Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File:                     lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier:          Frh7nNW9Qlp6tri/U+q5GneWdwmdgtIhZRGKP4qRue4=
Subject key identifier:   0F:37:6C:4C:B3:BE:C3:71:00:2A:F8:73:47:51:33:06:49:88:2C:F9
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer:       /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number:          4F
Signing time:             Thu 07 Aug 2025 08:06:12 +0000
Manifest this update:     Thu 07 Aug 2025 08:06:11 +0000
Manifest next update:     Thu 14 Aug 2025 08:06:11 +0000
Files and hashes:         1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: mTVtzAItusuIDvhoe4s4ZYMyLgAR4MmFkIXR0UvKci4=)
                          2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: Hq759PuHcjxrqDO6XDqBKqYrfjX30gMufng1UMG6yPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
        Validity
            Not Before: Aug  7 08:06:11 2025 GMT
            Not After : Aug 14 08:06:11 2025 GMT
        Subject: CN=68945e74-fc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:de:2f:7d:b1:45:c6:35:10:75:37:cd:a4:
                    c6:05:b5:52:82:64:87:d2:cd:62:21:e1:5b:09:1c:
                    2b:c6:71:2b:83:f5:20:79:90:5b:24:93:14:3a:8a:
                    d5:b0:63:bd:f5:a8:71:da:4b:b2:eb:83:5b:75:65:
                    72:85:c9:b2:f3:d8:f0:76:ab:ac:eb:e1:45:08:fa:
                    28:6d:d0:55:8b:e9:03:7c:1d:0a:ec:f6:1d:43:a0:
                    34:64:e7:47:62:9d:b2:62:06:8f:2f:6e:3b:1f:24:
                    10:ab:62:dd:3b:78:52:27:6a:c6:c2:ff:3f:44:d3:
                    b8:70:03:c9:71:97:5f:6a:b6:9f:4c:d8:78:9e:c3:
                    69:93:8b:2d:28:fc:2a:7a:39:7c:c7:f6:ea:bc:83:
                    b3:51:be:3e:5d:cc:22:ef:49:9d:89:c9:a5:db:6f:
                    36:39:32:87:dc:04:cc:17:eb:a3:31:74:50:f3:5b:
                    9e:a0:fe:fb:29:1f:0d:e0:4e:1a:2d:26:4a:22:be:
                    93:d3:e6:76:0f:89:8e:a3:a3:da:81:61:34:66:d1:
                    64:b2:f6:16:69:75:76:d5:9c:dc:41:a7:d8:ef:b2:
                    28:1f:d9:68:13:44:f8:4a:87:57:51:5d:3b:23:1a:
                    c3:d6:ea:41:f4:90:b6:cb:e8:21:0c:44:92:87:ab:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:6C:4C:B3:BE:C3:71:00:2A:F8:73:47:51:33:06:49:88:2C:F9
            X509v3 Authority Key Identifier:
                keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:87:0f:eb:09:30:a7:83:fa:17:4f:4f:d6:18:35:04:8b:
         01:da:1e:3a:7a:0f:5d:6f:45:3e:f9:88:2c:dc:e3:f6:c1:bb:
         c6:63:6a:fb:90:d2:08:c7:88:2b:16:ff:61:0b:d3:e5:02:39:
         08:e7:46:54:00:26:8e:65:56:29:29:5c:8f:be:be:88:28:92:
         fe:e7:b8:9b:83:0e:58:79:f2:7a:88:7b:45:b5:4d:b1:21:b1:
         fe:b9:5c:2b:40:31:2a:68:59:e7:fa:3e:a1:a5:71:8d:88:fa:
         e0:33:f0:2c:80:96:cd:e7:1d:9e:f1:37:3f:22:f3:a3:aa:92:
         79:0a:f4:ea:80:67:82:78:e7:09:28:d2:2a:57:82:cd:28:ac:
         6c:71:79:61:33:f3:94:ad:c2:a5:0f:5c:c3:9d:86:65:b5:97:
         5b:37:eb:2f:41:fb:2b:6e:37:52:c4:02:d7:fb:6e:7d:45:87:
         5e:2a:86:8c:0f:b2:0d:2f:6d:d5:20:7e:88:a7:e7:03:9c:8b:
         64:d7:dc:0f:b5:4f:71:71:79:6e:d6:ee:69:77:5d:14:3a:d0:
         90:7b:37:45:c2:42:73:4b:51:68:e3:dc:e4:4f:88:3a:6e:e1:
         50:ce:a0:40:a2:15:85:73:7a:04:d4:19:da:8f:d4:50:16:e2:
         59:57:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:50 2025 by rpki-client