Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          WhPxyx3Z9wu1IdK4qYRQ4oQvys2zrQfFKqX+bw2zls0=
Subject key identifier:   69:8B:31:10:8F:73:D8:59:2F:1A:17:B9:90:87:F6:CB:D5:94:A6:AC
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       06B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          06AF
Signing time:             Sat 18 Oct 2025 23:42:40 +0000
Manifest this update:     Sat 18 Oct 2025 23:42:39 +0000
Manifest next update:     Sat 25 Oct 2025 23:42:39 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: 4iWr+VZdd/JTZwGvYax9qjF9rwYCU68/lE2ccKplqIE=)
                          2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=)
                          3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Oct 18 23:42:39 2025 GMT
            Not After : Oct 25 23:42:39 2025 GMT
        Subject: CN=68f425f0-6df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:19:fa:e2:b9:71:14:65:15:77:7c:12:ec:
                    09:d5:45:ba:89:86:ec:4c:5b:c8:b2:8f:dc:8a:3d:
                    e9:70:10:cb:22:35:31:7e:c9:b8:e0:12:9a:e5:ef:
                    89:61:82:bf:44:0d:bc:b6:57:73:97:0f:e5:53:63:
                    9c:3a:b2:c5:8d:35:51:47:e1:c2:b7:23:77:62:51:
                    54:75:98:ad:c2:6f:97:5a:fa:b7:30:a4:92:6b:f7:
                    ce:64:94:f2:9a:15:65:ec:02:8e:07:78:6f:88:ad:
                    d4:8a:7f:c2:a8:63:32:24:0b:64:c9:a7:f5:3e:31:
                    e9:c5:47:6f:17:47:3e:cf:a2:d2:88:d2:bd:c4:c3:
                    b2:f3:03:90:82:0a:bf:a1:da:cd:f6:1c:1a:a8:0a:
                    94:57:67:4c:10:dd:50:1b:01:f7:8a:1c:db:d5:f8:
                    c9:ea:b7:02:6e:1c:70:c4:54:71:48:17:a1:bc:e8:
                    e5:b1:55:35:d2:fe:39:16:0c:d2:a2:ef:b7:00:26:
                    28:71:43:8f:0c:4c:58:d3:0e:89:11:e1:a6:10:4b:
                    fe:92:fd:99:15:87:a2:94:8f:44:02:d8:53:a3:05:
                    ca:bc:35:bc:2d:5b:39:08:c0:fc:14:3c:91:3d:87:
                    df:b0:b0:0b:86:69:90:06:e2:ac:5e:b3:41:99:41:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:31:10:8F:73:D8:59:2F:1A:17:B9:90:87:F6:CB:D5:94:A6:AC
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:32:8c:43:c3:c3:12:c0:0d:9e:b9:50:a1:5e:45:9b:96:92:
         6a:91:2a:37:99:5b:69:c5:44:45:c8:c6:bb:a7:54:07:4b:8e:
         f5:ff:85:a0:9a:1b:86:00:dc:05:e9:38:58:aa:19:7b:43:03:
         6f:ac:d0:57:80:ac:c5:e8:1e:0b:b0:ab:e6:7c:fe:9e:a1:0c:
         e0:bf:2a:c3:3d:fc:2c:2f:48:17:33:df:14:c5:c0:7e:7f:4e:
         6f:6b:c2:72:9c:d4:ed:0b:ec:09:88:c3:b3:b5:a6:32:1f:21:
         f3:4f:40:d6:cf:de:91:e0:07:4c:ca:e6:16:c8:e1:de:9c:3b:
         31:be:a7:49:bb:4a:ff:52:69:49:71:00:48:18:a5:c0:2e:c7:
         29:ad:4e:dc:a6:da:aa:75:fc:4b:98:14:a3:31:09:2e:c6:4e:
         b1:3d:7c:72:10:ab:b2:56:37:da:cd:d2:d0:08:6a:02:33:a8:
         fc:9d:12:bc:83:bd:a4:2e:7f:cd:cb:f0:1b:db:bb:02:a2:a1:
         3e:d5:6f:49:d3:16:2e:de:41:db:6a:b5:fe:7d:e5:53:18:16:
         16:17:a6:1c:10:79:5e:89:a4:dd:79:d1:fa:aa:f1:ac:76:3e:
         72:ae:67:97:49:6a:83:01:b2:a6:7d:66:53:d7:f9:d6:f3:55:
         89:3c:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:26 2025 by rpki-client