Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          +GBbOx3BqOswXAtO+LTw8WOqIE6JC50TtHt0/lGLYPk=
Subject key identifier:   AC:F5:83:73:13:82:98:25:3E:02:C1:3A:07:8B:44:03:9B:55:CA:E2
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0BB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0B90
Signing time:             Fri 08 Aug 2025 19:17:27 +0000
Manifest this update:     Fri 08 Aug 2025 19:17:26 +0000
Manifest next update:     Fri 15 Aug 2025 19:17:26 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: E4N7YIwmXImRXNTcAVcrVrU+Z0BYmsmNPCsIKedXOAU=)
                          2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=)
                          3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=)
                          4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=)
                          5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Aug  8 19:17:26 2025 GMT
            Not After : Aug 15 19:17:26 2025 GMT
        Subject: CN=68964d46-5b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:52:8e:3b:56:8b:96:c5:c9:fb:82:79:ff:
                    30:d1:2c:70:b6:a1:a5:4a:4b:1a:52:35:9b:e4:a4:
                    eb:33:ed:66:40:29:bd:ca:66:e3:9e:50:c8:e7:f0:
                    ec:3d:41:8d:14:e8:84:14:0d:6a:9b:e7:ce:e1:c7:
                    47:03:7a:97:53:35:24:2a:86:a4:12:1c:ef:ae:3e:
                    39:2e:6e:39:d5:e8:74:74:3e:41:6b:ba:da:85:0a:
                    1c:69:f0:59:95:7a:e3:1a:f1:11:f2:4d:7f:9e:e6:
                    50:8b:ea:5f:be:84:b6:51:ab:04:cd:d0:4a:59:f9:
                    6c:9b:36:67:fc:52:a3:50:f2:e2:44:24:1f:6a:32:
                    eb:8d:75:2b:3a:21:56:e7:18:72:87:b0:40:55:d1:
                    ca:06:c5:76:89:a8:ac:cc:7a:8a:75:e0:21:38:b9:
                    f5:ea:5f:d2:df:89:5f:ad:2f:e7:18:b9:43:fd:6d:
                    c3:cb:2c:f4:e3:c3:cb:8b:0d:2e:c0:89:c5:2a:c4:
                    5d:09:b9:23:a1:b8:5f:1c:1e:c2:14:1f:07:5f:24:
                    8c:55:39:85:5e:36:3a:7e:4f:72:30:53:84:ce:be:
                    52:c9:c9:57:49:cd:c6:4f:84:ce:46:33:b6:f2:dd:
                    e2:5a:ff:a5:19:7c:ae:07:09:0a:4f:d1:6b:cc:9a:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F5:83:73:13:82:98:25:3E:02:C1:3A:07:8B:44:03:9B:55:CA:E2
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:51:78:09:12:8b:a2:d8:99:56:c4:fd:9a:f8:0c:67:7c:07:
         a4:0c:ea:8b:ee:3d:1d:f4:c1:17:35:65:d1:ab:a1:86:7d:4c:
         88:07:70:c8:42:f8:1d:ef:6a:32:73:c8:9a:a9:f0:37:48:b2:
         31:db:e3:30:1d:57:e5:a0:10:48:14:86:18:d8:ab:c6:fb:db:
         c3:aa:5c:be:e6:fc:f4:96:09:e1:21:64:34:13:06:fa:46:8b:
         1b:58:f3:23:89:0f:86:cf:36:9f:5a:b5:fa:a5:37:ee:ff:e7:
         25:66:8b:25:ac:4c:8f:12:57:96:5d:5e:c2:eb:fb:a6:00:86:
         b9:0c:bc:a6:a2:69:ea:5c:af:89:98:37:e8:2e:68:b0:e3:76:
         bc:5f:29:b2:ac:a4:db:ea:13:c3:0f:3b:66:02:8a:78:46:cb:
         07:5d:27:fc:25:17:29:34:17:d4:51:bd:46:de:2c:af:38:d0:
         b5:9e:e8:4e:d6:b8:2c:d0:26:74:0e:df:2c:e2:74:5a:e5:fe:
         d4:fd:97:3a:8b:d9:fe:8d:e4:34:56:5e:96:b2:db:42:93:7a:
         b9:f9:48:65:c2:99:06:f3:0e:e3:03:13:ad:c0:dc:73:07:d6:
         f3:85:68:ac:ed:25:e1:ae:9e:49:f1:1e:dd:9a:1d:9d:d8:01:
         3a:31:77:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjUwODA4MTkxNzI2WhcNMjUwODE1MTkxNzI2WjAYMRYwFAYD
VQQDEw02ODk2NGQ0Ni01YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBhSjjtWi5bFyfuCef8w0SxwtqGlSksaUjWb5KTrM+1mQCm9ymbjnlDI5/Ds
PUGNFOiEFA1qm+fO4cdHA3qXUzUkKoakEhzvrj45Lm451eh0dD5Ba7rahQocafBZ
lXrjGvER8k1/nuZQi+pfvoS2UasEzdBKWflsmzZn/FKjUPLiRCQfajLrjXUrOiFW
5xhyh7BAVdHKBsV2iaiszHqKdeAhOLn16l/S34lfrS/nGLlD/W3Dyyz048PLiw0u
wInFKsRdCbkjobhfHB7CFB8HXySMVTmFXjY6fk9yMFOEzr5SyclXSc3GT4TORjO2
8t3iWv+lGXyuBwkKT9FrzJq9+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz1g3MT
gpglPgLBOgeLRAObVcriMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz
el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAUXgJEoui2JlWxP2a+AxnfAekDOqL7j0d9MEXNWXRq6GGfUyIB3DI
Qvgd72oyc8iaqfA3SLIx2+MwHVfloBBIFIYY2KvG+9vDqly+5vz0lgnhIWQ0Ewb6
RosbWPMjiQ+GzzafWrX6pTfu/+clZoslrEyPEleWXV7C6/umAIa5DLymomnqXK+J
mDfoLmiw43a8XymyrKTb6hPDDztmAop4RssHXSf8JRcpNBfUUb1G3iyvONC1nuhO
1rgs0CZ0Dt8s4nRa5f7U/Zc6i9n+jeQ0Vl6WsttCk3q5+UhlwpkG8w7jAxOtwNxz
B9bzhWis7SXhrp5J8R7dmh2d2AE6MXf3
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:20 2025 by rpki-client