Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          +MBWlGMEV8kWKNhEj6GaXXi4JRebTr+CQ4J0u6G2wYo=
Subject key identifier:   75:AA:C0:E5:31:2C:A7:58:29:B9:73:DC:8B:F6:A7:83:A0:3B:78:71
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       0548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          052B
Signing time:             Fri 22 Aug 2025 23:47:49 +0000
Manifest this update:     Fri 22 Aug 2025 23:47:48 +0000
Manifest next update:     Fri 29 Aug 2025 23:47:48 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: Xf3LenKROXqTG2pxneHKHXYoe+BorIoQ2mirBRNwRv0=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Aug 22 23:47:48 2025 GMT
            Not After : Aug 29 23:47:48 2025 GMT
        Subject: CN=68a901a4-c904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:40:ea:82:9e:63:32:db:1f:81:15:61:44:
                    c1:49:f6:a8:60:a6:8e:83:ee:10:98:67:ab:ec:10:
                    4f:95:6d:70:01:8d:15:78:98:28:01:3b:c5:cc:0d:
                    09:1c:72:a0:67:87:87:6f:d4:5e:8e:16:9f:1d:d7:
                    c6:01:ea:42:b5:05:df:89:8b:46:31:d4:71:8d:8b:
                    fb:f7:68:f3:80:c3:7c:cc:94:31:70:d1:3a:8a:e7:
                    7d:dd:4d:f8:4c:4d:61:d8:51:1b:0a:2e:13:fa:ec:
                    d5:92:69:4f:87:26:4b:0e:62:4f:4d:de:d6:13:45:
                    2e:0b:7c:e8:0c:af:82:11:ff:18:a9:36:39:af:73:
                    b5:05:a2:14:8a:e8:d4:ba:2a:03:66:91:59:b2:ca:
                    4a:ab:62:f6:9f:25:3a:f2:a0:57:04:fd:42:f2:2b:
                    cc:0a:80:18:c1:cc:f8:e3:ff:2b:69:49:1f:00:ee:
                    53:45:c1:5a:af:ca:a6:49:76:a5:4b:f7:45:5f:69:
                    77:3a:68:4e:61:12:5a:85:d6:75:9b:b6:cb:9a:1b:
                    0e:f8:4f:28:e5:ec:60:10:1d:31:68:63:39:99:5a:
                    38:a1:2e:46:e3:b4:cd:98:f0:db:eb:6a:a8:25:44:
                    9b:6b:f4:0c:d1:dd:e2:7b:fe:67:32:67:c5:ec:b5:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:C0:E5:31:2C:A7:58:29:B9:73:DC:8B:F6:A7:83:A0:3B:78:71
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:32:90:fa:67:be:4b:47:df:7e:18:4f:30:1b:1b:c3:af:58:
         62:30:ad:be:17:0a:8a:c3:36:77:9b:b8:ec:57:94:73:40:7b:
         0e:73:39:05:52:cd:12:a5:3f:67:89:8b:e4:d8:27:90:4d:f0:
         fd:64:26:5a:04:34:cd:e6:a6:6a:97:43:53:e6:5d:25:70:1b:
         6f:59:fa:a1:71:bf:bf:bc:41:f2:1d:56:d7:9e:46:8b:61:9d:
         4b:db:c1:fe:65:62:7d:6c:bf:99:6d:42:1d:2b:9a:e2:ed:2d:
         61:37:98:11:ce:fd:8a:f1:26:4b:76:52:b0:a0:f5:15:71:01:
         36:cd:b2:cb:da:f4:7d:bc:2c:93:aa:2c:0e:75:d6:18:02:fc:
         ed:38:25:c7:da:94:28:1f:f0:bc:56:4f:5b:36:45:a1:07:91:
         c9:29:0f:9f:f5:8e:0a:89:8e:b2:bc:b3:e3:8d:d4:51:78:9b:
         5b:62:cc:ef:a0:6a:63:3f:65:f2:8e:ba:d3:fe:1e:ef:d6:93:
         08:bf:58:03:f9:ab:c5:38:0d:ca:e6:62:dd:bd:08:6c:c3:90:
         f2:c7:07:b7:b1:83:69:d5:13:24:14:ae:10:21:90:68:7d:08:
         c6:db:05:65:e7:96:59:cb:42:4d:95:f6:c0:0e:94:77:00:21:
         40:61:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:03 2025 by rpki-client