Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          Wrj6T4iYLaZxlkLCSwh/5Fg6qo0zl5T6cRu3uvm67sI=
Subject key identifier:   B1:05:52:04:56:CC:C6:36:96:00:54:97:18:4D:F9:62:21:7F:CE:5E
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          5E
Signing time:             Sun 19 Oct 2025 07:23:11 +0000
Manifest this update:     Sun 19 Oct 2025 07:23:10 +0000
Manifest next update:     Sun 26 Oct 2025 07:23:10 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: 57cIvbX3Yd4OYae3/w1ONWi8ItD7BCKds8ZIspCCvdE=)
                          2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: b16d+2kTdbON2ixe1jCa6GapHvNF5ngdixgV1f1xSyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Oct 19 07:23:10 2025 GMT
            Not After : Oct 26 07:23:10 2025 GMT
        Subject: CN=68f491df-e774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:af:be:1f:27:a8:91:c7:f2:84:e3:82:98:
                    ec:04:65:65:c0:a2:f3:19:b2:ae:fd:57:31:7b:f2:
                    ef:02:0d:6f:f8:d3:5d:0e:bc:86:7e:32:24:28:a7:
                    0c:9f:f0:33:17:06:67:c7:5f:10:e0:9b:b0:8b:4f:
                    a4:54:6d:bf:75:83:97:9b:84:26:59:bb:0b:13:a2:
                    00:84:6f:4f:90:e4:b0:0a:6f:67:9f:72:d3:60:30:
                    ef:1f:27:62:e5:63:20:a7:5b:b5:91:77:a6:ae:19:
                    68:b7:96:7e:12:6e:9e:7a:41:ff:b8:63:08:ba:49:
                    06:7e:2f:af:42:89:9a:ba:8f:99:16:32:3e:62:c3:
                    29:8a:88:2d:99:91:dd:fd:81:dd:2d:42:05:07:27:
                    9d:bb:b0:dc:26:ef:36:1a:69:f0:63:dd:86:ba:98:
                    78:fe:28:5d:f8:4c:61:a2:85:b1:4d:a5:01:43:ca:
                    c0:0f:0e:8d:c7:f5:3a:03:ce:0c:73:78:c4:5e:eb:
                    78:94:4f:c4:b3:52:8d:73:d5:b9:6f:28:3a:87:90:
                    4a:2b:8f:63:60:7c:9b:cf:48:64:3b:3d:27:36:83:
                    43:d2:f5:8c:64:87:2e:b0:73:71:86:ae:16:ee:f5:
                    36:c7:fc:05:c7:dc:bd:b9:65:f0:ba:94:12:a9:d5:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:52:04:56:CC:C6:36:96:00:54:97:18:4D:F9:62:21:7F:CE:5E
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:dc:41:5b:b7:44:09:12:d8:0c:9b:94:7c:41:b8:eb:2b:
         63:ea:da:91:c5:d4:7b:b9:7b:18:c6:c9:0c:e3:f9:dc:60:76:
         34:b5:60:f9:a9:cb:39:3e:6c:97:e6:f0:5e:b8:2c:d6:26:70:
         18:77:fb:70:55:cf:b9:5a:50:81:65:e5:fd:6f:34:29:95:05:
         8f:ae:6a:1f:6e:ee:a0:d2:b2:00:b0:8d:ac:df:be:49:f8:53:
         a0:18:8e:4a:7b:bb:1c:19:48:8a:63:66:5c:a9:26:d4:ae:d5:
         8f:90:be:e5:6b:b9:b4:c8:9d:53:92:2c:3e:f8:72:4c:cb:71:
         22:59:a1:ec:1b:73:86:93:70:a4:77:31:9a:90:83:9e:30:aa:
         8c:74:f7:46:c7:47:d8:04:ee:0d:b9:bb:6b:59:27:a7:d6:19:
         96:f2:6c:46:00:6c:19:33:f7:40:fd:99:fa:0d:6c:ea:fa:4b:
         99:0c:ea:9b:1f:18:39:be:88:bb:5e:59:52:68:2b:91:8c:61:
         a0:d1:fb:df:3e:c1:22:07:ad:93:65:50:27:df:d5:da:f7:b1:
         34:0a:82:4f:1d:bd:56:b2:32:7a:72:57:e9:5b:a0:93:97:87:
         21:85:cb:0e:44:51:cc:df:9f:9c:6c:93:88:a5:0d:19:db:de:
         8f:66:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:39 2025 by rpki-client