Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          mTGIeJjbagvcUqLWCdEAG9wI5Ln3G0tivB/WUQna+uo=
Subject key identifier:   6E:E2:AC:54:EE:34:F1:CD:DF:2E:E6:60:17:EA:FB:17:2C:D5:86:3A
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0B74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0B44
Signing time:             Tue 12 Aug 2025 19:29:45 +0000
Manifest this update:     Tue 12 Aug 2025 19:29:45 +0000
Manifest next update:     Tue 19 Aug 2025 19:29:45 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: CyovwVkrjs+HPVn7DmUhdperLxFstuP6wbdYOHY8Oh8=)
                          2: 155B355E414311EE8E969116C4F9AE02.roa (hash: 8n8jzkGbayepgQzEpsL65F4oyNOM3A+zDOLQR9DNID8=)
                          3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: KzwFd8PDenGf+ZwF13ldlpLL32AHpZJ+BkfX9UFd2E8=)
                          4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: 1/sB6pu/nvBS4QJYppsZekVqlkIQlRDFcO4hqm31NTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
        Validity
            Not Before: Aug 12 19:29:45 2025 GMT
            Not After : Aug 19 19:29:45 2025 GMT
        Subject: CN=689b9629-7aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:d5:55:a3:2b:cd:59:d4:bf:af:a1:ae:8c:
                    eb:03:52:70:a7:b7:2a:04:c6:15:e5:ab:d8:5d:76:
                    eb:cd:6c:25:69:eb:7c:3d:3d:c5:6b:70:65:19:bc:
                    31:1c:7a:10:ae:e8:29:80:39:3a:cd:95:dd:cc:a7:
                    cf:d1:4b:00:7e:c5:51:6b:15:72:65:aa:bc:16:de:
                    67:ce:12:a7:36:72:cc:5b:d7:c4:49:f4:45:35:71:
                    98:37:ee:3b:71:2f:df:72:83:9b:05:c0:f0:f5:c7:
                    94:0b:85:df:5a:63:de:23:2b:69:c7:65:d7:7a:c2:
                    31:94:1d:2b:0d:f6:42:e7:64:d7:7f:de:ca:8b:cc:
                    3a:6f:1f:72:21:3f:c5:16:5a:d1:06:59:26:91:ad:
                    c5:8f:91:75:2c:29:bf:49:07:5a:b1:4e:40:36:b6:
                    a6:12:79:40:10:03:4a:55:10:eb:ac:6a:1b:57:7e:
                    b8:b4:c5:df:97:07:4f:e0:ad:5c:3e:a0:26:41:44:
                    55:7c:c9:cd:29:fa:d4:5e:3a:74:c8:b1:25:58:eb:
                    52:3f:63:c9:5b:19:39:07:6b:3b:79:0e:89:2e:21:
                    bb:a9:cf:cf:bd:ce:74:be:66:ca:35:33:45:04:18:
                    58:66:51:6b:64:30:e6:50:58:4b:b7:a1:d7:92:a8:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:AC:54:EE:34:F1:CD:DF:2E:E6:60:17:EA:FB:17:2C:D5:86:3A
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:68:97:75:68:71:73:5a:65:e2:14:35:88:79:55:3c:1d:
         9c:c3:81:35:1c:ce:d5:5f:f0:7e:96:17:39:a2:a9:55:87:42:
         cb:6b:40:ca:f9:94:32:a8:c9:da:1e:41:2b:67:a9:d9:0d:98:
         12:93:9e:eb:d2:70:2b:e5:dc:6f:d4:bf:56:05:fe:38:e6:ae:
         6a:dc:53:88:3d:67:da:19:89:c4:7e:f8:b1:45:a4:48:d4:0a:
         cc:09:74:40:e5:73:dc:8f:55:35:d6:f9:19:ac:54:2c:d7:f7:
         cc:41:1a:90:69:23:1a:80:3e:1a:5b:8a:56:4d:df:a6:77:8d:
         72:4d:91:44:5c:cd:8b:3b:1a:04:ca:b2:96:c6:4b:05:ec:12:
         e4:77:19:eb:89:c6:79:75:3f:5d:f7:fa:61:6a:f4:fd:98:93:
         ac:65:bd:74:9e:44:e4:e2:8b:7d:c4:61:a2:97:d7:7f:45:b3:
         16:19:e4:ea:28:d0:dc:7e:57:9c:8b:38:93:8b:37:f5:79:a5:
         c5:6a:7f:24:c9:f3:e8:e2:6c:2f:d8:c2:d3:15:e7:38:d6:01:
         15:26:d3:42:82:b7:b5:62:51:24:64:cb:10:eb:47:1e:2e:fb:
         dc:e4:4d:3d:c0:c6:0e:6d:ec:4e:33:ce:75:56:e1:fd:47:73:
         19:14:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 13:39:58 2025 by rpki-client