Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File:                     LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier:          POaHKbj3/xztItQJ9IxxXRhVnkl7bHGfzdTZYd+OBHc=
Subject key identifier:   EA:24:2D:31:DB:8F:16:35:0F:84:EA:67:B0:08:95:C2:E6:07:3A:BE
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer:       /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number:          9E
Signing time:             Thu 19 Jun 2025 05:35:07 +0000
Manifest this update:     Thu 19 Jun 2025 05:35:06 +0000
Manifest next update:     Thu 26 Jun 2025 05:35:06 +0000
Files and hashes:         1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: 3irBcCN1/Sn6hb6L+S0eMhdPKHGnXI9RaCTN7vuEJ+c=)
                          2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
        Validity
            Not Before: Jun 19 05:35:06 2025 GMT
            Not After : Jun 26 05:35:06 2025 GMT
        Subject: CN=6853a18a-81d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:25:f5:00:8d:6d:58:4c:ed:02:b4:cd:bc:
                    34:1e:93:bf:19:4c:b5:78:14:b3:b1:20:c0:b5:a7:
                    55:7f:42:02:07:c5:97:fc:09:46:9c:38:ad:1f:4f:
                    26:22:8d:97:81:c3:dd:65:5a:2f:e6:99:6a:71:9e:
                    31:7f:ae:f2:9b:92:f0:b9:f0:09:f4:d8:08:94:5c:
                    e5:ac:ae:72:d5:76:34:44:af:90:7e:f1:50:96:12:
                    ab:c3:48:23:d7:4d:55:ef:fc:33:ef:93:d3:21:51:
                    13:46:1a:f7:08:58:71:c6:c0:68:ae:54:8f:35:11:
                    f8:4d:14:aa:12:0e:61:0b:13:b0:e6:1b:df:20:b3:
                    30:44:bf:ed:78:79:7a:e7:cc:0c:ea:34:64:65:47:
                    c4:c5:6d:3d:8a:47:00:ac:6f:ef:c6:00:1f:77:b3:
                    54:5d:fb:c0:fd:e0:7d:70:11:f7:fa:93:9a:8c:93:
                    97:b1:bf:e8:40:c5:be:ca:3f:1f:a1:10:b7:0d:5c:
                    7c:34:5b:bf:7b:88:c9:58:0d:59:dc:6b:6c:24:6e:
                    99:47:7c:ba:b7:b9:f4:5d:8f:ce:f8:33:2b:d2:34:
                    16:a4:07:ce:06:5a:e8:d4:dc:f1:01:d0:f3:35:9e:
                    ec:57:5f:fd:2a:c6:dd:a1:69:51:3c:ed:b7:da:a5:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:2D:31:DB:8F:16:35:0F:84:EA:67:B0:08:95:C2:E6:07:3A:BE
            X509v3 Authority Key Identifier:
                keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e9:35:46:24:2d:eb:f2:cb:10:94:21:da:b5:e4:76:c2:12:
         3c:38:13:24:55:9a:17:3b:55:b1:96:a8:ab:a6:7d:07:6b:71:
         78:83:60:32:fd:72:3b:30:4d:ad:55:87:2e:5b:8b:51:f0:5f:
         dd:60:ea:df:4e:cd:d9:b6:76:27:82:7b:44:bd:d6:0b:59:51:
         73:36:8c:0d:53:ce:94:5f:48:08:57:56:52:41:c1:36:19:64:
         32:01:51:09:f5:bb:fe:23:bc:fd:a0:ff:34:95:2a:9a:0e:85:
         9e:5f:5f:50:f0:03:9b:05:cb:e7:df:ab:44:ee:fd:ff:20:de:
         f5:09:46:f5:6a:80:42:d5:19:c1:13:ea:9a:94:a1:ee:41:2d:
         44:1f:d2:a8:2f:85:7d:cc:d7:e5:ae:30:d4:1b:a1:61:9b:8e:
         87:6d:88:a4:8c:15:e1:91:b4:8c:11:ee:c6:42:1c:49:05:a8:
         ca:e0:ec:4f:7f:d2:ef:52:07:1b:de:ed:30:ae:95:93:7b:48:
         96:ac:a9:13:30:e8:0a:4c:0c:8e:8c:d4:54:91:af:33:0a:03:
         f5:5a:b9:3b:c9:33:6f:81:8f:42:cd:59:b5:05:2c:65:cd:0f:
         2d:ac:90:58:68:88:cb:a9:2a:42:c0:30:05:e6:18:17:61:e4:
         0c:25:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:27:56 2025 by rpki-client