Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          LAGZZYWM2esvAGdUi+Pk1aPwobbleERD0jO6I3//hI4=
Subject key identifier:   8A:16:6A:35:20:42:36:FB:EF:D1:F0:D6:C9:96:72:F9:76:AB:28:40
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          069A
Signing time:             Sat 18 Oct 2025 23:47:11 +0000
Manifest this update:     Sat 18 Oct 2025 23:47:11 +0000
Manifest next update:     Sat 25 Oct 2025 23:47:11 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: bLvwnyM5h7FyxZtbRXBmkjxCsrP/ZTFlILds2pETQ1c=)
                          2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: 7R6c3P6vpeH4DdhQAPICMa8Q+S+CZI2f3bujefwXy6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Oct 18 23:47:11 2025 GMT
            Not After : Oct 25 23:47:11 2025 GMT
        Subject: CN=68f426ff-ea93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:80:81:11:0a:5a:5f:5e:5a:85:e4:6b:e7:
                    2f:5f:62:06:38:ba:72:b5:50:44:35:fd:21:a7:4e:
                    bc:5e:24:06:36:16:e1:81:86:62:5f:ae:be:e4:75:
                    6f:b3:f5:81:de:27:15:33:e0:ff:22:13:7e:38:d7:
                    c3:6b:b2:d1:d9:35:d6:c4:35:62:a6:86:57:fe:8a:
                    15:0f:3f:b4:cf:2f:71:dd:8d:0f:50:38:ac:a3:32:
                    f5:b8:a9:12:c8:f5:84:a7:05:ea:d9:b8:dd:ef:ab:
                    bf:8b:5a:54:9f:87:56:f4:5f:e1:5c:a7:f8:8c:bf:
                    22:64:fb:75:2c:ea:db:53:bb:97:1f:a1:f8:b0:44:
                    00:17:8e:f0:0f:e7:3d:d9:12:58:90:52:6b:58:be:
                    ce:e2:50:ad:1a:e9:1a:b4:84:9c:d4:57:40:b4:0e:
                    ea:c3:7d:0e:2b:30:0b:4b:0d:68:fa:74:57:d3:24:
                    d8:01:93:9b:5e:db:3b:3f:cc:c0:03:77:da:fa:7b:
                    d1:f2:43:e4:9e:90:e4:11:17:5b:81:06:7f:84:23:
                    a5:5c:f4:bf:23:c7:44:83:4f:fd:d8:eb:6f:7a:60:
                    5e:d0:4c:68:4d:f9:b6:90:78:34:4c:35:d4:99:30:
                    95:2d:b0:32:d0:9e:c6:18:4f:75:dd:72:31:b6:55:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:6A:35:20:42:36:FB:EF:D1:F0:D6:C9:96:72:F9:76:AB:28:40
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:bd:17:72:0e:dd:bd:e9:49:81:b4:34:b4:fd:e0:77:00:
         53:e2:7d:d2:c1:59:0c:ad:86:a7:e8:17:88:9c:50:63:e8:2a:
         fe:7d:be:45:06:7a:8a:20:d5:33:cc:f6:98:0f:24:c8:0c:1f:
         6b:4e:f6:1a:3f:7d:dd:c7:89:b0:eb:66:97:59:13:54:ec:9e:
         3d:69:bc:26:25:8d:f7:89:3a:11:93:0e:fb:2a:0e:5f:66:90:
         f1:83:a7:f3:83:0b:c1:a8:e5:d2:3f:cd:53:fc:59:59:7c:af:
         6c:e7:1f:0d:06:a6:a0:83:89:cb:88:0d:fd:72:74:e8:de:91:
         56:ea:b2:b2:64:99:3f:ca:d0:a0:5e:59:ca:e2:c1:89:b7:66:
         f9:e4:5f:88:65:1c:5f:22:b4:b8:b5:ef:22:a6:1a:30:ff:c2:
         56:42:55:21:7d:ce:54:e3:9e:ca:3e:fe:55:71:79:df:ad:da:
         5c:15:fb:ee:ca:71:d5:6b:ae:04:56:61:b9:61:35:91:07:e9:
         30:b4:e8:94:fe:d4:e2:d7:f6:48:89:3e:bb:50:b9:26:67:9e:
         d4:e1:c8:ee:11:ea:30:d3:cb:0c:a1:af:53:6a:2d:7f:fa:28:
         92:f7:c2:1f:c5:5f:e7:be:c1:52:18:2c:b2:7b:b1:b4:d5:0d:
         85:43:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:21 2025 by rpki-client