Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File:                     LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier:          oIvZJ6VNTFy3fdgyS8aqKfYAw6jjIpqAfs5NPGPJp8g=
Subject key identifier:   68:93:A8:44:06:B4:15:AD:DF:32:E8:37:BE:C7:62:CC:7C:DB:7E:C4
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer:       /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number:          0191
Signing time:             Fri 25 Apr 2025 02:38:11 +0000
Manifest this update:     Fri 25 Apr 2025 02:38:11 +0000
Manifest next update:     Fri 02 May 2025 02:38:11 +0000
Files and hashes:         1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: jb4QGrUnV5tnjtS855x5E6qUGOHZ7wECMuDrhQ3i+wU=)
                          2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
                          rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
        Validity
            Not Before: Apr 25 02:38:11 2025 GMT
            Not After : May  2 02:38:11 2025 GMT
        Subject: CN=680af593-8f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:30:49:26:5b:f4:46:90:69:fe:d2:15:bc:
                    72:66:d0:35:49:3a:5f:ce:93:13:cf:56:ee:b1:e5:
                    a2:d6:a0:0f:72:93:85:12:53:79:76:21:70:d4:74:
                    92:cd:9c:44:12:bc:0a:7b:2d:b9:d3:12:bb:bc:70:
                    87:80:82:02:7d:be:3f:95:66:1d:00:4e:02:47:74:
                    5b:b2:25:81:0f:11:95:f2:9a:0d:fd:29:48:fe:b3:
                    f3:03:18:cc:3f:1d:6a:f3:99:31:39:9a:88:35:c3:
                    91:d6:57:6e:a2:3c:89:8f:cf:28:fc:23:8a:79:b2:
                    b9:4e:38:30:23:fd:54:7d:03:a3:58:35:bc:89:ef:
                    fc:d4:5b:18:a9:0a:1c:47:6d:d2:60:f1:ab:b8:da:
                    72:66:1c:45:10:69:07:49:71:e5:3d:35:b9:6a:e4:
                    f8:27:86:8a:d3:54:51:2c:d4:46:4f:22:c3:69:24:
                    4b:a5:f1:5c:77:24:6e:b6:57:b0:06:0c:75:6f:9e:
                    56:1b:30:03:a6:c3:8e:ca:61:0e:aa:e0:74:a5:8b:
                    21:1e:2d:a7:50:5d:a2:c8:b2:fa:4c:83:1c:08:42:
                    12:42:3a:59:9e:28:d9:66:17:27:9e:d8:66:99:ef:
                    18:5d:8b:98:41:c4:da:3a:64:79:3a:d8:d5:89:b0:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:A8:44:06:B4:15:AD:DF:32:E8:37:BE:C7:62:CC:7C:DB:7E:C4
            X509v3 Authority Key Identifier:
                keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:23:16:ef:75:22:35:7e:be:b9:3f:0e:85:ac:1a:b4:12:
         5f:f2:ae:d5:ef:3b:5f:72:6a:59:b7:b0:df:11:df:8f:42:a7:
         9a:ea:21:69:a8:02:43:71:64:02:d0:19:e9:96:97:54:bb:85:
         78:ef:c3:82:a7:50:25:fb:72:70:e0:1b:8a:c6:24:ba:62:98:
         4f:0e:47:1e:4b:d1:12:84:19:a5:70:a3:1d:72:ed:1d:d5:11:
         8e:60:f6:01:63:7d:be:da:45:17:b1:9d:64:b3:ec:07:ca:63:
         68:5e:77:9a:8c:4a:32:30:17:86:de:c8:a9:88:a5:d3:c8:22:
         0f:9b:61:51:ea:e8:e6:e6:9f:42:15:6c:56:4a:3a:76:ff:12:
         7a:c9:28:cb:64:ca:62:2a:73:c1:bb:c6:0b:90:c0:cf:5a:ae:
         56:25:d2:ad:06:39:12:76:f5:e3:07:c4:5d:cf:11:ea:fa:4d:
         be:c1:93:93:8c:b7:9a:ec:5b:26:45:ae:cd:6d:9f:9e:a8:e9:
         a3:30:91:d6:ed:08:fa:1a:e4:7d:ae:5e:40:e9:ff:62:bd:fd:
         4b:e3:ab:0d:21:9f:fb:0e:da:88:d6:18:84:9e:61:54:24:da:
         e7:49:40:ee:81:eb:82:56:36:a9:fa:b2:ca:d9:e2:7a:20:7f:
         1f:a2:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:30 2025 by rpki-client