Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          w8vIWFSxyPPmWLms04q12DSQ2ZMEWEj0NcdOMX2pFvI=
Subject key identifier:   CE:82:B6:6D:0C:31:6D:9B:AC:C3:EB:01:2C:C5:15:C1:85:30:AA:AB
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          06FE
Signing time:             Mon 04 Aug 2025 22:19:16 +0000
Manifest this update:     Mon 04 Aug 2025 22:19:15 +0000
Manifest next update:     Mon 11 Aug 2025 22:19:15 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: XtrqalRNTWoFHS4BVj7lTCSeQh6uSiNJKRsJX1rHWdI=)
                          2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=)
                          3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 22:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Aug  4 22:19:15 2025 GMT
            Not After : Aug 11 22:19:15 2025 GMT
        Subject: CN=689131e3-576e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:36:1f:d1:95:94:6f:de:ca:11:72:3b:b8:
                    65:d5:21:6d:48:8a:16:0e:df:72:00:46:27:ed:19:
                    58:9a:55:97:24:ee:00:d9:cb:d0:17:87:37:ef:ae:
                    87:27:23:72:5c:66:f1:e4:78:10:aa:2a:67:62:34:
                    87:e3:b0:49:33:fd:a4:31:7a:9b:6f:c6:6b:d6:0a:
                    1f:bc:37:56:a6:75:b4:4a:e8:18:56:5c:3f:be:ba:
                    47:b3:eb:16:57:12:b8:ea:71:eb:d7:9c:bb:78:c8:
                    e9:d4:a3:dd:22:d8:a9:7f:3b:39:41:e4:7a:fd:4b:
                    41:91:14:fe:5d:91:c4:19:75:17:ab:9f:6e:25:95:
                    ed:d0:63:ba:64:68:db:00:5f:72:cd:aa:a6:84:c1:
                    d7:ff:84:9e:25:97:6b:03:51:a6:70:ba:78:dc:b2:
                    5b:e5:ee:f2:e1:f1:24:a5:2e:a5:43:23:be:34:6f:
                    75:c4:32:70:cd:00:31:e9:0f:4c:37:f8:e6:57:fc:
                    fd:0e:5d:0a:f0:15:43:29:4c:79:08:d7:0a:07:ee:
                    cc:12:4c:29:81:82:37:76:ca:fd:9a:75:8d:1c:54:
                    77:89:b9:65:3f:18:b8:6f:1a:5d:6a:62:a5:af:44:
                    34:9b:cc:cf:34:b0:61:d1:b7:69:bb:05:f9:60:77:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:B6:6D:0C:31:6D:9B:AC:C3:EB:01:2C:C5:15:C1:85:30:AA:AB
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:bb:41:ab:14:f9:3b:d3:c0:af:38:55:a2:92:8f:e1:ae:
         12:77:15:81:4d:76:f1:13:ec:35:a3:f7:6b:6d:22:5b:14:88:
         bd:f4:89:1d:bc:80:0a:2c:da:58:dc:e9:1d:1d:34:84:89:1f:
         c8:22:70:36:2a:3a:78:55:60:0d:d1:42:26:49:db:20:b7:a3:
         a7:f9:dd:38:f3:5a:d8:39:bb:40:83:2d:66:bd:cd:4e:34:f0:
         1e:8b:30:fe:e6:5a:84:1b:a4:a7:35:3a:1c:64:27:1c:88:f8:
         30:44:80:cd:67:10:a7:c1:e8:5a:73:21:ea:7c:d3:4d:12:44:
         7e:e4:38:3b:b9:a4:0b:8e:ae:a3:4c:b7:bd:35:26:fa:97:9a:
         ec:f6:a0:95:a8:c8:4c:c8:e1:bf:12:ea:02:11:bc:be:b3:27:
         04:88:ba:7a:b2:23:fb:87:88:55:b7:c8:a5:fb:d8:ee:d3:b4:
         ab:2c:ff:93:fa:6f:c4:8b:98:31:b8:31:52:32:e9:8d:1a:ff:
         c8:54:2b:4c:80:a9:1b:dd:48:db:bc:e5:98:97:d5:6d:98:09:
         ed:96:b5:eb:f7:bd:95:f4:fb:35:83:fc:52:cb:61:98:3e:b4:
         7f:07:96:53:ec:f8:b1:26:d4:d6:1f:47:ba:9e:b5:86:d6:01:
         68:13:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:45 2025 by rpki-client