Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File:                     lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier:          EzYF0DNFjCIefNRyU/PUdta+pcZd3Tl9lC9pl3nzYhU=
Subject key identifier:   95:F6:57:5D:CC:99:F2:57:D4:EB:55:48:B4:B4:A0:E5:A9:63:8C:84
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer:       /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial:       0BB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number:          0BAA
Signing time:             Sat 18 Oct 2025 19:49:39 +0000
Manifest this update:     Sat 18 Oct 2025 19:49:39 +0000
Manifest next update:     Sat 25 Oct 2025 19:49:39 +0000
Files and hashes:         1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: rriYCg/DErU0jU/NQKQdzls2bk/MIE+dplLhQkvjDhg=)
                          2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=)
                          3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
        Validity
            Not Before: Oct 18 19:49:39 2025 GMT
            Not After : Oct 25 19:49:39 2025 GMT
        Subject: CN=68f3ef53-34c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:cd:f6:0e:59:03:2f:3e:f0:6b:10:14:94:
                    ed:78:6e:d2:11:1a:9c:a0:b2:6a:6c:39:09:ef:cc:
                    c5:f9:f9:54:f7:95:af:36:b3:58:4e:c9:02:46:62:
                    d8:82:f1:59:cf:04:1a:9e:cc:1c:1f:7b:e3:a1:5c:
                    d6:41:25:03:ed:ef:9c:c0:9b:17:4f:fc:d1:6d:59:
                    1b:a8:16:4f:d5:d6:17:4c:67:a7:ff:91:5d:6d:96:
                    35:a8:c8:fe:3f:f4:bf:23:fa:7f:8c:d6:28:e3:da:
                    8d:11:af:82:43:b0:2b:b9:d7:c3:77:a2:53:c2:06:
                    7a:d0:ef:15:d8:d6:a9:08:df:f3:61:a9:06:46:77:
                    bf:9d:cb:ee:ad:14:10:d4:d9:4f:f1:fa:81:25:39:
                    a7:d3:d2:81:1a:a4:c5:6d:15:f6:a3:e8:0c:f7:78:
                    e5:7f:7f:15:dc:48:15:8c:cd:a6:1b:7c:de:5a:b6:
                    63:fb:d2:a6:d3:fb:58:ab:e9:f0:8f:e2:d8:1f:ee:
                    93:22:53:50:58:7a:52:88:7d:9e:12:bd:43:23:7d:
                    ec:9e:e5:cb:b6:55:4d:31:7e:e5:60:2d:63:26:10:
                    60:1c:d6:3d:81:f8:a3:29:3f:7a:0b:db:5d:ac:6c:
                    c1:98:7e:a8:38:0f:47:98:cb:e4:84:bd:26:94:17:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F6:57:5D:CC:99:F2:57:D4:EB:55:48:B4:B4:A0:E5:A9:63:8C:84
            X509v3 Authority Key Identifier:
                keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:3a:4b:8d:43:6f:59:4f:26:b9:54:91:19:d4:00:21:73:
         b4:f5:34:bb:16:a2:49:c1:f2:e3:53:f4:1b:a5:0c:16:5c:48:
         1e:d7:00:72:ac:5b:72:e3:49:17:46:0f:43:e8:2a:8d:d1:37:
         d7:93:55:d0:f6:96:d1:86:48:4c:fb:69:02:07:0a:26:00:a7:
         99:a5:88:18:a9:d4:ae:4b:82:25:a4:14:15:ad:60:45:31:a1:
         57:e0:3e:2a:58:41:d0:bf:c6:e8:4c:7c:c6:46:2b:bc:45:fa:
         93:ba:8f:61:ea:46:53:9c:f9:87:95:11:13:97:11:9f:ae:d6:
         65:f2:aa:e0:3c:69:52:1a:f3:62:01:8d:8c:39:0f:71:c7:f5:
         0b:23:dc:77:db:c1:4d:f5:b4:c9:8d:6f:a0:7a:42:a4:67:9a:
         50:2b:8a:39:a2:23:2f:f1:6f:eb:84:d8:cf:f6:32:4f:5d:ec:
         51:4a:f3:4b:9d:04:a0:07:fd:cf:5b:c4:45:02:41:a0:c2:23:
         e5:76:7a:36:e3:02:1b:61:1f:de:91:fe:f0:85:35:6a:5c:81:
         6d:af:15:62:f1:72:e9:dd:3b:cf:12:57:44:f1:39:80:45:a0:
         ae:2a:5f:d5:0d:87:52:0b:8f:11:19:da:da:f2:37:86:63:0d:
         72:0e:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:55 2025 by rpki-client