Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          AX8lTJHcqW7S/05io2VxyvXQW3eJwfr+FFzOkA9bMVw=
Subject key identifier:   26:7E:E1:E0:C0:40:B9:8C:C4:22:B7:C9:BB:92:35:31:9E:45:C8:D4
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          02F4
Signing time:             Sun 19 Oct 2025 03:19:56 +0000
Manifest this update:     Sun 19 Oct 2025 03:19:55 +0000
Manifest next update:     Sun 26 Oct 2025 03:19:55 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: kKv9uPKDwnIdyB9Uy15C37/d/i124oeqSe5vRJdvHNU=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Oct 19 03:19:55 2025 GMT
            Not After : Oct 26 03:19:55 2025 GMT
        Subject: CN=68f458db-5d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:e3:08:15:b6:4c:64:dc:93:94:af:ed:cc:
                    6e:f9:8b:8c:89:84:03:7b:36:64:0e:04:5a:29:13:
                    bc:fd:f1:9d:ae:3b:15:b2:d0:8e:95:85:cc:eb:66:
                    b2:70:2f:06:a4:89:e1:f2:cd:ed:11:29:94:bb:5f:
                    c4:66:19:5a:08:cb:48:61:cf:95:73:1c:df:d0:52:
                    74:ca:2d:6a:4b:20:c2:11:07:a2:2e:9a:ab:6a:7c:
                    bc:bc:7f:90:70:24:e4:8e:4a:96:cb:c6:7e:4c:b4:
                    df:e4:e1:d7:e9:63:fb:54:55:ce:75:66:63:cf:8b:
                    60:2d:0c:8d:5f:26:6f:4e:91:5e:75:7c:75:21:b4:
                    09:a7:43:5c:dd:5e:53:97:c1:b3:f4:da:91:2d:33:
                    47:31:08:1e:6c:c6:32:6c:8f:3b:c4:7c:d5:a8:23:
                    87:62:dd:8f:78:25:96:fc:57:0c:7c:ce:6d:ff:4c:
                    c5:4b:ec:ec:21:ed:f4:de:e6:ee:60:1e:b8:d6:16:
                    07:45:56:b9:bc:d3:34:65:85:05:03:e6:6a:43:60:
                    d6:cb:b0:d4:86:00:b9:a8:c7:de:79:c3:0a:36:c9:
                    48:dc:a2:f4:53:3c:8b:61:c3:a3:fd:5f:cc:37:cf:
                    ca:3a:e5:ce:ea:1d:ed:be:84:d8:72:9c:f3:d1:ce:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:E1:E0:C0:40:B9:8C:C4:22:B7:C9:BB:92:35:31:9E:45:C8:D4
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:6e:68:a6:1f:b4:6b:4f:22:27:ea:07:5e:51:d0:32:b6:
         12:a6:7d:f0:ab:ba:a6:c1:18:a6:11:25:0a:c4:82:10:f5:8d:
         df:5a:92:0c:ca:d5:f4:72:76:42:0d:c8:16:73:c7:55:82:18:
         6e:f3:e6:07:c5:33:40:ba:97:66:3b:10:b4:9f:ef:d2:ad:02:
         cd:c8:85:df:0c:fe:e3:7d:91:30:18:5f:94:c6:d6:6d:7f:27:
         6d:c0:bd:11:44:f1:97:92:6c:f6:ce:e6:d8:f3:ac:1a:27:57:
         4c:05:18:bc:e1:5c:49:35:cf:f9:0e:7c:c1:cd:6a:3e:e0:9f:
         fd:c2:13:ba:5b:9d:a3:89:d0:fa:8a:52:16:58:9f:67:3e:e8:
         99:b5:90:29:bb:34:6b:6e:be:db:8e:0e:c2:05:f0:26:31:62:
         10:04:0b:a3:04:2c:70:87:7e:ad:6a:e3:1c:88:02:d2:74:6f:
         9a:26:56:f3:ba:97:32:7d:52:78:80:49:44:78:d7:52:9c:ec:
         ef:00:f6:8d:57:70:c4:f1:e9:9e:cb:10:a4:1b:91:c3:5a:2a:
         5c:69:86:f6:81:e8:33:b3:29:d9:d7:0c:74:40:9a:44:6d:dd:
         45:5f:b3:ec:21:94:77:c1:cc:26:85:c1:26:f6:93:0e:58:31:
         37:b7:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:56 2025 by rpki-client