Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          3v+2z9NR0A+VFP2eLtlSXioxuKyvbnda4Kw4U5GaSM8=
Subject key identifier:   3A:B5:C0:94:88:40:40:49:BA:A9:16:FF:A1:A6:50:A0:3A:EC:7F:5D
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       031B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          0315
Signing time:             Wed 05 Nov 2025 01:13:47 +0000
Manifest this update:     Wed 05 Nov 2025 01:13:46 +0000
Manifest next update:     Wed 12 Nov 2025 01:13:46 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: CiMVOzOJkPrNyS8aHytk54nTCsowH+UttviQ7nXKORM=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Nov  5 01:13:46 2025 GMT
            Not After : Nov 12 01:13:46 2025 GMT
        Subject: CN=690aa4ca-4e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:fc:81:08:95:eb:e1:5a:cc:0c:ba:b2:99:
                    48:34:25:ca:db:e3:e2:af:33:3f:ea:0c:0c:5e:21:
                    16:93:c8:01:28:7c:56:a8:19:09:4e:78:b4:8e:73:
                    2d:08:a4:1c:8b:21:d4:a2:a5:e2:1c:c1:77:d1:41:
                    6d:b1:00:ee:b5:0e:54:75:57:6f:5e:06:ad:d8:93:
                    03:15:88:4f:98:ae:07:aa:18:ca:02:25:36:8a:64:
                    ea:82:fa:89:0d:fe:d5:b0:ce:ca:35:94:ce:3d:5c:
                    dd:96:cd:8c:bf:30:9f:59:f7:a6:04:0d:e6:5a:5c:
                    87:c0:2b:0b:11:77:5b:cb:d7:15:0f:89:61:c3:45:
                    4a:ac:4a:92:26:fa:70:0b:68:df:fc:eb:71:22:37:
                    3a:2f:f1:d5:b1:51:3f:d0:09:6e:77:3f:2d:d2:07:
                    f2:db:c2:d0:dc:63:fe:b5:6b:53:0a:ad:29:17:34:
                    b4:5a:54:0f:46:1b:cd:a4:eb:e7:03:b5:e0:0d:13:
                    fc:82:8e:62:06:8f:9f:b0:be:20:33:a6:98:7e:84:
                    e1:28:27:01:5c:6e:93:79:c2:4f:af:51:aa:23:6f:
                    23:95:45:95:55:78:44:d0:0d:24:d5:24:65:a6:f6:
                    98:ee:93:cf:dd:dd:8d:61:cf:7a:85:ea:ca:71:64:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B5:C0:94:88:40:40:49:BA:A9:16:FF:A1:A6:50:A0:3A:EC:7F:5D
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:f6:bf:67:75:3c:67:25:7c:a0:5b:7d:23:bb:c6:86:79:
         9f:fe:c0:25:c0:12:4e:3f:01:f0:d2:37:8b:b5:5f:2d:34:b8:
         8c:30:87:f0:33:67:f1:cd:0d:a8:70:24:ee:6d:e8:8d:81:ad:
         c8:7f:f4:54:cf:9f:16:48:51:41:c6:18:e5:97:ea:ee:ca:02:
         2f:d4:7e:6c:4f:40:dd:8d:bb:14:bf:ec:3d:c0:b6:c0:d4:a2:
         4a:dd:aa:66:a7:45:a0:5f:9b:9a:f3:94:26:06:96:56:37:63:
         59:c9:4a:ea:45:c4:ad:df:88:6c:da:11:08:02:4c:40:91:96:
         27:3f:22:b0:c3:fd:6b:db:e3:98:ac:2c:4e:13:03:d9:7c:1d:
         e4:52:79:7d:80:81:17:81:c5:b6:8f:f4:cf:4d:11:81:99:a2:
         c3:56:8c:2a:9b:4c:06:8e:d8:b6:28:fa:42:b9:97:65:b3:aa:
         da:0c:78:23:01:44:82:16:75:70:b6:c4:8a:ec:24:82:6f:07:
         d6:08:10:66:77:4c:16:57:45:01:60:cc:4b:61:da:4e:82:d7:
         bb:da:d3:d5:66:2c:6b:2a:70:b6:67:a9:ef:4a:51:35:8f:81:
         a1:0f:33:c6:8d:af:74:1e:59:31:3a:78:2f:23:c6:cb:fb:0c:
         52:79:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:37 2025 by rpki-client