Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File:                     LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier:          kMstSYp65ChpX0sAjbU715AOiXvhH/Mp5RRLhOR+n7A=
Subject key identifier:   B9:54:49:A3:A6:DC:3B:8F:FE:D3:60:C0:96:F4:C2:66:45:86:C9:16
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number:          02F1
Signing time:             Sun 19 Oct 2025 04:41:17 +0000
Manifest this update:     Sun 19 Oct 2025 04:41:16 +0000
Manifest next update:     Sun 26 Oct 2025 04:41:16 +0000
Files and hashes:         1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: KwQfbUS04NgwFY9LqGpChGDYyQeKMj5vt+VwLPtjhW8=)
                          2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: AmuwqsBSe7hIWLuijSaz8cznV1ExxkSwedidAfhqBys=)
                          3: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: rRStCv6LwOYU9m23O/Ra+02r0H7+4ZuKu4MCypTDG7U=)
                          4: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: pHPkNw6sk+jwMGQiwSPICHgSAbGU9rT4WcKSGwmaJf8=)
                          5: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: gDHotda1hxuaNQN7h9M6AxxJGfzXAR/0C3RpbJSgmtE=)
                          6: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: dnj6MgMu2bT8eksz/sRKoRkxxyYLeHmRQBIr9G3sHfI=)
                          7: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: LLSWtZdvzPT4rXQVRRto3DLsyoR671syCJPRSB+ppjE=)
                          8: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: eOBcL+ti86qxxG4GZER5GjPBmSZhgS6o++eTvbnH834=)
                          9: E879EE7C144111EFB247B936C4F9AE02.roa (hash: kWS/r/1uvE2uh33BQhnK7TE/fxU21h0Qyka9IpjmAOo=)
                          10: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 2BRZTVSl8BpcjXe5d2W/ue5qmKPhQHNXNMprHWOL7Cw=)
                          11: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: VtJthTtz/+ABAcSwhrIYrg5dkmdk8ZYvZhD7Gwr5Rag=)
                          12: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: l/w2LsKQqDZ2CCn5jWgOIAF0bJGTxkpNnwUlAl6Xl+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Oct 19 04:41:16 2025 GMT
            Not After : Oct 26 04:41:16 2025 GMT
        Subject: CN=68f46bed-9f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:68:36:96:93:fd:8f:00:ac:95:e6:26:88:
                    8a:a9:48:dd:4c:84:e1:bf:26:5d:ff:37:62:8b:77:
                    8a:da:16:6a:6a:20:01:ec:60:aa:53:e9:a0:25:fe:
                    72:98:1b:d8:2b:5d:e6:8e:1b:2d:9b:f0:a9:15:a3:
                    d3:81:5a:22:65:c0:8b:79:68:6b:2d:80:0d:92:a1:
                    2c:5a:54:db:f4:14:62:42:65:6b:3e:7c:ab:a8:28:
                    4b:40:68:7f:60:4d:b2:cd:84:29:d6:05:67:8a:ef:
                    cd:99:50:7c:4e:65:a9:cc:89:8f:6f:5f:cf:ce:38:
                    5c:9c:91:73:8e:c6:95:e2:e5:b1:c5:7d:72:e3:01:
                    92:56:b5:cb:c3:56:d4:3a:5c:5e:81:d8:95:25:04:
                    d9:3a:25:2b:7f:aa:56:ea:e8:c1:be:a6:4f:f4:eb:
                    46:3c:04:6f:61:a0:c5:de:25:b9:84:ad:1e:93:41:
                    5b:d1:6b:5e:01:47:47:30:05:1a:b6:92:cf:ff:6b:
                    a7:57:d0:b6:52:5c:e8:e5:05:a4:7d:71:73:88:99:
                    64:8b:ae:f8:c2:60:47:d1:5c:95:62:13:e2:c9:4b:
                    24:63:15:e0:84:b2:41:15:32:c6:00:13:b1:8f:f8:
                    73:17:ee:4a:c4:13:68:c4:29:66:c3:ef:c3:e2:13:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:49:A3:A6:DC:3B:8F:FE:D3:60:C0:96:F4:C2:66:45:86:C9:16
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:67:e9:65:12:55:1d:6b:4f:8a:fa:a0:57:1e:74:95:7a:3c:
         df:65:ec:c8:71:4a:fb:79:ed:ae:db:23:d5:33:72:89:55:4d:
         33:4a:d3:89:7b:b0:59:33:f7:f1:6d:bc:6f:2e:05:d0:7c:e1:
         3f:0a:fe:1b:55:79:15:fb:eb:15:28:0e:ad:42:c2:a8:66:25:
         b8:00:65:e6:41:33:b5:64:d5:74:c3:a6:c0:a2:58:3a:08:0c:
         0e:38:7b:ae:05:32:d1:12:20:0d:53:6f:39:6d:3a:a6:a7:98:
         ea:5c:71:b2:31:fd:80:6a:7c:25:ca:94:0a:40:9d:2b:b3:04:
         7a:24:f1:df:ad:6e:71:b3:68:3c:20:bf:16:27:1d:66:d8:77:
         51:ac:2e:fe:75:6f:74:13:c4:3d:c6:e8:32:19:f5:2a:aa:ef:
         61:dc:b1:c0:e6:ec:e3:4e:06:c1:0b:fa:3b:ac:70:4d:76:69:
         c6:3e:51:26:9a:39:e6:e4:6b:0f:da:d8:ba:b2:eb:c7:f8:ab:
         6a:eb:c1:8d:c8:fd:c3:9c:50:b6:7e:0a:4a:18:36:e9:ab:ec:
         c3:c4:a6:13:f4:62:e9:9d:33:6a:f4:f5:83:a9:43:ae:21:17:
         cc:1d:7b:48:48:4c:ae:3e:5c:45:d7:90:1a:68:a4:34:72:f4:
         ee:ac:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:27 2025 by rpki-client