Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File:                     LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier:          agKm26ebyWCFum6/fp2YsawJehfnZaNVYTf9dI7wOvc=
Subject key identifier:   A7:C6:42:AC:97:FC:99:F3:E8:4B:3B:10:22:33:E0:EB:80:F0:28:24
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0AD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number:          0AC0
Signing time:             Sat 18 Oct 2025 20:24:54 +0000
Manifest this update:     Sat 18 Oct 2025 20:24:53 +0000
Manifest next update:     Sat 25 Oct 2025 20:24:53 +0000
Files and hashes:         1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: UmAE5HoGE2uB1cwstkojviiAtC2txzs6a+SkGGpjMAY=)
                          2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: ibrlLqXyJBvhReQbTY44ZuUpmVrk/0dppjxQ0Xpe60o=)
                          3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: oypYrt94xP1HGfkKHJnrEVZNMxQYAmf9WSyWVpRVwus=)
                          4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 1NXDKHdGdwmQ0HPSNP/L0h3g8vj3YJvsOmeCBe7yxT0=)
                          5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: lhMvYRsrjVyA66+IzRjCtkWTHGswP9g49oqeoBG1Neg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Oct 18 20:24:53 2025 GMT
            Not After : Oct 25 20:24:53 2025 GMT
        Subject: CN=68f3f795-9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:aa:72:bd:59:f9:74:29:d3:0b:17:5e:14:
                    4e:40:14:cd:36:63:e3:0a:ed:55:92:93:a5:c0:a0:
                    23:82:79:9b:e1:02:e3:b2:0a:4c:75:53:31:e2:62:
                    4d:59:12:89:f6:2b:4e:59:e5:8b:ff:2a:ec:04:20:
                    7f:12:56:9e:94:32:49:e2:01:ca:d2:59:49:4d:d0:
                    c8:2e:6b:0e:7a:78:80:0d:9f:d1:37:47:62:5d:cc:
                    e7:b4:e9:b5:b9:fa:b0:b2:4c:91:8e:b2:f7:a0:e6:
                    18:77:77:ce:ff:f0:14:6e:ff:76:91:d9:b9:cb:5b:
                    88:07:89:dc:b1:f7:2a:98:22:7b:f1:be:79:98:76:
                    78:0a:aa:68:78:66:d0:60:e1:db:92:bd:bb:d1:d7:
                    f3:b2:97:aa:84:2f:7d:8c:a2:2a:20:96:a9:ba:fd:
                    e6:c5:07:27:b8:f7:d8:c3:66:24:f2:37:07:3d:26:
                    e3:74:0d:7d:70:5e:50:84:b8:4e:20:e2:2e:a6:a4:
                    55:c1:88:4a:97:9c:5f:ba:4e:39:49:f6:0d:90:52:
                    1f:e5:e9:c2:4f:b3:cb:01:ea:81:62:92:fd:7b:a7:
                    60:d7:ee:3b:7b:a9:ba:0b:be:99:13:75:08:f5:c7:
                    e0:52:da:79:82:57:5a:2e:fc:c7:7d:c1:05:4c:38:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:42:AC:97:FC:99:F3:E8:4B:3B:10:22:33:E0:EB:80:F0:28:24
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:12:ae:90:47:76:89:7e:2a:51:df:d4:18:48:41:22:1a:
         f3:f3:f3:b4:14:61:53:f2:fa:3b:52:76:ef:55:fe:88:18:44:
         bd:95:6f:b0:4a:cb:97:25:0d:06:38:b5:5b:f4:d9:4e:d1:2e:
         41:f8:5e:9b:40:e7:60:f5:a0:1e:d7:69:b3:bc:a6:bb:49:7c:
         48:1b:80:8f:e4:50:95:f0:15:13:9b:bf:24:65:e4:4e:2d:7a:
         90:31:39:c8:66:63:06:01:9a:c1:f5:03:21:39:d6:7e:7c:18:
         e0:3a:96:47:25:71:2c:58:47:3b:51:8f:78:1a:ad:ad:e1:93:
         ce:c4:1a:d6:ce:eb:48:7f:ab:46:5c:87:08:fe:50:10:d7:dc:
         c0:4d:25:ab:59:6c:ae:78:fd:41:36:7b:ca:ce:37:53:f2:4c:
         a1:5c:ca:cb:36:96:00:65:e9:f5:4e:8f:28:fc:c0:f2:b3:eb:
         c1:da:3b:b8:7e:d2:3c:2b:0a:6e:15:0c:db:b9:69:05:c9:de:
         bd:c3:86:96:fd:a0:a7:6b:02:1c:b6:f7:b2:09:0f:67:3e:d2:
         1f:af:4f:29:87:3d:68:3f:94:5f:d9:23:28:e1:fb:fb:0a:f1:
         53:14:4d:bf:9c:51:57:c7:26:db:9f:1e:ee:92:2e:fd:03:74:
         42:92:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:38:46 2025 by rpki-client