Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          XW7dtK8RtrhXo5tBU18No+ZY0lpTb/vZD99iSQKtPZk=
Subject key identifier:   50:46:27:34:90:61:A6:AF:F7:44:59:E3:4F:9E:AF:44:7D:B8:B2:54
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          99
Signing time:             Thu 03 Jul 2025 06:33:38 +0000
Manifest this update:     Thu 03 Jul 2025 06:33:37 +0000
Manifest next update:     Thu 10 Jul 2025 06:33:37 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: AfFGc777uj2+tH0RGyfiez9jMfxTIhErof4iCOq95YI=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Jul  3 06:33:37 2025 GMT
            Not After : Jul 10 06:33:37 2025 GMT
        Subject: CN=68662441-3592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:ec:f4:3b:3e:5e:2d:06:3a:e8:00:51:30:
                    e4:7a:5b:fe:60:16:fd:62:86:c1:9d:a8:05:6d:59:
                    63:25:51:04:32:e9:39:1a:c3:24:2c:21:5c:0f:64:
                    be:2c:3c:4a:ac:ad:a2:87:f3:de:fe:4e:1c:e5:9b:
                    35:5b:0a:b6:1a:e1:db:6c:d3:a3:c6:71:a2:b0:8f:
                    d4:fe:c9:e6:f7:9b:39:77:6c:25:77:98:bd:cc:2b:
                    a7:c6:d8:c1:38:02:e9:0b:35:1b:5b:d1:33:e0:4a:
                    8d:b9:90:cf:c7:3c:f8:60:81:ee:b6:5b:cc:7d:04:
                    e1:ed:8f:c2:62:4e:51:07:f1:ee:ca:a9:97:62:db:
                    39:dd:f2:9b:92:b0:b6:00:b1:3f:7a:81:f1:e9:70:
                    af:88:e9:d3:1d:72:84:48:0b:47:23:85:3d:cb:a7:
                    9e:b9:df:40:e1:61:05:f6:fb:c9:cc:f8:5c:1a:fc:
                    f0:25:5a:c8:83:f9:2d:f7:41:91:20:09:1f:3c:40:
                    80:fc:07:fc:ad:84:cd:7d:18:84:3c:9d:aa:b6:d2:
                    8a:6c:b7:1d:b8:45:66:ab:a5:5c:d9:b6:79:44:18:
                    44:08:77:ec:15:17:08:34:b6:26:f2:b9:28:67:96:
                    8e:64:f1:be:98:ea:da:3b:90:05:c1:47:90:3e:89:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:27:34:90:61:A6:AF:F7:44:59:E3:4F:9E:AF:44:7D:B8:B2:54
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:39:e4:b9:9b:ab:9a:dc:2e:d8:3d:72:ad:db:b5:73:84:
         6b:da:c1:9e:f3:7d:95:ad:11:83:e1:f0:df:29:5a:53:b9:b1:
         7c:61:cf:8f:48:22:0d:0f:ce:dd:18:a6:60:c4:61:4a:24:de:
         78:ac:9c:fd:77:e0:90:1e:61:78:da:c5:70:71:9e:78:f0:5d:
         89:c2:34:d8:3a:70:2f:86:f8:43:ee:86:c2:5a:15:26:44:61:
         a9:d9:fe:2d:3b:63:3f:45:28:5a:93:55:43:d9:f8:27:36:e3:
         02:96:3a:17:fa:ec:ed:23:44:42:2e:77:6e:99:22:1c:b5:e2:
         a7:0d:32:98:60:0e:2e:bd:32:08:0d:a7:00:d1:1a:e5:a9:e8:
         4d:08:da:5c:4b:ee:38:64:c1:f6:9c:04:9a:ac:d2:47:3c:79:
         91:f0:a0:ea:02:b9:b2:52:7d:c2:e7:66:d5:11:05:c3:2c:99:
         06:b4:45:f6:77:33:15:91:94:4c:8d:03:cc:85:b0:e5:b1:0d:
         07:a6:41:9a:e2:dd:f4:fc:82:56:48:2a:c1:8a:98:ee:de:df:
         42:cb:14:ed:7a:d6:73:0f:b3:e4:4b:09:c1:6d:c4:d6:39:84:
         04:17:0f:c0:16:41:ad:3a:c6:64:a8:75:81:0d:aa:39:f6:ef:
         5d:dc:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:07:17 2025 by rpki-client