Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File:                     LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier:          BRkqHHuhD0lmY0VYGRNl3ic/waOmHupIMCDSJNi1Fkc=
Subject key identifier:   6A:2A:8C:E7:49:FB:1A:D9:6B:C8:66:07:8B:E7:C5:07:61:F5:88:20
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number:          4E
Signing time:             Sun 29 Jun 2025 06:28:11 +0000
Manifest this update:     Sun 29 Jun 2025 06:28:11 +0000
Manifest next update:     Sun 06 Jul 2025 06:28:11 +0000
Files and hashes:         1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: K/Bxwi1hqQMvIZx6GqH8cOAjQY8CwgDXSNTv2FKMZpE=)
                          2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w=)
                          3: EB73024C46C911F080183F13C4F9AE02.roa (hash: rb5KK9x1DAMfujx+NVV5rKs+rj2St+IPOVLacW4ttoo=)
                          4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 06:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Jun 29 06:28:11 2025 GMT
            Not After : Jul  6 06:28:11 2025 GMT
        Subject: CN=6860dcfb-1270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:10:c8:bf:83:92:37:6c:57:71:bc:5d:a6:
                    b3:15:fb:49:ac:a1:e6:d3:7e:01:7c:1e:29:c5:1b:
                    47:27:6c:84:dc:ec:2c:01:45:fa:50:0f:8a:4a:b4:
                    63:44:f7:15:a7:f7:41:bb:89:3a:70:7e:73:06:1e:
                    af:63:06:c7:c1:f1:3a:66:09:62:af:20:85:31:41:
                    46:78:86:a6:52:0a:1a:39:e8:57:a6:71:9d:6a:2d:
                    7c:8a:e1:5e:2a:e9:12:c4:24:d9:01:63:d0:c4:f3:
                    71:7b:f6:64:de:a4:c9:e7:87:52:13:84:72:4f:c7:
                    3e:6c:f9:d3:d5:53:1c:44:38:dc:6f:d8:ec:9a:75:
                    a5:42:0d:ce:31:23:f9:ca:f9:42:50:e0:c8:b3:cf:
                    bf:17:ee:f1:ff:d7:85:eb:e8:42:b8:2a:ca:c7:57:
                    9c:7d:23:3d:f7:b2:38:05:e0:54:22:5a:91:a0:c0:
                    b2:e9:d2:dc:f9:1d:d9:d2:5b:48:3b:f5:7a:41:2e:
                    23:27:a3:79:a0:00:36:89:00:75:7b:2f:d0:ba:8b:
                    a1:73:40:bc:7c:69:af:9b:40:d7:b3:5f:cd:d3:62:
                    cd:c9:3f:7d:02:3c:0a:97:b6:67:30:2a:39:2a:e4:
                    fd:0c:64:d9:25:ee:d0:30:a4:9a:e1:46:02:12:f9:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2A:8C:E7:49:FB:1A:D9:6B:C8:66:07:8B:E7:C5:07:61:F5:88:20
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:55:67:cb:9e:ce:78:e5:e2:f8:08:b8:58:89:b0:79:18:
         1e:f4:f4:45:03:0e:6f:66:4e:ea:e5:06:91:00:63:81:e1:6f:
         0a:6c:0f:52:1f:58:45:48:8a:23:a2:2d:25:54:02:c9:73:8d:
         a2:59:e5:b6:7e:ce:0c:ff:35:01:36:55:db:31:e8:43:fb:0f:
         20:b8:99:95:90:4f:1b:35:67:9d:78:0e:9f:6b:9c:a0:15:7e:
         8d:5b:e9:4a:9d:b0:de:7b:1c:26:5e:79:26:8c:a8:97:c1:cb:
         df:5d:ca:8a:c3:37:57:d1:f0:df:db:09:bc:cf:78:bf:a0:5b:
         64:d4:21:b4:cc:04:8b:f4:cc:66:51:c3:e1:87:2c:ae:2e:a3:
         96:e4:62:dc:f4:e1:0b:58:12:30:dc:2c:f3:9a:ec:f4:e6:7e:
         f4:11:8f:f0:8c:8e:8a:f5:34:21:26:29:69:a0:74:5c:2d:80:
         da:8e:67:34:12:b5:0b:88:16:c7:a0:b4:95:ee:7d:f9:8e:67:
         ea:1e:21:2b:2a:ed:90:70:1c:ca:76:b2:b1:16:16:ec:3f:c0:
         e9:da:3d:4f:4a:70:bf:b5:24:8e:86:0e:72:c7:d3:51:e3:ad:
         13:74:58:8c:24:97:bb:22:01:7a:1f:52:03:4a:c7:b8:3b:18:
         17:41:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:37:16 2025 by rpki-client