Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          lZlql6Kddym20qd2KtT+tK+7INji2OL5eh7ytAzGsG8=
Subject key identifier:   00:AA:4B:F6:48:E7:D2:46:6F:3F:BF:52:F5:39:34:92:65:D4:6F:FD
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          018B
Signing time:             Sun 19 Oct 2025 06:11:56 +0000
Manifest this update:     Sun 19 Oct 2025 06:11:56 +0000
Manifest next update:     Sun 26 Oct 2025 06:11:56 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: r3KPODtICwjlmPH4yR0gcuD7195ib5KCOnOlI6er7b4=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: /0dTnWT2FRET+08FVC1mUWomcC2kAcAYkpb9MNNV3d8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Oct 19 06:11:56 2025 GMT
            Not After : Oct 26 06:11:56 2025 GMT
        Subject: CN=68f4812c-1636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:4e:84:ed:7a:78:e8:08:58:39:c1:17:1d:
                    b6:84:f9:3a:50:00:c1:db:0e:e5:24:08:7b:5b:a5:
                    cc:75:06:aa:44:a0:dc:23:69:1a:ee:1e:3b:e0:62:
                    85:4d:db:99:69:c4:af:05:c3:1a:91:7f:0a:a3:f0:
                    81:06:06:83:f6:14:6b:92:1f:0b:23:76:1e:fa:83:
                    8a:32:bd:85:10:f2:b7:ce:c0:d6:9d:3f:f8:da:c6:
                    97:07:64:f2:88:5a:a1:42:b9:13:a9:d3:a2:8a:8e:
                    07:87:e4:54:88:34:a7:a5:6f:4e:fb:8c:df:2e:38:
                    c9:68:3d:1b:57:14:55:2d:90:7b:48:e9:73:3c:d0:
                    89:fe:e2:e1:e8:a3:7d:dd:1d:a6:31:b2:f7:35:c3:
                    ef:2d:00:24:07:67:ae:1f:6a:3e:7f:28:0e:5d:f0:
                    c0:6d:42:28:c9:98:9d:52:53:b2:72:94:e8:63:75:
                    a1:af:5d:b4:93:fd:0c:b2:54:e8:96:b6:f1:92:8c:
                    56:8f:9f:be:0a:19:63:40:a7:2e:b4:c6:75:c4:0a:
                    58:ec:df:16:35:1d:f8:4e:29:73:8c:46:74:3d:d6:
                    db:0c:d5:0a:c1:1e:dd:b7:d0:e9:39:0b:47:ad:da:
                    79:5e:8e:ea:91:db:8a:9a:63:f2:16:af:42:86:8f:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:4B:F6:48:E7:D2:46:6F:3F:BF:52:F5:39:34:92:65:D4:6F:FD
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f4:a4:57:b7:7f:7f:40:e1:18:37:73:ab:fc:d1:11:e2:76:
         8f:99:cd:4b:f7:de:4d:bd:54:33:a0:8d:a5:1c:5f:63:66:1b:
         c5:0d:4e:c5:57:8c:33:3c:7d:bd:7a:36:a9:32:95:f6:b0:7b:
         6a:61:5f:2f:0b:fb:fa:a9:a7:63:0a:8c:bc:b2:c3:18:0b:94:
         55:74:b8:f7:83:73:de:7f:3d:61:59:fa:a8:62:ed:df:ca:49:
         69:20:08:2a:09:98:06:02:b7:98:7d:79:1e:91:37:39:93:be:
         3d:ba:7d:f5:3c:9a:25:a0:96:07:53:33:94:15:dd:4a:30:bb:
         67:8f:36:c7:97:f4:34:4a:b1:62:04:84:59:98:e0:1b:5e:a8:
         01:ad:e2:2c:01:d4:d2:e5:2b:af:24:b1:a2:b7:6e:0d:7e:c1:
         44:1d:5f:c8:78:fe:ce:1a:9b:0e:75:c8:c5:75:cc:60:4b:07:
         af:3f:1f:be:22:34:7d:cb:30:98:a1:b2:b8:54:da:e5:cc:6d:
         11:34:ec:a1:45:f8:5e:a6:36:6b:49:b6:71:27:67:35:7e:61:
         ad:42:93:f9:70:c3:93:4d:2b:e9:52:48:9f:ea:9a:b1:ed:2f:
         66:ba:12:2c:bc:6c:1e:14:a7:99:52:95:61:dd:f0:08:ba:d2:
         5b:5b:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:15 2025 by rpki-client