Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
File:                     XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json)
Hash identifier:          6nKiJIqcikTtE5T1pNdj6mevPwOQv7D+wZwWE3q9+Kk=
Subject key identifier:   27:9C:26:E5:E8:44:F5:6E:EB:DC:06:E6:28:13:DE:31:E4:63:B0:CB
Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B
Certificate issuer:       /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
Manifest number:          0F
Signing time:             Sat 09 Aug 2025 08:36:45 +0000
Manifest this update:     Sat 09 Aug 2025 08:36:44 +0000
Manifest next update:     Sat 16 Aug 2025 08:36:44 +0000
Files and hashes:         1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: Dnb/QOqpZiFLQ9xdNIuOlz6pr9EUwFujpcODLeAVi60=)
                          2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl
                          rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B
        Validity
            Not Before: Aug  9 08:36:44 2025 GMT
            Not After : Aug 16 08:36:44 2025 GMT
        Subject: CN=6897089c-5a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:5b:30:c8:0e:27:4d:4a:e5:4f:cc:8f:5e:
                    a4:d6:6f:38:f4:d4:f5:0b:f7:72:b2:ab:c3:ee:c7:
                    00:bf:63:cd:9b:a6:17:5b:fc:a9:b7:cf:70:1e:4a:
                    c5:44:2c:f8:31:07:26:19:76:37:04:23:9e:ce:c2:
                    7c:76:2f:5d:e2:2c:f5:33:a4:b7:b5:55:a1:3f:19:
                    24:09:06:39:3e:4e:29:04:32:38:2f:63:e9:f6:57:
                    b1:ba:99:43:4b:ef:3c:9c:3a:02:f1:e2:79:41:bb:
                    1e:ee:cc:5a:7f:a1:ba:10:c8:4c:f5:62:8d:e5:e0:
                    4c:12:7d:01:60:9f:63:10:32:3a:e0:f4:6a:a7:e4:
                    e4:a8:37:b3:f8:ad:64:a5:d9:41:7a:ec:05:a1:b9:
                    c3:15:d9:cb:2f:f8:32:ba:4e:f5:6e:e8:ea:a5:d3:
                    56:b4:90:9a:a8:5a:72:4f:b7:28:9a:ca:5d:70:d8:
                    ef:d9:e1:c0:d7:16:10:eb:36:c9:93:61:2f:fb:ec:
                    0b:51:10:ba:c5:7a:b3:2b:1d:a7:51:20:9b:aa:c3:
                    35:5e:d4:4e:b7:7c:96:d5:cb:b2:5d:f8:cf:40:4b:
                    21:12:56:ae:e2:92:7b:b6:47:68:93:53:80:62:53:
                    57:f2:20:30:50:68:67:44:f4:96:78:5b:8f:43:53:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:26:E5:E8:44:F5:6E:EB:DC:06:E6:28:13:DE:31:E4:63:B0:CB
            X509v3 Authority Key Identifier:
                keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:3b:76:bf:32:c1:68:06:8e:cb:fa:28:f1:bd:6d:29:1f:
         75:c6:73:44:a3:77:18:59:ba:e2:ce:08:c3:8b:1d:58:c7:9e:
         b6:ed:68:13:51:92:b7:7e:52:62:30:2d:81:54:37:c8:f7:7e:
         95:e9:eb:aa:03:9c:51:53:23:01:2f:06:01:5b:87:76:4b:41:
         4e:bf:db:f9:99:dc:5b:bc:5c:c7:e3:94:da:4b:c7:87:04:85:
         ca:2b:86:9e:83:9f:19:25:48:a3:68:e9:68:7f:04:3d:f7:f9:
         d6:2f:d4:83:bf:4b:2b:2e:cc:c7:49:67:7a:49:5c:f1:e1:89:
         71:17:6b:dc:3f:61:b9:b8:0d:de:d1:88:09:11:a7:e5:35:55:
         2b:68:05:39:71:12:e1:43:04:32:37:a1:b3:96:70:99:4b:95:
         07:2d:72:5a:d1:c8:dc:63:47:2c:e6:cb:ef:d1:c1:0f:9c:92:
         2d:42:2e:31:d2:3a:1f:70:2a:e6:67:93:a0:af:7f:13:2b:ee:
         01:a8:87:88:2b:9e:ca:70:e3:9a:0a:62:00:95:85:34:78:dd:
         64:c0:b7:70:47:f6:46:c8:2d:f4:b6:66:4f:20:e2:15:68:ed:
         af:d6:0c:29:15:2a:13:d6:ba:52:8c:9d:a3:c8:88:4a:f4:19:
         cd:eb:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:28 2025 by rpki-client