Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          wt3P4dRZF1Hj/UXSEF/7VfqpNaudQenl5J9ITOXLZw0=
Subject key identifier:   01:5F:58:EA:E5:64:FA:81:23:E2:DE:1F:04:B1:8E:D8:00:B8:30:4A
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       0677
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          0677
Signing time:             Tue 12 Aug 2025 22:45:59 +0000
Manifest this update:     Tue 12 Aug 2025 22:45:59 +0000
Manifest next update:     Tue 19 Aug 2025 22:45:59 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: XYL82Bg2ChVn+h9L3EZqawzMVbn8RguBBNNVUkEKTY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 22:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Aug 12 22:45:59 2025 GMT
            Not After : Aug 19 22:45:59 2025 GMT
        Subject: CN=689bc427-a827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:3e:33:81:2f:7a:25:69:9a:59:0b:fe:42:
                    73:66:b2:ca:1d:c4:d0:f6:dd:05:7c:41:c4:89:ca:
                    30:81:70:82:38:e0:22:eb:8a:cc:5a:12:3a:f9:67:
                    3e:bc:8d:27:be:e9:76:e0:15:57:4a:85:dd:34:10:
                    1a:10:34:2f:31:21:a1:a8:d0:ac:37:64:fe:20:e0:
                    b6:05:1d:7b:0e:a0:2b:ff:48:20:6c:0c:55:7e:39:
                    bf:66:80:bb:5c:21:d2:91:b6:54:fc:9c:ad:b4:44:
                    02:26:87:93:09:5d:18:9f:1e:87:c4:a5:c1:e6:e2:
                    23:10:2e:ed:07:ac:9b:25:1a:4b:ae:f8:ac:79:a3:
                    a2:cf:e0:43:f3:7d:ca:d0:dc:96:cd:74:a7:5c:a2:
                    93:0a:2a:b4:9c:60:1c:60:1e:b9:eb:e3:99:7b:7b:
                    54:f9:08:37:f6:16:62:7f:25:34:24:0c:7f:50:ca:
                    09:0e:19:c5:34:69:ed:cd:f4:81:1a:bd:fc:bd:17:
                    e5:d0:b3:a4:9c:2f:f9:54:89:6b:13:d7:15:89:ec:
                    75:b8:5f:2b:7a:0d:79:d8:7e:7a:51:da:17:e8:ad:
                    f7:a5:e3:3c:bb:75:e0:ea:c9:d4:80:87:23:81:67:
                    4c:f1:ff:c5:4f:99:15:ad:61:2c:f3:0d:12:cd:61:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:58:EA:E5:64:FA:81:23:E2:DE:1F:04:B1:8E:D8:00:B8:30:4A
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:ce:08:7d:d1:02:5a:a0:83:2d:37:b3:32:45:9a:d3:40:
         46:ed:c1:11:c0:92:f4:62:04:21:1f:32:97:2f:77:be:10:e4:
         97:44:77:d1:3a:38:89:0c:5d:0d:fa:b7:21:ab:17:d9:47:99:
         bc:09:59:91:02:48:fd:a9:9c:c3:31:4a:99:0f:03:86:b0:73:
         3e:67:58:3b:0a:d8:d2:fb:b2:7d:ef:ca:08:67:a2:36:ba:8c:
         19:91:4e:bc:86:4e:9f:43:31:d2:62:c7:66:b4:e9:91:5d:2f:
         3b:8c:5c:03:e1:04:62:c1:b5:aa:26:80:46:29:71:66:47:e9:
         9e:d4:72:bb:91:b9:46:7a:ec:5b:60:08:57:52:1d:e5:11:ce:
         de:08:de:f5:3f:70:88:ec:e3:9d:e5:eb:c1:72:3e:db:35:13:
         35:3c:f4:37:fc:9a:7c:8f:4e:f7:15:4c:28:b8:45:f3:4c:b0:
         64:e4:41:3f:5d:7e:26:0a:04:a7:b7:48:55:64:5b:e5:07:91:
         a0:7c:39:39:fc:11:02:ad:44:9c:93:93:e6:dc:b9:87:22:de:
         d4:aa:4b:0f:3c:48:04:82:15:97:99:a7:7e:cb:94:9d:ba:af:
         31:75:83:c7:44:d8:f6:67:da:71:a9:90:cd:76:a2:7c:b8:d5:
         59:57:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:19 2025 by rpki-client