Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          uOgFJK/VLl9f/OU/sVBPW0pOM6TxkEEbO7UvmCFy8l8=
Subject key identifier:   9F:49:3F:2E:28:B8:A4:D1:4D:43:37:C9:07:DC:AE:66:48:A4:D8:DE
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          2C
Signing time:             Sat 09 Aug 2025 08:13:14 +0000
Manifest this update:     Sat 09 Aug 2025 08:13:14 +0000
Manifest next update:     Sat 16 Aug 2025 08:13:14 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: Cb5XEaouyve1JZqDVukWtYY29CcYUvaqHOhhAQb0snU=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: e/qoVpmKt8fCZimHa48idWx8ZDlS0KQsXYwTkjXC6NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Aug  9 08:13:14 2025 GMT
            Not After : Aug 16 08:13:14 2025 GMT
        Subject: CN=6897031a-b9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:9a:12:e3:45:04:03:97:84:23:79:1a:93:
                    a7:9c:2a:8e:98:0b:23:35:f0:c5:dd:d3:03:67:c0:
                    2d:cf:72:ee:6e:2a:0b:a0:55:2b:96:da:23:c6:c4:
                    46:5a:44:51:dd:e3:67:f6:c7:52:d5:f2:05:a6:92:
                    c6:83:b1:90:37:92:75:86:6a:3b:24:0f:99:ac:24:
                    93:81:74:ba:da:73:9f:fb:45:ce:13:0b:f3:ef:e3:
                    64:4c:c8:27:38:3c:60:86:79:98:c2:26:9b:f6:d7:
                    cf:43:23:c4:2b:60:bb:1f:e9:e9:4d:27:c6:10:ab:
                    2e:fc:ad:e8:c7:c7:80:35:33:68:b9:cf:8a:f4:75:
                    08:22:94:c9:51:20:8e:b3:f1:82:7d:28:db:9f:8e:
                    46:30:6b:68:5b:52:34:56:3d:07:39:53:f9:79:e9:
                    24:6e:5f:61:61:6c:14:c3:34:6a:12:15:f6:ba:f2:
                    3d:cd:f7:8e:21:19:a9:27:47:03:19:30:3c:57:61:
                    1b:8d:81:0b:19:ab:7d:3e:f7:4a:c2:99:e5:d3:d5:
                    9a:94:a7:54:06:6c:16:23:d6:ad:66:07:b5:bd:1c:
                    01:cb:06:64:23:a8:5b:67:dd:a1:7f:d7:9a:c5:45:
                    1d:e9:87:6e:fa:49:2e:70:65:71:b5:9a:67:1f:d8:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:49:3F:2E:28:B8:A4:D1:4D:43:37:C9:07:DC:AE:66:48:A4:D8:DE
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:d0:72:d9:0c:7f:61:3c:81:82:a8:8f:83:ef:ab:bf:6c:
         6d:ca:cd:34:95:b3:4b:04:d9:b9:04:e6:14:99:f7:cb:35:f8:
         18:73:47:41:b8:6b:d0:f3:54:b0:d6:4a:3b:12:f0:23:5b:73:
         14:b3:f5:6a:8f:d2:a6:ce:89:7c:4a:e6:71:19:c3:3b:bf:21:
         17:94:57:6c:1b:34:93:97:d7:f8:23:be:17:bd:67:22:cf:db:
         2e:2a:95:5a:09:c1:99:cf:f9:79:e2:27:c5:ae:61:e9:34:60:
         98:ce:f8:cd:f4:8c:0a:2c:2a:a2:43:72:dd:1a:0a:09:ad:0d:
         7b:a7:3d:bb:97:09:7e:9e:da:8c:a4:60:22:b6:da:ee:e7:ef:
         1f:3c:a2:66:3e:9c:57:ee:79:60:50:13:a9:2e:f8:15:e1:5c:
         e1:29:6a:e9:3f:9e:ed:d3:5e:7c:12:4f:f9:3d:43:1c:c3:da:
         8f:37:cd:55:66:5e:bb:fc:2b:66:ef:9e:d1:c9:28:45:a9:b4:
         7b:ab:4c:dc:3c:0e:1b:e3:c9:e6:11:04:83:cf:cd:de:13:24:
         57:bf:dc:7c:3a:5c:d3:02:11:29:11:4a:c8:6f:89:83:eb:7a:
         5b:02:8f:eb:be:a5:f4:66:19:a2:ac:4c:2d:a6:93:19:51:e6:
         17:2f:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:12 2025 by rpki-client