da:bf:0f:4f:24:07:98:91:d6:48:3c:57:be:e0:17:da:85:
         db:b8:54:d3:fe:3e:bf:1e:a1:d7:35:41:fd:03:f4:80:af:94:
         dd:8b:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:24 2026 by rpki-client