Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File:                     LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier:          bsjVFuXWPy5Ld899sB2VGtfH6mZcxN4FFLZw/p4XfZE=
Subject key identifier:   DA:E6:45:45:6F:70:56:B0:5F:2E:DE:B8:78:B8:9B:A6:30:7A:14:F4
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer:       /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number:          0161
Signing time:             Sun 29 Jun 2025 03:05:00 +0000
Manifest this update:     Sun 29 Jun 2025 03:04:59 +0000
Manifest next update:     Sun 06 Jul 2025 03:04:59 +0000
Files and hashes:         1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: QdXTTktqlszDrGt0KQXlZdy97M2Jd0vwHTcX9mJr3Do=)
                          2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: gD+ebhjmYYOlYSwLXx9jf438Mm1bZMxXcWfFLXPYnt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
                          rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 03:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
        Validity
            Not Before: Jun 29 03:04:59 2025 GMT
            Not After : Jul  6 03:04:59 2025 GMT
        Subject: CN=6860ad5c-d259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:ac:5c:5d:00:54:89:81:5a:76:84:3d:6d:
                    19:19:6b:63:ad:3a:b0:be:53:86:6e:ce:32:83:1c:
                    9a:e0:18:10:13:e6:aa:be:3c:2e:02:a8:09:16:17:
                    12:3d:6e:dd:b8:b9:9f:b7:a7:c9:f5:79:4b:ba:eb:
                    b9:36:8b:b5:3c:c6:64:ec:2d:74:7e:07:33:1b:35:
                    67:95:62:bf:48:38:84:c4:b1:78:76:4c:d6:52:be:
                    7a:4a:2e:47:dd:f3:68:99:95:09:ca:64:0d:2e:89:
                    90:e6:93:dd:d3:2e:ce:69:44:fc:5a:b9:19:ec:9b:
                    d8:93:5a:d2:ff:ab:b4:4f:92:17:b2:96:6b:88:df:
                    68:52:61:48:07:be:71:93:fe:e9:b1:d4:93:08:2f:
                    58:77:8b:57:90:f3:7e:4d:8e:9c:64:ba:93:f5:48:
                    92:2a:20:b1:59:09:e4:af:e2:ca:97:14:4d:d1:c4:
                    9d:8d:6e:a4:f5:b2:d0:86:e5:3a:27:a0:28:f3:f4:
                    fd:02:ae:4a:8a:46:57:c5:15:dc:40:ee:6b:b3:41:
                    55:e3:9f:79:0e:64:61:ea:6e:0b:16:dc:eb:d6:9c:
                    ba:0a:98:0b:b6:22:c3:6f:78:62:7c:67:7b:57:2d:
                    8a:c5:46:77:60:4f:62:77:58:ab:6b:f5:85:8f:43:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E6:45:45:6F:70:56:B0:5F:2E:DE:B8:78:B8:9B:A6:30:7A:14:F4
            X509v3 Authority Key Identifier:
                keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:0c:0d:b9:4c:d8:b5:c1:70:1c:75:97:cc:c5:04:4c:e0:
         f9:54:be:53:2e:b9:bf:b7:43:aa:3c:20:17:ed:a9:b3:46:fb:
         bd:aa:94:bb:52:ca:cc:26:2d:a0:4c:ea:2f:d2:49:16:5c:0e:
         1c:0c:59:c3:a8:4a:1a:82:c3:bd:9b:9d:1f:f7:f2:d7:2e:27:
         f9:cd:6e:ad:a0:97:26:e7:e4:18:4d:35:9b:b2:a9:6e:bd:a5:
         97:32:23:18:17:b7:46:25:8c:23:89:fb:ad:52:e0:e9:86:8c:
         31:ee:c0:bd:6f:b3:83:b7:65:36:98:ef:3b:ca:44:78:80:a9:
         01:03:a1:2b:f5:63:0b:d6:b5:c4:e8:f2:f1:4f:36:ee:0b:d6:
         5c:9c:25:34:08:b3:90:ec:b8:3e:df:02:02:67:df:8f:4f:35:
         d0:c0:82:94:fd:5d:d3:93:5e:ef:98:5d:19:ea:f6:ea:6d:ce:
         ae:33:41:8b:20:13:8d:31:82:ec:65:ac:c4:f5:0b:8d:c6:fe:
         51:8b:7a:ad:5f:95:ea:cf:8f:71:ea:d6:70:11:3f:3b:00:97:
         8d:70:8e:f5:54:61:ce:54:a5:29:e4:df:9f:d3:b7:ba:93:c7:
         4d:ab:d0:d5:5f:52:05:93:84:38:07:fe:9d:fc:34:b7:de:1e:
         bf:3a:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:15:46 2025 by rpki-client