Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File:                     LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier:          KQ7n4jrkgaFNxstMBeGUKnDb8uclw3Ge1mRChOqgyjE=
Subject key identifier:   98:8A:4B:B0:A9:A2:70:E5:14:1C:DC:D0:94:D8:A0:B2:14:28:A8:97
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer:       /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number:          011A
Signing time:             Tue 05 Aug 2025 05:15:32 +0000
Manifest this update:     Tue 05 Aug 2025 05:15:32 +0000
Manifest next update:     Tue 12 Aug 2025 05:15:31 +0000
Files and hashes:         1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: WAJSi/7GR6DRfmyYJVApCBnkfRvoK2dp5UwooL6X0SI=)
                          2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
        Validity
            Not Before: Aug  5 05:15:32 2025 GMT
            Not After : Aug 12 05:15:31 2025 GMT
        Subject: CN=68919374-4710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:5f:a9:bb:b5:64:eb:1b:da:42:db:56:ef:
                    9c:07:3c:56:74:f2:77:30:f0:2b:c2:c8:ae:11:41:
                    79:7e:b4:fc:08:87:ca:91:94:ba:a4:d9:6a:e5:5b:
                    e0:ac:3c:19:23:10:50:6a:3e:82:22:21:12:76:58:
                    8a:9c:86:1b:43:ec:a6:1b:cb:6b:17:4c:1b:14:93:
                    c9:6c:fd:e4:09:e6:8f:2b:a5:8f:81:2a:60:63:e5:
                    76:64:24:54:42:fe:09:df:02:3e:30:12:78:73:49:
                    67:a1:47:b2:24:ac:eb:94:0c:32:23:a4:00:84:1d:
                    90:2c:da:db:8d:b4:6a:07:fd:dd:2f:0e:e2:fc:74:
                    a3:c2:b7:6f:34:b0:a4:4f:59:5a:a7:1b:ca:6c:f1:
                    65:ca:5b:a3:a6:f7:23:77:a5:9b:07:aa:d0:95:7f:
                    fd:02:b9:a5:18:de:9a:14:47:2f:64:e9:2d:04:6b:
                    35:8d:cd:94:c6:fa:2a:81:4c:2f:ce:e7:c1:47:4d:
                    ca:2b:f4:2b:3d:da:bb:d7:28:b0:4e:40:1f:c1:90:
                    25:44:f1:d5:84:ed:05:d7:85:d7:73:9e:87:dc:ea:
                    88:4a:0d:6a:26:2b:8a:51:84:2a:e7:c5:29:6d:0b:
                    e1:d6:6f:ad:d7:47:22:d9:77:e8:41:2f:ce:9a:0a:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:4B:B0:A9:A2:70:E5:14:1C:DC:D0:94:D8:A0:B2:14:28:A8:97
            X509v3 Authority Key Identifier:
                keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:6c:aa:44:5f:6c:e0:ec:db:c5:d7:38:10:84:3b:58:dc:
         46:ef:d2:8a:bd:03:80:cc:51:f5:6c:b7:11:e0:89:35:fc:ed:
         09:c6:45:d3:c5:f8:8d:c1:22:5a:97:b7:03:15:c5:61:7a:20:
         78:ff:24:49:a1:e2:aa:16:77:cc:7e:99:98:9d:a1:7c:dc:23:
         11:d3:d7:bf:62:5d:85:ec:2e:86:95:ee:41:12:5a:de:fd:bc:
         10:25:fe:03:c1:c9:9f:4b:6b:9a:aa:8f:69:f1:3a:09:4b:50:
         d1:13:41:e1:5b:38:c5:93:0d:c5:3f:50:a2:39:3a:c6:86:7e:
         7d:bf:68:52:04:a3:3e:f6:43:cc:67:a9:07:db:bb:59:37:6c:
         06:25:d0:b4:e7:8d:6e:fe:33:6c:6e:34:57:1a:bb:de:cf:47:
         ba:2f:1d:6f:23:03:1c:bb:94:f8:e3:f6:51:39:c6:44:3a:f6:
         e3:02:91:b5:ac:82:bb:bf:b7:d1:6a:87:6e:8c:c9:26:4b:a8:
         ad:82:b9:33:32:df:57:ea:17:f3:2f:1e:54:b4:8f:3f:15:a7:
         1a:67:12:03:64:4d:50:e8:d1:d5:02:20:89:fb:4d:64:a9:70:
         ac:55:2b:70:69:a8:88:3d:b9:32:6f:38:a3:1f:2b:25:bf:aa:
         54:94:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:02 2025 by rpki-client