Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File:                     LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier:          AnCzphifGYk5M9VIml+C2pyGQk+xHc/YvcsuOrQ8a+0=
Subject key identifier:   31:C1:88:79:28:DD:5E:1B:94:50:2C:5B:7D:A0:7D:5B:02:86:A1:4A
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number:          020F
Signing time:             Sun 19 Oct 2025 04:33:16 +0000
Manifest this update:     Sun 19 Oct 2025 04:33:15 +0000
Manifest next update:     Sun 26 Oct 2025 04:33:15 +0000
Files and hashes:         1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 2YipxN3XZOHLybwYPel0m2F0mKoGY7UTGWP/zRoRllM=)
                          2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Oct 19 04:33:15 2025 GMT
            Not After : Oct 26 04:33:15 2025 GMT
        Subject: CN=68f46a0b-12b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:63:8b:13:51:55:15:20:0f:4d:ad:ea:1b:
                    a0:6c:3a:65:e5:9d:d6:12:d3:4d:12:68:93:2d:65:
                    26:12:c8:4e:5b:34:49:ae:ca:2e:f9:e1:87:25:4b:
                    00:af:4b:ef:ec:3c:34:70:e3:95:09:a9:a2:ba:11:
                    22:27:2a:3e:21:94:f5:a6:2e:38:f8:87:92:7f:65:
                    e8:7d:7c:51:fd:a3:c8:2e:a2:af:1e:e4:05:a4:77:
                    50:25:b5:a7:1a:ce:5b:d8:4a:a3:32:20:2d:92:f6:
                    25:03:bc:d9:e3:7b:8f:95:8c:e9:a5:ed:23:dd:db:
                    61:4f:04:ce:26:a6:08:54:92:ef:57:76:41:4a:a5:
                    91:fb:58:4d:6a:a6:4d:44:29:54:60:a6:18:15:c5:
                    be:23:58:56:83:58:aa:21:f4:a3:5a:72:44:cf:6c:
                    72:5e:28:61:7a:d7:e6:17:f5:41:a0:7d:31:65:17:
                    d8:3f:60:b2:55:d9:a8:5c:30:fb:ed:b7:c3:b5:79:
                    ec:9e:07:88:2b:15:94:81:07:34:c1:ba:32:61:62:
                    8c:c0:d1:81:e4:7c:13:c2:bd:5e:86:c4:e6:a2:53:
                    ad:56:aa:ed:e1:ee:d7:ef:48:fc:ef:47:11:4d:c4:
                    98:f7:a0:19:e2:76:83:3c:ec:67:fb:dd:6e:ad:61:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:88:79:28:DD:5E:1B:94:50:2C:5B:7D:A0:7D:5B:02:86:A1:4A
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:54:bf:d9:00:ee:3b:51:45:a2:74:f6:4a:a8:d8:63:a4:
         67:d6:eb:a0:d0:c4:da:a5:ad:db:94:d3:99:71:68:7d:df:93:
         07:62:81:4d:57:16:4a:f1:cc:7f:22:71:6b:aa:80:8e:1e:8b:
         45:56:c0:26:6d:12:67:91:95:da:e6:8f:a0:15:30:f0:ab:3a:
         ea:cf:1f:06:c5:b6:03:ba:11:6f:be:27:27:55:88:6d:c6:9a:
         e3:c1:8c:33:a8:12:e1:14:36:9e:e1:3b:7f:ce:fe:3c:4f:57:
         69:f3:5c:a5:92:80:4e:f4:b5:91:0e:bd:83:42:47:77:41:1a:
         18:65:a2:d0:46:4e:14:60:7f:44:45:17:14:13:82:f3:2a:21:
         79:7b:6b:74:f5:aa:b1:d4:2f:43:46:51:3c:6a:01:b5:99:20:
         6f:cf:e2:3d:b3:d6:39:a2:3a:20:fe:04:17:f1:7e:68:5e:21:
         62:d3:b4:8e:14:fd:b1:b2:a1:2f:0a:70:ee:a9:27:c2:17:6a:
         ea:24:28:ca:77:d9:ff:24:d1:73:49:69:ed:67:e6:da:81:02:
         94:a2:a2:94:f0:6b:2e:e6:bc:9c:40:fb:97:bf:68:ec:fd:c8:
         8e:0f:3e:26:09:21:f1:18:3a:2d:15:d9:9b:38:b1:77:27:93:
         ba:52:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:32 2025 by rpki-client