Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File:                     L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier:          Unex6249TgDwefqsvi4scmOZsdz3B1tGzvIRWzLXhPA=
Subject key identifier:   01:82:E1:2D:AF:5D:A9:97:33:09:53:6D:A3:63:5D:EA:6F:4D:41:1A
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer:       /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number:          0465
Signing time:             Sun 19 Oct 2025 02:04:06 +0000
Manifest this update:     Sun 19 Oct 2025 02:04:05 +0000
Manifest next update:     Sun 26 Oct 2025 02:04:05 +0000
Files and hashes:         1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: kliKDKsxEnESbCMiPWX4UlzfZcB34h2qATUcQyFyseg=)
                          2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
                          rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
        Validity
            Not Before: Oct 19 02:04:05 2025 GMT
            Not After : Oct 26 02:04:05 2025 GMT
        Subject: CN=68f44716-604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:54:62:9f:93:18:e8:b1:3b:c3:db:a6:f1:
                    0a:6c:ab:e0:d2:45:95:1b:e1:a8:6f:97:b0:66:ca:
                    27:6a:16:f8:e9:98:30:99:b6:17:9f:14:39:bb:52:
                    8e:be:35:3f:6a:33:e6:c5:4a:89:07:cd:fd:49:3d:
                    fc:c6:cf:e5:7c:48:54:09:3b:88:11:8a:a9:84:f0:
                    68:17:54:4e:b0:d4:4b:06:7d:d8:f2:75:a0:42:b2:
                    bf:4b:62:b3:60:c5:db:d3:77:de:e7:7a:3a:b1:5f:
                    47:35:5e:66:b0:d0:3b:d3:73:0a:23:a4:dc:f5:75:
                    64:3b:56:0a:ac:97:25:b2:6b:da:2b:f2:4e:6d:8e:
                    cd:47:9e:82:63:2c:2c:b7:fb:fe:ab:c9:86:27:02:
                    b0:e2:d0:69:90:21:ba:da:bb:57:e4:6f:8e:f5:12:
                    13:93:04:62:29:a0:e9:0d:18:5b:e6:0c:fc:ce:ef:
                    46:84:f2:60:c7:3f:4c:50:26:12:66:a0:0a:e1:8a:
                    80:c7:76:e6:bb:18:b7:33:e3:17:88:58:24:91:cf:
                    14:50:81:fe:13:16:95:66:0c:ba:e8:d4:96:1d:4d:
                    e6:5d:f0:24:af:23:5c:7e:93:9f:29:a9:ba:52:d4:
                    86:57:cb:40:70:cb:7c:49:15:f3:a1:ac:ce:4e:09:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:E1:2D:AF:5D:A9:97:33:09:53:6D:A3:63:5D:EA:6F:4D:41:1A
            X509v3 Authority Key Identifier:
                keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:68:2a:c4:c2:81:4e:68:cc:a2:d9:1a:c4:95:23:8e:77:de:
         d9:bc:1b:b3:4b:d5:7c:c0:6b:79:4b:b6:0e:c9:9f:d2:6f:33:
         92:46:ba:7e:d0:83:93:cd:a8:a0:1a:d7:b6:e4:b8:ca:0c:ed:
         ae:91:aa:fa:40:d2:f2:32:a7:d8:e4:c6:e2:20:f8:cb:a4:08:
         e2:7f:ba:46:31:73:2a:c7:19:e4:3c:98:ff:d3:6a:c8:c5:ac:
         34:9f:e8:09:17:b7:87:0c:c8:9d:5d:0f:aa:93:7d:23:13:1a:
         63:78:9f:87:bb:ed:77:71:e8:68:08:3f:0e:72:a8:f9:ff:b0:
         90:db:ec:f5:3b:e3:73:9f:93:b2:14:68:2d:b3:81:57:87:80:
         f0:05:ab:43:c0:ac:1b:82:71:9a:4d:cd:9e:08:c6:8d:59:28:
         1b:75:43:07:17:28:0d:e5:56:f6:c3:69:62:04:cf:42:56:c0:
         0f:63:07:05:ca:ad:30:6c:50:33:4d:4a:07:27:a1:55:06:05:
         34:e1:b2:d9:5f:ad:ca:be:5c:95:c6:01:4b:ee:5a:13:44:7d:
         29:1b:a5:a6:0a:65:dc:e7:e2:95:01:5b:0c:6f:c2:5a:dc:da:
         77:e6:e3:4a:41:1b:5a:b8:37:9d:c5:5d:55:88:07:f3:c0:53:
         54:c9:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:27 2025 by rpki-client