Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File:                     LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier:          je2MdOUTf9KP71t+d5HBV4Hj5LPEloAGkd1ptybclbY=
Subject key identifier:   1C:F3:70:AA:21:93:8D:96:AE:27:32:E5:F6:AB:1D:BD:AC:03:8F:E6
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number:          80
Signing time:             Sun 15 Jun 2025 06:27:49 +0000
Manifest this update:     Sun 15 Jun 2025 06:27:49 +0000
Manifest next update:     Sun 22 Jun 2025 06:27:49 +0000
Files and hashes:         1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: xtdhguiZ/Rjm7KWSw/ETMghWixDXb+WEFiFZBNv8bQA=)
                          2: 0796BD62415F11F0800CCD2AC4F9AE02.roa (hash: 031Q0mMet9eWidxn1xhtX/PCVs0f53wSS/weL3h6xzw=)
                          3: 935707803BE711F09494D037C4F9AE02.roa (hash: +MXUF9DoN5yICuNkNZAMJrDi3yE0Lm5ipoQu5U0V5cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Jun 15 06:27:49 2025 GMT
            Not After : Jun 22 06:27:49 2025 GMT
        Subject: CN=684e67e5-1e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:9a:bc:20:03:0a:2d:70:1b:ab:cd:95:b9:
                    d3:46:a1:7f:6f:33:23:5b:42:84:bc:16:08:41:fa:
                    23:0e:8e:24:a2:06:65:0f:08:d6:8e:1b:84:8e:8b:
                    5d:03:68:e4:90:31:05:52:cb:e7:87:3c:95:bf:2a:
                    1b:45:2d:48:cb:20:80:df:22:c7:7a:16:1e:73:d7:
                    75:78:3d:b5:4a:ee:5f:b5:5b:e5:a3:5d:34:70:44:
                    1f:58:db:65:a1:3f:b5:72:73:75:ff:25:12:08:d2:
                    f1:6b:95:06:97:96:49:bb:07:77:71:43:4f:7c:52:
                    c4:56:63:65:d3:f0:23:db:65:9c:7b:d6:30:ec:d1:
                    27:11:62:0e:dd:2f:92:b7:5d:eb:04:b7:b4:49:59:
                    c8:5f:2e:ee:90:9b:f3:0e:b7:ab:43:19:79:e9:74:
                    d0:ab:bf:b4:27:c7:ce:2f:5f:9a:ad:77:7e:d8:38:
                    ed:e3:b0:c7:ff:83:93:0e:22:78:a6:41:9c:a8:dd:
                    23:48:8b:57:fc:36:d0:24:6e:de:2e:f6:9e:27:dd:
                    83:0b:24:52:c6:48:16:90:f7:81:7d:a7:df:f5:c9:
                    03:ba:80:a4:a0:a2:ed:45:ac:7d:21:5b:16:b5:10:
                    08:76:57:67:ea:83:c7:2a:7e:03:f9:a2:c7:66:f4:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:70:AA:21:93:8D:96:AE:27:32:E5:F6:AB:1D:BD:AC:03:8F:E6
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:20:5f:fa:0f:c4:6f:6b:a9:8c:ae:88:71:61:64:6d:eb:24:
         d7:de:8c:3b:22:7d:05:48:70:60:9b:99:d2:df:16:0a:96:1f:
         38:e3:82:0b:40:7a:9b:21:6b:db:d0:8e:89:d0:0a:b8:e0:c8:
         a7:ba:e3:3a:27:2e:49:2c:a7:4a:38:63:31:56:69:88:78:0f:
         cb:7c:d7:75:bf:33:16:5a:99:4d:b5:1c:49:39:2a:71:00:df:
         1a:86:a3:c4:29:38:6a:9d:87:0b:e0:b7:1f:4b:ab:33:57:c0:
         15:0b:6c:98:42:46:75:24:88:28:25:20:0e:fd:9e:ef:9c:6f:
         6b:f5:dd:c8:10:d7:67:9a:dd:84:89:17:d5:cd:5d:38:01:73:
         64:ce:23:66:c9:3f:f7:9c:23:6d:b4:bb:eb:4c:29:03:f3:06:
         83:5d:0b:36:2a:52:69:0a:fe:07:86:a0:ca:93:08:00:d1:9b:
         1a:bc:d3:b3:75:0a:70:64:87:1a:07:92:5c:30:d1:e2:ee:55:
         31:2c:31:60:db:34:78:98:d6:fe:07:78:ff:c0:d5:5c:74:4f:
         0b:fb:4c:20:33:cc:1f:3a:5f:08:6e:1f:8f:68:73:c9:34:c1:
         7e:28:40:91:50:4d:8b:81:3b:1c:6c:52:6a:47:9b:77:88:5f:
         3c:8b:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:02 2025 by rpki-client