Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File:                     lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier:          Heh5srItQBNyfW+GnwEw7v3/ocdC3NeM8KfW+mou/bs=
Subject key identifier:   DA:0D:F6:F7:B6:DA:24:B9:5E:F0:07:C7:73:2F:03:85:BB:35:E1:1A
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer:       /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial:       0302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number:          02F9
Signing time:             Sun 19 Oct 2025 03:20:52 +0000
Manifest this update:     Sun 19 Oct 2025 03:20:51 +0000
Manifest next update:     Sun 26 Oct 2025 03:20:51 +0000
Files and hashes:         1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: Km8Xu2Loy3ifqy0iFsuYuqL9EObzbe5/EBY0L6QgSY4=)
                          2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: Gkpwn3+qaXPLAggtUnFxSv/8MK3BM4swBT14YB5sClw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
                          rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
        Validity
            Not Before: Oct 19 03:20:51 2025 GMT
            Not After : Oct 26 03:20:51 2025 GMT
        Subject: CN=68f45913-72bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:10:62:b2:3f:0e:15:8a:35:38:99:a5:cf:
                    c0:a1:e6:c4:d9:8e:8e:97:30:f9:a0:71:d2:e9:01:
                    47:24:9f:58:e7:bb:83:3d:56:32:86:16:9e:ce:13:
                    16:8f:da:b5:4f:88:bf:47:6e:41:6f:ab:5a:b4:ef:
                    c7:0c:8a:76:a3:26:04:b7:99:c8:d4:5c:ad:de:61:
                    cb:e1:2d:ba:05:f2:dc:5f:74:08:59:52:5b:d0:76:
                    bb:91:c5:39:6b:a1:56:1d:da:6b:40:15:a6:bd:8b:
                    68:15:b6:c5:18:ff:46:7c:8e:30:81:61:00:d5:5e:
                    0a:db:fe:39:66:9b:56:1e:42:d5:d1:8e:d3:39:d5:
                    32:80:b6:ee:61:fd:03:e2:bc:ea:e6:c2:80:1e:9e:
                    8b:12:d6:df:ea:b7:23:73:ac:f0:12:4f:74:f5:4b:
                    a0:9f:25:52:cf:06:de:82:98:1b:7a:1e:f4:be:31:
                    b1:5d:83:71:a8:d1:e8:89:2f:d3:5f:c3:83:30:2e:
                    37:d5:c8:00:9b:ed:e9:ed:aa:7c:b8:cf:3c:f1:3e:
                    1e:5a:4e:74:88:26:e4:05:38:52:c0:df:5b:34:dd:
                    36:da:f9:b4:fb:22:22:91:59:a3:62:8a:55:4e:22:
                    46:cc:81:f7:f3:6a:2c:1b:bc:83:a0:20:c3:01:3f:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0D:F6:F7:B6:DA:24:B9:5E:F0:07:C7:73:2F:03:85:BB:35:E1:1A
            X509v3 Authority Key Identifier:
                keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:69:c8:37:93:48:83:25:06:76:a2:02:0b:3f:32:e8:46:
         25:ee:f7:af:cc:43:c9:be:e7:06:f3:f8:bf:b7:20:79:6b:46:
         12:e0:f6:2e:40:31:43:ea:88:f1:69:ec:8b:fb:8d:19:85:45:
         5b:52:ff:c0:78:a8:f7:84:ea:33:f0:56:40:05:32:77:61:4b:
         47:bf:7c:77:ee:83:dd:bc:f2:2d:21:ff:45:f5:54:b0:54:d0:
         c6:08:c1:6f:29:ae:eb:eb:15:bc:67:4f:8e:44:7d:91:fa:1b:
         ca:7f:6f:3b:c9:21:d4:c6:f9:df:31:bc:fa:8d:0a:16:ab:aa:
         d2:cc:dc:1a:bf:00:02:ce:82:61:bd:3d:41:db:ac:24:9f:12:
         38:57:9f:bf:76:e5:4b:44:9b:e3:fa:64:93:58:26:13:aa:46:
         7f:88:8f:37:89:3b:95:17:ad:7f:46:d2:76:77:ff:ca:e4:74:
         0c:19:49:93:37:6f:9e:dd:7e:a0:a2:6d:6b:8d:0c:70:c1:06:
         b5:72:41:17:7b:d7:a5:8d:56:66:24:44:24:95:7b:c5:03:af:
         29:81:a2:53:69:01:a9:82:2e:a3:3e:ab:b0:23:f1:67:2d:87:
         c9:7f:82:87:4e:ab:56:64:33:2f:0d:0c:36:f6:de:ff:d1:a5:
         cc:68:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:01 2025 by rpki-client