Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File:                     mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier:          y1vOrhFdV1RrqTJuPX7aTMDkyzTz5OFH2F1TpdJgcHY=
Subject key identifier:   D5:F1:08:62:FA:3E:35:51:79:32:B2:3A:DB:99:53:39:C6:40:DB:C4
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       05CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number:          05B3
Signing time:             Fri 08 Aug 2025 23:39:23 +0000
Manifest this update:     Fri 08 Aug 2025 23:39:22 +0000
Manifest next update:     Fri 15 Aug 2025 23:39:22 +0000
Files and hashes:         1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: 5ie7tMPeKv4qcN7Q0KhyjzgfCz6tucxwQwBT/EzFFgI=)
                          2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k=)
                          3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Aug  8 23:39:22 2025 GMT
            Not After : Aug 15 23:39:22 2025 GMT
        Subject: CN=68968aab-33cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:f7:0f:24:0e:84:e1:68:6c:a6:bd:81:5f:
                    c7:24:97:03:d5:fd:b0:7b:21:8f:11:7b:f0:f5:18:
                    29:ab:04:2c:9d:10:1c:8d:86:ef:0e:f6:40:cf:c5:
                    d9:54:4f:e9:11:53:79:a3:b1:94:80:31:dd:a3:57:
                    0e:c3:18:4d:06:03:4d:76:85:ab:75:86:6a:eb:c6:
                    9d:d4:f9:a3:22:8a:ad:fb:81:97:02:df:81:d1:6b:
                    ba:f8:56:6c:6b:a7:4d:a4:a5:ce:6c:5e:dc:dc:ae:
                    60:ab:5f:f9:7e:c0:c8:52:5e:0b:0e:d9:33:f7:96:
                    27:22:c1:97:6f:24:82:2c:a2:11:f7:b5:24:34:56:
                    48:a3:4d:ca:30:33:f7:cc:97:88:05:e6:6b:53:7d:
                    34:74:12:1d:e4:ed:bf:87:3f:fb:68:14:c7:cd:ac:
                    6e:be:28:87:df:8e:06:92:fb:a0:56:b9:24:32:a1:
                    cd:32:b2:36:d3:c6:60:6a:a1:21:8e:e7:a4:b1:07:
                    0c:65:5a:48:32:fb:ed:59:2a:d1:b5:f8:d9:f9:08:
                    e1:07:ff:9d:46:b6:d9:f1:b5:1d:5c:33:23:8f:3e:
                    e6:22:f3:00:d5:2c:23:3c:44:23:ea:8a:56:5a:f3:
                    7d:aa:46:6c:f4:75:a2:7f:97:4a:6a:67:37:7a:05:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F1:08:62:FA:3E:35:51:79:32:B2:3A:DB:99:53:39:C6:40:DB:C4
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:9d:5d:cc:5e:1d:ae:e3:a4:ee:24:47:f9:da:1e:5f:a9:
         74:f5:d3:c4:69:55:c1:fc:90:8d:a4:7e:eb:c6:bd:30:8f:c5:
         48:f0:5b:7b:0f:fb:cb:b4:cc:08:e9:46:a6:af:64:8b:6f:ed:
         c8:b0:e4:4c:07:13:f6:11:b1:87:28:da:9d:7f:5a:1b:9e:7f:
         05:a4:8d:8d:07:53:40:76:85:7c:6d:ea:4e:13:c1:89:2f:14:
         d0:80:89:0b:7f:35:c0:fa:9d:f0:dc:fc:8f:03:35:b8:2d:bd:
         e9:ac:d0:a3:3c:41:bc:1b:2a:f9:1e:c7:25:6d:cd:95:f1:1a:
         5a:62:ca:a1:c3:a4:1e:31:0e:64:8a:39:50:fb:17:b5:aa:db:
         b2:0c:03:f2:0a:8e:a9:2a:98:3b:20:e6:35:a7:9e:86:d1:3e:
         f6:5b:ab:48:bf:20:60:8a:af:20:c3:7f:1b:0d:91:7c:52:01:
         55:42:63:31:9e:a8:4d:68:f9:af:bc:9b:97:a3:89:16:f5:2a:
         c2:11:1e:00:00:9e:99:fc:50:89:ef:94:b5:c8:f0:8d:ab:d8:
         48:e8:fb:69:e3:22:02:2d:19:b4:6f:05:7c:35:79:6b:7d:1b:
         9a:e7:92:ff:f6:9c:5d:38:12:b7:c5:01:01:10:bd:c2:03:4e:
         14:de:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:17:53 2025 by rpki-client