Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          6MnPnkFw2CUDJd3lL5y0UyzpkEr1uvgYD0mVy0v/Grs=
Subject key identifier:   E0:66:88:49:F7:38:16:4D:8B:8D:40:C6:5B:E9:8C:A1:63:55:91:97
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          08EB
Signing time:             Tue 12 Aug 2025 23:10:14 +0000
Manifest this update:     Tue 12 Aug 2025 23:10:14 +0000
Manifest next update:     Tue 19 Aug 2025 23:10:14 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: ACG3qxmRo9mE/y/9CcLVptFpc1SDnoqR+Y7Z17YquT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
        Validity
            Not Before: Aug 12 23:10:14 2025 GMT
            Not After : Aug 19 23:10:14 2025 GMT
        Subject: CN=689bc9d6-dbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:6e:e4:81:1f:4e:0e:57:70:ea:34:6d:6d:
                    14:b5:fb:7b:97:9a:39:4b:3c:f3:fc:0d:3a:74:d1:
                    f0:3a:47:82:54:35:0b:17:f0:99:56:93:da:24:8c:
                    76:86:1a:75:06:ad:c3:3f:b3:6b:7c:7b:18:b4:a3:
                    c6:29:57:fc:37:ac:6e:3c:4c:42:fc:ee:b6:6e:9c:
                    a1:ff:c9:a1:84:f5:4e:51:09:45:00:5b:41:4c:f5:
                    27:17:4a:39:54:4c:1e:39:c5:82:79:5e:cb:41:c3:
                    b0:95:9f:e7:09:57:de:cf:78:c4:1b:c1:9c:7c:f6:
                    38:f4:ab:21:29:03:c1:26:53:82:72:d7:9b:16:54:
                    8b:d1:52:df:fe:42:f5:0b:f2:99:00:e8:5a:2d:fc:
                    a0:c2:3d:07:85:20:08:30:dc:6f:d8:da:b2:a9:10:
                    9e:cf:57:fa:a4:29:ac:cc:4a:11:9c:bd:fd:33:36:
                    72:e6:fd:df:b4:10:1b:5a:07:2c:ca:a4:55:64:ff:
                    12:6f:b4:74:ce:7f:9c:d8:4b:f6:a4:d4:52:41:4a:
                    79:e1:e7:18:29:98:38:39:ef:4c:2f:de:fd:33:f1:
                    3b:0d:41:b8:e1:84:2a:50:a2:62:be:ba:ec:b7:7b:
                    3d:c7:cd:1a:6a:b3:d4:d6:78:1b:3b:69:e2:0d:91:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:66:88:49:F7:38:16:4D:8B:8D:40:C6:5B:E9:8C:A1:63:55:91:97
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:27:ab:fa:70:ea:8a:a0:2a:3c:d9:cd:b3:fa:fd:2f:04:
         6c:15:40:e3:cb:20:91:13:5b:89:46:b1:38:5c:58:92:98:ce:
         ea:f9:bd:ce:25:b5:38:ee:fd:2a:7e:88:e1:e9:f5:c3:82:6c:
         42:ef:b2:c0:43:0c:97:ab:39:4e:07:da:a0:2f:2f:5e:59:00:
         8a:09:9e:fd:fe:6f:b8:fd:8d:4f:09:42:9a:73:fa:f7:8f:e3:
         21:eb:7d:1e:32:bc:e6:23:0d:58:fc:6b:09:fa:5a:16:f9:8e:
         0b:9f:d9:e5:97:18:69:38:b1:63:40:7b:31:c4:ff:93:27:76:
         cb:c4:f8:15:03:0c:f6:e4:28:43:41:14:a8:48:38:41:90:cf:
         87:9d:a4:0f:2f:69:2d:55:5b:fb:1c:55:95:74:9e:1a:eb:1a:
         64:8e:ba:9b:69:ff:fd:3f:12:5f:b8:91:8e:e2:67:e1:fd:f8:
         e4:ea:f7:ab:ab:b1:74:b7:5e:5c:40:b2:f5:e6:70:89:0f:33:
         ef:f7:e1:ef:1d:bd:99:8f:34:45:7f:60:27:8c:47:f9:da:87:
         af:cf:0f:13:84:29:e7:ea:de:3f:8f:bc:1f:a5:e9:04:5a:74:
         95:8b:c6:e8:2e:5e:64:09:8c:b5:4d:fa:cf:d9:f6:3b:33:c9:
         91:f9:65:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD
N0U4NUVBNUYwHhcNMjUwODEyMjMxMDE0WhcNMjUwODE5MjMxMDE0WjAYMRYwFAYD
VQQDEw02ODliYzlkNi1kYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3jNu5IEfTg5XcOo0bW0Utft7l5o5Szzz/A06dNHwOkeCVDULF/CZVpPaJIx2
hhp1Bq3DP7NrfHsYtKPGKVf8N6xuPExC/O62bpyh/8mhhPVOUQlFAFtBTPUnF0o5
VEweOcWCeV7LQcOwlZ/nCVfez3jEG8GcfPY49KshKQPBJlOCctebFlSL0VLf/kL1
C/KZAOhaLfygwj0HhSAIMNxv2NqyqRCez1f6pCmszEoRnL39MzZy5v3ftBAbWgcs
yqRVZP8Sb7R0zn+c2Ev2pNRSQUp54ecYKZg4Oe9ML979M/E7DUG44YQqUKJivrrs
t3s9x80aarPU1ngbO2niDZHfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBmiEn3
OBZNi41AxlvpjKFjVZGXMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl
TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtJier+nDqiqAqPNnNs/r9LwRsFUDjyyCRE1uJRrE4XFiSmM7q+b3O
JbU47v0qfojh6fXDgmxC77LAQwyXqzlOB9qgLy9eWQCKCZ79/m+4/Y1PCUKac/r3
j+Mh630eMrzmIw1Y/GsJ+loW+Y4Ln9nllxhpOLFjQHsxxP+TJ3bLxPgVAwz25ChD
QRSoSDhBkM+HnaQPL2ktVVv7HFWVdJ4a6xpkjrqbaf/9PxJfuJGO4mfh/fjk6ver
q7F0t15cQLL15nCJDzPv9+HvHb2ZjzRFf2AnjEf52oevzw8ThCnn6t4/j7wfpekE
WnSVi8boLl5kCYy1TfrP2fY7M8mR+WUe
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:13 2025 by rpki-client