Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          tpOWzDc9eE3MqTFx4J1hVfc2ekbNzZtX/LrdCOYOBPY=
Subject key identifier:   56:A4:F8:8A:5E:92:2F:D3:1A:86:5E:2D:A6:D8:78:80:FF:B7:68:9C
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          02D7
Signing time:             Sat 23 Aug 2025 01:35:47 +0000
Manifest this update:     Sat 23 Aug 2025 01:35:47 +0000
Manifest next update:     Sat 30 Aug 2025 01:35:47 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: Cz6bJ9Y6jDNeqkKyy1bNC8sE/KKSPfPHXY2CoahlRyM=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Aug 23 01:35:47 2025 GMT
            Not After : Aug 30 01:35:47 2025 GMT
        Subject: CN=68a91af3-0c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:86:d0:f1:e9:f4:ae:03:49:20:51:53:af:
                    5c:94:13:4d:c7:5b:88:2e:c8:2e:ad:9b:b5:35:84:
                    e0:4e:ef:49:bc:c0:7e:33:b7:3c:8a:ca:a0:78:13:
                    4d:6e:69:27:b2:4b:5b:d3:fc:6e:54:95:11:f4:8d:
                    a0:3e:75:83:26:d5:bb:64:8b:e2:25:10:cc:90:56:
                    6a:5a:b6:ec:b6:a2:c6:94:c8:58:d2:1b:aa:db:ad:
                    c5:8a:d6:76:fb:25:4f:7e:13:2f:74:d5:4f:75:32:
                    8f:5c:d4:d2:6e:0a:d9:b4:42:68:ee:69:89:f1:57:
                    6b:09:4a:a5:32:90:d8:cd:07:42:5c:93:6f:67:9f:
                    aa:97:9d:7a:b3:7e:96:51:d3:f2:6d:b1:54:0c:a9:
                    93:6f:a2:55:69:52:82:b7:12:f2:46:c7:54:17:03:
                    78:5f:ba:8f:cd:84:e0:ac:81:6b:1d:0c:e4:51:d3:
                    a6:eb:e9:73:17:1e:4d:1a:ec:2f:d5:d0:b3:11:d9:
                    8a:27:af:d7:ef:51:7e:4a:90:9e:4b:ea:ff:c2:43:
                    59:24:8e:f0:18:7b:73:11:c3:02:0c:ee:f0:f5:3f:
                    53:b9:36:ea:45:f4:26:51:10:93:df:20:26:ce:3c:
                    c1:95:54:60:1d:35:c2:eb:e1:ba:14:a8:74:a1:be:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:F8:8A:5E:92:2F:D3:1A:86:5E:2D:A6:D8:78:80:FF:B7:68:9C
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:61:d2:34:64:2f:14:17:25:79:f4:dc:b7:a3:60:f9:e5:d3:
         5f:68:9c:26:e8:13:c3:b6:35:30:bf:ab:bf:d5:5a:20:52:4c:
         dd:82:a3:94:0b:89:36:6a:e5:ee:85:07:ed:21:0e:01:fa:51:
         e3:18:52:71:5a:46:f1:88:ba:05:fc:fe:9f:e7:98:49:bf:fd:
         6f:46:70:c6:c5:20:b9:d9:bd:82:33:38:13:5c:61:81:ae:f2:
         b1:38:9c:69:67:46:93:73:3f:23:bf:5d:fe:3c:fc:9b:1f:e4:
         aa:83:84:31:dd:af:10:1d:cc:5d:d9:91:75:52:0e:70:a6:af:
         69:92:2c:41:1d:00:12:92:4b:31:9d:d9:44:ab:c1:1a:a5:2d:
         11:52:92:91:bd:fb:db:ca:77:21:08:a9:64:3e:a1:a6:0f:e6:
         75:d6:e7:5e:0a:d9:6a:ff:4b:0a:94:f3:77:26:c2:d3:0b:09:
         86:c9:1e:00:07:37:d9:0e:a0:74:9a:45:1d:f3:57:c3:2c:40:
         b2:df:10:0a:d5:0e:c5:b8:9f:2c:2f:68:ce:52:f4:80:19:2d:
         5b:96:db:fa:f5:7e:80:1b:ba:77:36:25:4f:a0:ef:92:7e:60:
         97:8a:16:a0:06:c9:b4:c7:a9:90:41:b4:5b:c1:ec:26:b4:26:
         84:b0:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:03 2025 by rpki-client