Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          MB1ydEQVEy1kNcgjZkHpUl9TOGWiIUutsTIbC8OsILs=
Subject key identifier:   09:D4:31:D9:25:79:EB:E1:63:90:6D:5C:41:04:4B:DE:16:72:92:17
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       0565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          0548
Signing time:             Sun 19 Oct 2025 01:14:59 +0000
Manifest this update:     Sun 19 Oct 2025 01:14:58 +0000
Manifest next update:     Sun 26 Oct 2025 01:14:58 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: KOnZUYxNNNts09NayVSTw+zfaapktYF8MP+WbLe32mQ=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Oct 19 01:14:58 2025 GMT
            Not After : Oct 26 01:14:58 2025 GMT
        Subject: CN=68f43b92-a03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:8e:b0:68:dc:d8:08:5a:af:0e:9e:93:50:
                    ce:a0:29:61:78:e3:02:23:c3:5e:38:07:67:74:57:
                    ad:44:96:9d:0b:9c:11:2c:d4:53:24:c1:ee:4f:fc:
                    2d:c1:7f:70:b9:7b:8c:45:f4:2b:f3:56:6e:c4:20:
                    3c:69:34:e7:c8:bb:31:68:7e:69:06:dc:e0:c2:fb:
                    e0:08:06:e3:9d:35:37:66:50:ed:1c:c7:3b:0c:f9:
                    e2:fb:bc:a2:e6:ff:fb:36:f3:5c:62:9b:d0:42:f5:
                    8d:30:68:59:6b:4f:a0:c0:ec:eb:03:1e:37:2a:40:
                    89:a3:9f:43:32:a8:3b:83:4f:a0:25:00:94:59:01:
                    d5:ca:23:a3:9a:c4:71:75:26:28:74:f8:a5:9e:50:
                    3e:08:86:34:4d:b9:b2:1c:71:12:4b:e1:8c:9a:c0:
                    9f:21:f1:6c:61:83:39:8f:de:f4:82:7a:6f:6f:72:
                    29:b1:66:a4:cf:e6:b6:ad:47:b9:36:7d:59:0b:99:
                    be:fd:25:97:14:61:fa:9f:73:92:d3:8e:1d:60:35:
                    71:d9:06:12:4d:6c:a8:5b:46:de:96:ed:a9:e3:2a:
                    c7:fa:80:fb:3a:4a:00:3b:8a:92:58:c1:84:94:81:
                    06:d5:aa:be:6d:4f:50:9e:19:90:9b:0b:66:1a:d9:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:31:D9:25:79:EB:E1:63:90:6D:5C:41:04:4B:DE:16:72:92:17
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:d6:92:98:0f:3d:24:44:78:5c:a0:e5:d9:35:16:5c:65:
         7b:d4:ae:7f:fb:b0:98:a1:66:48:0b:37:25:4e:ce:1e:2b:39:
         98:ee:ab:aa:e8:a8:c2:3f:06:9d:a3:16:4b:f7:1b:e7:74:5b:
         f1:a9:a9:0d:14:da:f4:ee:7e:39:46:d0:30:a3:f2:9e:b5:24:
         2c:53:dd:be:cf:57:14:25:5d:47:6a:74:4d:c4:75:a4:46:1d:
         b5:f2:d6:bc:fa:c9:20:1e:e2:d2:4f:d7:a3:d4:ef:79:88:98:
         aa:7d:89:6a:9e:30:26:bf:5c:62:1a:4d:26:57:d4:a7:e8:69:
         14:90:9c:12:69:6d:34:38:14:54:ea:78:76:41:34:35:9f:9f:
         2b:28:e2:88:a6:76:ad:67:84:49:33:9f:16:b3:1d:92:96:85:
         a8:d8:97:1c:5f:94:2e:2c:9c:14:23:8b:cb:24:72:56:44:55:
         f4:6b:66:dc:26:18:28:4e:ed:da:00:39:e9:3f:6e:21:c8:23:
         79:65:62:93:19:e0:08:28:cd:96:73:1e:40:df:52:8e:ee:07:
         ac:97:f5:60:6f:24:92:50:74:c5:65:30:a9:e1:82:53:a4:37:
         56:e6:32:b9:5d:00:8e:89:f1:9e:da:a6:27:e9:04:6e:8c:ee:
         37:34:b3:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB
NDBDQjI2NzcwHhcNMjUxMDE5MDExNDU4WhcNMjUxMDI2MDExNDU4WjAYMRYwFAYD
VQQDEw02OGY0M2I5Mi1hMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFyOsGjc2Aharw6ek1DOoClheOMCI8NeOAdndFetRJadC5wRLNRTJMHuT/wt
wX9wuXuMRfQr81ZuxCA8aTTnyLsxaH5pBtzgwvvgCAbjnTU3ZlDtHMc7DPni+7yi
5v/7NvNcYpvQQvWNMGhZa0+gwOzrAx43KkCJo59DMqg7g0+gJQCUWQHVyiOjmsRx
dSYodPilnlA+CIY0TbmyHHESS+GMmsCfIfFsYYM5j970gnpvb3IpsWakz+a2rUe5
Nn1ZC5m+/SWXFGH6n3OS044dYDVx2QYSTWyoW0belu2p4yrH+oD7OkoAO4qSWMGE
lIEG1aq+bU9QnhmQmwtmGtk51wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnUMdkl
eevhY5BtXEEES94WcpIXMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2
RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81
T3lQSjN4VFpZWDJrRExKbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtTtaSmA89JER4XKDl2TUWXGV71K5/+7CYoWZICzclTs4eKzmY7quq
6KjCPwadoxZL9xvndFvxqakNFNr07n45RtAwo/KetSQsU92+z1cUJV1HanRNxHWk
Rh218ta8+skgHuLST9ej1O95iJiqfYlqnjAmv1xiGk0mV9Sn6GkUkJwSaW00OBRU
6nh2QTQ1n58rKOKIpnatZ4RJM58Wsx2SloWo2JccX5QuLJwUI4vLJHJWRFX0a2bc
JhgoTu3aADnpP24hyCN5ZWKTGeAIKM2Wcx5A31KO7gesl/VgbySSUHTFZTCp4YJT
pDdW5jK5XQCOifGe2qYn6QRujO43NLNQ
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:06 2025 by rpki-client