Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File:                     loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier:          3HqY8MnmvXcDVGrY5xmEguwadKA7pD5vPDV3YsvRh/E=
Subject key identifier:   C1:96:F9:4A:8D:93:D8:81:53:58:6E:50:80:01:E9:1D:AE:A1:21:D3
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer:       /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial:       05AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number:          0592
Signing time:             Sun 02 Nov 2025 23:15:42 +0000
Manifest this update:     Sun 02 Nov 2025 23:15:41 +0000
Manifest next update:     Sun 09 Nov 2025 23:15:41 +0000
Files and hashes:         1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: +rapjo2suVWF2QuYDmjK/0dzOXOBTkUv77qlnu/REo4=)
                          2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: KRiDfnMy2+pwD3zrIBOiDvY7T9O/jHD6MSYbIKfk0AY=)
                          3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: cMsOBL01lB8MhNIvPe7EZWZhW2/NqYoBIP9IcsqTKSI=)
                          4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: ToNYuKjsmNUrDjM3EopYow2kRZNQw6nwL7h9Ilwq2wI=)
                          5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: 9Xivq6s93mksbhu2p/H/z3gtS9/XmhNf3IMjTVy5pWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
        Validity
            Not Before: Nov  2 23:15:41 2025 GMT
            Not After : Nov  9 23:15:41 2025 GMT
        Subject: CN=6907e61d-6855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:ce:cd:16:37:26:bb:75:f3:18:6f:67:15:
                    6d:c4:b7:93:22:a3:40:b8:2f:bf:8b:ab:fa:b1:76:
                    56:fc:c0:7e:ea:0c:30:94:2d:97:38:73:4c:4b:0b:
                    47:09:3d:4f:d7:3b:b0:30:45:06:86:76:87:ce:00:
                    2b:83:8d:3d:0b:78:71:67:00:a5:d0:28:9a:6c:d4:
                    03:9a:1a:b0:b9:eb:a4:86:8d:58:72:00:70:80:b2:
                    17:40:4f:67:73:16:de:cb:48:30:1f:77:8d:90:f2:
                    80:27:a0:bf:04:0e:f0:47:69:6e:fe:7d:40:fe:40:
                    2a:02:6b:53:94:88:98:db:f4:43:8f:26:72:f1:26:
                    26:ad:16:02:69:3c:57:04:d7:1c:6b:a3:bb:c6:ac:
                    42:2b:04:b2:4a:e5:ac:1a:d0:20:11:7d:3e:fe:7d:
                    35:bb:26:b8:04:56:89:5d:81:84:5e:1b:9e:0d:20:
                    df:f0:47:7a:38:74:17:4d:63:cf:ec:26:ce:08:34:
                    af:21:05:2d:f2:46:96:6c:4e:17:78:e4:52:a5:6a:
                    55:6b:98:3a:eb:68:55:ec:8d:1b:d5:3d:f4:c9:2f:
                    c8:d5:47:e8:5f:1b:00:06:ea:15:44:f6:9b:4f:cc:
                    f0:c3:24:04:c3:9e:60:5a:ed:8b:34:3c:5a:50:68:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:F9:4A:8D:93:D8:81:53:58:6E:50:80:01:E9:1D:AE:A1:21:D3
            X509v3 Authority Key Identifier:
                keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:99:4b:06:01:2a:e5:0c:55:13:4c:84:e7:8d:2a:b2:3a:
         43:cd:e1:20:5b:6a:b0:03:fd:03:50:33:ab:59:e8:23:be:f8:
         25:bd:79:9b:cb:05:31:c3:5c:ad:f7:2b:50:d9:62:43:86:d4:
         6c:23:05:da:2e:6d:73:c3:93:90:0a:1d:bd:c8:6a:65:92:fe:
         e2:2d:4c:6d:fd:09:f0:65:ac:20:1d:f7:de:91:bb:d7:80:e9:
         70:23:c6:0d:bc:1a:31:f1:b1:dd:e9:2a:8e:7b:5d:4a:81:fd:
         c2:fb:27:eb:a0:74:ae:03:72:d7:32:7f:82:61:58:f8:a1:8a:
         d4:a6:2b:ba:28:77:ef:0f:4e:0c:a6:a5:ef:2a:de:81:11:46:
         37:5f:d4:00:54:d5:67:60:91:62:a1:83:73:d7:4b:ea:a8:0d:
         03:16:bc:4d:a9:96:a6:83:48:7f:f2:0e:1c:b1:10:b8:06:38:
         05:6b:f7:93:1d:18:90:5a:5b:81:11:2d:de:1c:74:84:30:ff:
         4f:8a:18:2c:0f:f4:2c:73:a8:1d:8f:58:5f:b6:6e:13:a6:d6:
         2d:32:47:bb:3f:6e:4d:2b:3b:0b:ee:9a:87:8a:27:ab:df:ad:
         89:11:6e:0f:f5:aa:75:85:d9:80:48:5a:d9:50:5e:d9:f7:14:
         96:c1:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:36 2025 by rpki-client