Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          ORCIPWzpbJ+zm9fKW4OGN0t9IKdtyTIG41n+thf4OqY=
Subject key identifier:   98:24:E3:2B:49:0D:22:79:FB:8A:C2:34:1E:FA:6E:08:FE:48:79:E4
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       0662
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          0662
Signing time:             Wed 02 Jul 2025 22:45:09 +0000
Manifest this update:     Wed 02 Jul 2025 22:45:09 +0000
Manifest next update:     Wed 09 Jul 2025 22:45:09 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: PnspaNy43PQQrK7s7Hz8VQpKEsaTsYYZ9dpvCG5HOtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Jul  2 22:45:09 2025 GMT
            Not After : Jul  9 22:45:09 2025 GMT
        Subject: CN=6865b675-aa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:7a:ac:a1:de:9d:00:d8:be:d1:a6:e1:e1:
                    4e:8e:06:9f:bc:53:0d:ba:d7:b5:01:c1:49:72:6e:
                    16:1a:55:dd:3d:60:e5:c7:4d:7e:53:68:f2:8e:e4:
                    b4:6f:ce:a0:7d:97:f5:0d:14:9d:37:10:91:b2:d3:
                    73:ec:1b:bd:9b:af:a1:21:f4:d6:ee:12:a8:72:0d:
                    98:5f:1e:6e:56:45:a6:77:d8:cc:22:fe:9e:d7:ab:
                    8d:d0:4b:49:bc:e7:2b:5a:a6:69:5c:e4:7c:b7:2e:
                    bd:06:7c:35:4f:db:ba:9b:df:45:21:91:9c:60:84:
                    8c:73:16:38:6d:7f:0b:07:da:4f:0e:85:e5:98:29:
                    43:e9:d0:18:ec:98:e0:cf:92:a6:0a:50:6e:0a:38:
                    f5:97:b4:12:89:8e:93:55:f2:47:75:56:4c:a6:43:
                    28:df:0b:08:99:e1:84:9b:a3:9e:44:90:12:99:7c:
                    d4:90:3e:01:14:f9:a2:7c:83:c5:95:8f:8b:d6:77:
                    08:0b:bf:ce:c1:12:ce:16:42:55:dc:f7:b5:f0:ab:
                    44:b5:66:38:0d:95:86:b8:14:7d:03:64:8e:3a:f5:
                    a0:2e:20:79:09:28:c3:b4:ae:f3:b0:6d:e8:eb:09:
                    6d:78:d0:2c:ca:41:fe:16:ee:48:08:cc:e5:da:0a:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:E3:2B:49:0D:22:79:FB:8A:C2:34:1E:FA:6E:08:FE:48:79:E4
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:ec:0c:b6:c8:88:89:7d:27:0c:f2:36:f9:44:82:9b:9c:
         c0:22:ff:8d:8a:ec:f1:4d:fd:0c:52:f6:b6:71:97:6d:53:2f:
         fd:8d:71:b2:cd:40:0d:18:8e:b7:2e:c8:3d:fd:be:d3:a9:15:
         1c:59:6c:2e:51:d5:74:38:56:0c:b6:e4:f6:55:6f:0c:78:99:
         2a:04:14:35:eb:90:13:64:8d:56:7b:40:02:8e:b5:0b:fa:13:
         af:de:be:5a:6b:76:e0:ae:33:6c:e7:e2:d3:9b:57:02:a7:45:
         96:88:79:61:fd:4f:29:c9:00:28:7c:01:d5:02:bd:0e:39:dc:
         3f:e1:ff:91:9d:79:bd:cd:3e:65:c7:a5:a0:75:c0:92:7d:78:
         ee:17:37:44:8e:1f:00:6f:7d:62:d7:96:9d:ef:06:65:ff:b8:
         9c:70:bd:7a:04:8b:40:6b:35:66:aa:bc:8f:1c:4f:b8:db:70:
         7f:6f:2c:5d:b1:86:7d:83:7b:a9:4a:d5:17:ab:d2:e2:8a:e1:
         8d:62:52:fd:1c:6a:5d:fa:70:75:8b:85:4f:03:83:00:94:ec:
         ea:89:07:35:b5:cf:92:8d:af:b1:52:78:45:78:52:07:ed:4f:
         5a:5f:04:5a:ab:06:ad:42:16:43:fe:c2:6e:71:60:1b:26:1e:
         ed:f7:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:38:10 2025 by rpki-client