Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          LZKoubp0kBxjL9Z3wRZxtfM57qAxJl9pRJPGIRcsZOg=
Subject key identifier:   F2:31:74:16:CD:95:8B:59:74:A2:60:CC:D5:AB:C3:22:A7:66:35:AB
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0801
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          07F2
Signing time:             Sat 18 Oct 2025 22:23:33 +0000
Manifest this update:     Sat 18 Oct 2025 22:23:32 +0000
Manifest next update:     Sat 25 Oct 2025 22:23:32 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: Kw6/ixc8Zza9lWn5d7IYQsTfdn1EGbyCDMoDX0yH6XY=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Oct 18 22:23:32 2025 GMT
            Not After : Oct 25 22:23:32 2025 GMT
        Subject: CN=68f41365-8578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f2:f2:a2:83:ff:1c:7b:fc:ed:47:dc:51:e0:
                    c6:0f:04:5e:6b:0b:d0:3c:b2:87:44:75:03:0c:d5:
                    29:66:01:30:87:5b:e4:22:ba:a2:8f:ca:45:69:8f:
                    c9:e9:cd:b1:11:9b:97:77:8d:3b:fd:8e:a8:dd:48:
                    27:63:c4:7f:87:b3:97:bd:26:1e:b1:82:ed:ac:a1:
                    6e:a6:83:d6:ac:89:d9:ff:0c:a3:57:2b:ba:c8:46:
                    d8:fb:e1:88:33:2d:0c:93:06:96:08:a9:1d:33:19:
                    f1:a2:c1:09:a3:4e:d7:93:3c:b4:34:3e:79:31:81:
                    9e:50:4a:49:df:ec:44:70:85:e0:2f:bf:57:ab:cd:
                    50:0b:f0:5e:ed:c7:d3:1e:48:9a:ed:2c:6f:b5:23:
                    0c:3b:ed:03:d2:80:2c:e8:72:09:9e:7b:0d:f1:30:
                    a3:7d:1f:d7:57:05:2b:a7:61:91:7c:41:07:ba:41:
                    43:e7:a8:29:0a:a5:7d:cd:6a:69:e6:56:ba:8b:6c:
                    a1:32:00:61:d0:79:38:ea:2c:4c:e3:0a:86:2e:7a:
                    31:ae:c1:3e:d5:d6:82:2f:a9:62:17:4b:85:f9:5f:
                    d0:cc:5a:da:43:fc:36:b5:ef:cd:d8:3f:95:cc:a1:
                    a7:01:a8:57:00:f9:26:87:25:bc:34:52:aa:0f:30:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:31:74:16:CD:95:8B:59:74:A2:60:CC:D5:AB:C3:22:A7:66:35:AB
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:2b:9e:86:d3:6d:c0:b9:22:88:f2:74:08:4d:94:d5:cb:
         16:3e:ab:dc:42:fb:c6:e8:e0:ee:78:e1:b4:b0:2d:6b:7b:f9:
         9c:d5:5e:92:cc:bd:79:dc:fd:aa:f7:be:4e:ed:e6:27:3f:43:
         88:65:62:f2:21:6a:86:08:89:3c:b6:5d:82:bb:5c:7f:e4:dd:
         e1:c1:21:98:2e:11:5c:69:9f:d3:22:62:ca:5f:1d:28:81:f4:
         60:ef:8a:48:69:42:70:b4:bd:47:ab:dc:9e:62:04:c4:6d:0f:
         e8:7c:09:5a:f5:89:34:41:a8:9d:5a:e7:a3:e9:60:4f:55:c8:
         44:cb:f9:d2:87:3a:5e:a6:ba:fb:99:e6:89:54:0f:fe:5e:29:
         22:8f:cc:38:c4:b5:c8:0b:cf:29:74:e5:dc:77:2a:85:bd:05:
         68:52:b2:83:85:30:19:14:5e:03:23:cc:71:45:66:b8:0b:d5:
         3c:1c:55:47:3b:a2:11:11:ae:49:8e:58:18:4b:be:0f:fa:1d:
         7a:7d:63:dd:1a:44:bd:34:62:b3:1a:20:4c:12:ae:26:74:12:
         71:1b:92:d7:09:a9:8b:7b:1b:bb:fd:0e:72:2c:fc:75:17:20:
         52:0e:f7:54:1e:45:aa:50:dd:ed:9f:4b:be:e0:34:9c:87:05:
         17:11:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:46 2025 by rpki-client