Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          OAgtFCudOayI9C1MpKycGJaLr9fwA3zGGxstAArME98=
Subject key identifier:   03:05:E9:FF:37:59:AF:43:BE:DF:C3:8B:E6:34:ED:41:1A:1F:19:FA
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          1F
Signing time:             Thu 03 Jul 2025 05:23:05 +0000
Manifest this update:     Thu 03 Jul 2025 05:23:05 +0000
Manifest next update:     Thu 10 Jul 2025 05:23:05 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: dH2NlFuxIENvilAwdbdoDzkDiPi1EJ7Yb/c6GEXrvo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Jul  3 05:23:05 2025 GMT
            Not After : Jul 10 05:23:05 2025 GMT
        Subject: CN=686613b9-cd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:a9:6c:c5:35:49:45:60:c9:d1:13:16:90:
                    af:4c:b6:e7:e3:e7:90:8e:c6:c9:8b:80:1c:91:7f:
                    fb:06:95:d4:60:7f:95:ed:0b:16:2a:0f:f0:6f:1f:
                    8f:bc:f4:72:c1:80:3f:c0:9a:b3:b2:36:86:6a:03:
                    d6:06:cd:18:ac:f7:a3:6d:f4:ce:32:8a:81:d9:b5:
                    a9:84:83:0d:a8:66:f2:05:e5:3a:aa:c8:94:3e:cf:
                    a8:e8:8d:a8:64:27:84:f1:80:97:c6:e0:96:cf:ff:
                    c6:7f:c3:b3:25:93:e5:51:3d:21:73:30:9b:d7:a3:
                    2f:36:ef:a8:54:3a:f8:58:a7:3f:04:d9:12:11:4b:
                    fa:c1:ec:a4:6f:39:86:d6:28:84:e2:63:8c:30:78:
                    57:17:7e:26:b0:39:ac:10:a8:cf:91:fe:16:ae:28:
                    71:f8:c0:cc:31:02:49:96:3b:99:97:ac:aa:07:d8:
                    72:1d:2b:d2:5b:0a:02:88:df:2d:db:b8:43:ee:b8:
                    0d:d8:65:dc:a7:8d:53:ab:04:a0:eb:f2:03:5f:dc:
                    13:38:34:6c:18:25:e9:3e:0a:6c:ae:ef:fd:13:42:
                    f4:21:a9:cd:18:b8:55:76:80:4c:5b:50:17:e3:fb:
                    24:29:63:f8:d9:1c:f9:bf:b2:49:79:e0:9d:06:b9:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:E9:FF:37:59:AF:43:BE:DF:C3:8B:E6:34:ED:41:1A:1F:19:FA
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:a2:6f:b2:4f:c4:30:08:c1:f2:a4:b7:4a:82:7b:1d:14:
         bf:c9:0f:05:a6:2c:20:e3:e6:39:3a:66:90:b6:c1:15:22:32:
         8e:fb:f1:92:d4:36:f6:ce:ff:70:42:c3:89:a7:28:25:08:8a:
         34:47:3e:6f:d0:49:1e:8f:01:2f:a4:77:1f:83:86:d2:21:f9:
         79:f4:49:cd:f4:ba:c1:87:b7:4b:3c:5a:5b:8e:d1:8c:d8:0e:
         d8:03:2d:6b:ae:a3:c0:6d:c3:76:e6:7d:d4:7a:ad:e8:5d:cd:
         ae:cc:46:98:99:c0:64:53:fb:46:0c:94:8c:53:65:ac:14:47:
         b2:96:2c:bf:d3:1b:8a:31:66:b0:3e:30:fb:93:2d:e0:97:06:
         fb:56:ae:76:0d:c8:68:5a:b4:e1:82:81:77:3a:ef:b6:44:a8:
         c3:4c:d0:db:fa:57:0a:98:c7:d6:f5:d6:b6:39:eb:db:e1:7f:
         b5:24:79:d5:48:e1:31:ac:24:c1:36:d8:09:3c:bf:f9:f6:98:
         b9:33:19:d3:6c:63:88:94:43:19:2f:27:77:1a:df:dd:66:f3:
         8a:c3:17:49:e9:b7:7c:79:0a:29:c2:36:6d:30:b6:88:48:0d:
         cf:52:59:10:5f:5d:7b:ca:f1:a5:72:2e:80:bd:c1:50:03:86:
         49:90:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:28:49 2025 by rpki-client