Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File:                     LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier:          4RlAVg7mPSswlz2DX3Cgx9v5w7UqEqGeyAmkSjKL3qQ=
Subject key identifier:   35:19:E9:AB:92:7F:DD:66:02:1D:7C:8F:EE:4C:93:F0:CB:1F:24:34
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number:          89
Signing time:             Sun 19 Oct 2025 10:03:06 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:05 +0000
Manifest next update:     Sun 26 Oct 2025 10:03:05 +0000
Files and hashes:         1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: eXs9rJ19t7zZH3RJEYLs/e3idcwh/J8DRfpw7TAvx0Y=)
                          2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w=)
                          3: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: D1S7iqXGUUZHfp/09w60bmU/i0252Rh24H8Dl+FipBU=)
                          4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Oct 19 10:03:05 2025 GMT
            Not After : Oct 26 10:03:05 2025 GMT
        Subject: CN=68f4b75a-27ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:c7:30:59:ce:de:2b:40:e9:5c:9a:0b:08:
                    33:d5:96:4c:94:e0:a8:9d:9f:0a:b8:40:97:80:85:
                    32:dd:fc:9f:a0:c6:ef:d7:f7:f0:8a:18:10:da:13:
                    2b:f7:c0:ce:f5:20:47:25:ee:9c:56:31:e1:cb:71:
                    f1:d9:0e:9c:96:94:5b:c8:f8:13:d8:75:ce:13:4d:
                    90:01:be:b5:fb:d6:a4:05:2b:44:b9:db:e3:35:f1:
                    91:92:17:ef:6f:85:0b:be:bc:ae:50:dd:6e:2a:6e:
                    08:57:9e:11:a2:be:0c:76:e3:0e:22:08:b1:51:f7:
                    fd:b4:20:97:60:9b:43:4d:dc:79:e3:9d:27:f6:bf:
                    03:e0:bd:23:5f:51:a3:85:0a:88:77:41:83:2f:64:
                    6a:ec:ea:d0:fa:aa:6e:55:d3:94:f7:db:07:a8:f8:
                    55:49:51:07:f0:db:af:17:8b:9b:17:9f:14:0c:70:
                    4d:2c:cd:f7:f2:f1:4f:0a:7c:83:15:05:7b:a3:b1:
                    42:b6:4a:39:90:73:a9:9c:ab:77:d4:46:49:97:22:
                    85:8f:f4:5c:eb:76:54:f6:01:c0:a7:bd:d0:30:18:
                    6d:98:8c:4b:c3:f2:6f:1b:84:1d:f3:5e:52:60:86:
                    26:f7:3c:1b:d0:de:4b:19:ca:4b:ec:41:91:0c:ec:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:E9:AB:92:7F:DD:66:02:1D:7C:8F:EE:4C:93:F0:CB:1F:24:34
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:80:28:53:f4:d2:7d:cf:52:83:2e:8a:42:44:2a:1d:18:
         c3:43:a2:e5:d2:a4:c1:54:fb:80:22:62:09:e5:dd:57:9f:43:
         71:53:40:18:a8:26:e0:9a:d5:5d:79:92:25:2e:f7:5f:e3:52:
         de:4a:e3:4d:2d:d7:86:a4:2f:14:e2:19:bf:bb:0d:7a:d7:72:
         64:7e:34:fd:bf:33:ac:3d:c0:af:87:df:dd:f0:d1:ec:c8:06:
         23:6c:d6:8d:78:ed:ac:ea:18:aa:0c:09:af:84:0d:a5:14:df:
         73:19:fd:11:48:96:ec:36:0b:2a:d5:75:aa:3b:40:bf:7b:3d:
         47:cd:80:ae:39:d2:35:0f:7a:1a:bc:ea:bd:c1:bc:30:da:65:
         ef:d5:03:c9:c2:78:3e:44:0b:5b:7d:da:8e:40:26:9d:b0:3e:
         05:8b:94:d1:96:62:ba:f1:69:fe:22:d1:c7:bb:e3:25:3f:5a:
         71:54:43:19:f6:4f:ff:63:93:56:52:16:1b:26:98:5d:8b:38:
         b4:fe:b9:d4:08:c8:dd:64:29:a4:7c:93:50:75:9f:c6:82:20:
         36:2c:39:46:de:26:18:89:e2:ca:2e:32:ae:ee:59:d2:c9:08:
         62:7b:74:70:5d:0b:bd:c4:98:02:3f:45:41:3c:39:f2:04:4a:
         22:3a:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:32 2025 by rpki-client