Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
File:                     LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json)
Hash identifier:          XQqh/vXXzmmTuXABZkihSDtTNuqbyyFu4PEvoAOH9Ok=
Subject key identifier:   D3:88:C6:D3:86:1C:60:89:1F:DA:FD:85:DB:FF:9A:5A:71:11:87:E4
Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Certificate issuer:       /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Certificate serial:       061E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
Manifest number:          061E
Signing time:             Tue 12 Aug 2025 23:10:06 +0000
Manifest this update:     Tue 12 Aug 2025 23:10:05 +0000
Manifest next update:     Tue 19 Aug 2025 23:10:05 +0000
Files and hashes:         1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: AwVW8OIn0xeYo2QyRYaPD97iMfnXCpJcuk09U6KuzpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
                          rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
        Validity
            Not Before: Aug 12 23:10:05 2025 GMT
            Not After : Aug 19 23:10:05 2025 GMT
        Subject: CN=689bc9ce-2cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:1f:b4:31:09:65:14:7c:fc:ef:4c:07:86:
                    de:04:e8:c1:a5:40:bd:a2:19:f2:d3:37:27:a1:2c:
                    87:6f:1f:42:d9:81:06:ad:3b:fe:c9:58:74:78:d9:
                    15:c5:1c:44:28:95:f1:fa:e5:b1:ba:f5:ad:cd:a6:
                    fc:23:80:41:b5:16:eb:9b:43:c6:7a:de:ce:60:a4:
                    57:f7:32:4e:68:f9:70:72:ba:df:a8:4d:43:3c:03:
                    cd:87:55:a6:8c:39:1f:17:43:2b:73:2a:2b:e5:20:
                    3b:ed:be:1d:38:b6:fb:49:59:b1:f0:98:84:71:4b:
                    0a:cc:e5:b8:c7:51:a5:b1:cd:87:c7:c1:c8:e7:da:
                    cf:2d:e5:8f:0f:61:d4:87:ef:11:44:b4:61:cb:5b:
                    6e:10:39:dc:b9:7a:65:e8:8a:e6:bd:76:33:88:e3:
                    b6:dd:48:62:79:a9:cf:8a:30:fe:01:42:a3:3a:da:
                    1b:1a:45:49:36:7d:52:d4:b1:c1:c9:fe:82:a5:78:
                    70:5a:69:4e:b5:5a:68:ac:68:94:82:8d:e0:3c:cc:
                    a0:d0:84:40:a9:78:a8:94:5b:6c:88:1c:39:b4:31:
                    16:e4:88:c0:f0:60:c0:9f:54:d7:d8:72:f8:33:ee:
                    f2:70:07:49:0c:31:5f:b9:ae:6b:9c:04:4b:1a:0d:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:C6:D3:86:1C:60:89:1F:DA:FD:85:DB:FF:9A:5A:71:11:87:E4
            X509v3 Authority Key Identifier:
                keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:44:25:c7:34:68:bd:8a:84:7f:3d:c0:fd:31:4f:09:42:
         f2:73:0b:37:a8:79:e9:63:2f:be:63:d3:a3:6d:71:7f:8b:7d:
         80:2a:51:f4:ec:0a:bf:6f:6a:05:d3:2f:b3:5a:1e:8e:c2:9c:
         ff:3f:59:63:ce:c6:ab:1f:54:46:f0:1d:4c:7b:6a:97:fa:6d:
         a3:13:c6:23:45:33:b3:6f:5b:bd:b9:c4:8e:3c:6b:75:c4:22:
         8e:2f:5f:5b:45:4d:9d:fe:67:08:31:7b:aa:ac:d9:ac:c2:e6:
         ea:0f:94:14:f5:31:e5:0d:ab:91:bc:00:9e:2d:e5:b8:f7:32:
         15:bb:dd:53:32:fc:9c:0c:b9:0b:31:0c:28:4d:1d:49:26:9f:
         82:b7:89:19:a1:3a:84:84:a0:0c:d5:7b:48:4a:55:23:2f:3a:
         6a:02:84:f5:ba:d3:91:73:47:fa:88:4b:ea:1d:b9:37:26:ec:
         ef:71:c9:8a:26:e2:22:f3:d2:90:1c:4b:eb:7c:bc:44:37:78:
         21:55:99:23:79:97:66:f6:ae:c9:1a:17:24:b9:f3:14:e9:c8:
         de:a2:98:50:84:31:92:5f:f0:8a:6d:55:e8:4f:8e:38:1c:b0:
         71:f1:69:93:76:e0:6d:95:1d:5d:7b:de:0f:c5:5d:a0:85:ae:
         36:f9:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:26 2025 by rpki-client