Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
File:                     LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json)
Hash identifier:          EU9fiWgoNAlntBNijbrSSRPKrcu7UNyELQPYuyO3DVk=
Subject key identifier:   55:46:12:1A:7A:31:F7:40:47:95:2E:7F:F6:A1:CE:1F:FE:FC:CB:8A
Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
Certificate issuer:       /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Certificate serial:       0FAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
Manifest number:          16AE
Signing time:             Sat 18 Oct 2025 18:06:30 +0000
Manifest this update:     Sat 18 Oct 2025 18:06:29 +0000
Manifest next update:     Sat 25 Oct 2025 18:06:29 +0000
Files and hashes:         1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: sw+1TgDRPj579N58QsxN9YLH96+QjUvJG7Ai2mKng9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4015 (0xfaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
        Validity
            Not Before: Oct 18 18:06:29 2025 GMT
            Not After : Oct 25 18:06:29 2025 GMT
        Subject: CN=68f3d725-4d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:9c:68:e0:a1:cb:fe:d1:65:57:de:a3:89:
                    e2:56:af:a8:df:d9:cc:e5:0c:5b:15:50:dd:a3:e9:
                    23:59:f9:44:14:6c:a4:b3:95:40:6a:19:8e:a5:55:
                    a0:0b:75:8f:59:89:5e:7f:6f:23:e1:da:d9:62:8d:
                    9e:00:e1:99:3c:ec:f0:1a:15:31:1c:0e:d8:65:27:
                    03:b1:a2:47:3f:85:b0:08:75:4e:34:16:aa:a2:48:
                    20:17:ab:e2:cd:29:96:9f:84:0d:50:30:03:28:f6:
                    fd:95:80:b9:cf:d3:f7:0f:da:fe:8d:24:28:bb:1d:
                    ac:81:57:b4:8d:d8:5b:a9:0e:6f:f9:85:3b:32:be:
                    09:51:f1:d9:b7:07:68:92:91:22:2e:c7:1a:24:c2:
                    07:b4:13:77:78:71:0e:e8:2a:36:55:2d:1f:13:c6:
                    80:74:bb:a6:4d:49:c1:5b:2e:01:c9:5d:81:c6:7c:
                    e5:33:b9:5f:85:a9:be:35:0a:ab:a8:3b:27:78:33:
                    bb:5b:57:ba:e2:ec:b1:f6:d9:31:2d:20:81:8e:b9:
                    de:75:ac:8c:a6:15:3f:90:a6:63:d0:78:e5:6c:d1:
                    2e:91:02:01:9c:98:ea:99:ad:2e:f3:8f:a3:12:9a:
                    51:3b:58:de:bd:09:3e:fa:b1:6c:97:5d:be:e5:e7:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:12:1A:7A:31:F7:40:47:95:2E:7F:F6:A1:CE:1F:FE:FC:CB:8A
            X509v3 Authority Key Identifier:
                keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4f:2c:34:14:71:40:46:48:28:ed:f5:bb:2d:9d:06:6d:e5:
         75:88:a2:bf:8e:0b:eb:86:00:fb:f2:11:f8:a8:bd:94:d2:7c:
         32:20:de:4a:4c:fb:b2:5c:c6:8e:f7:cf:dc:c9:3a:a9:c6:e9:
         09:bd:51:b5:ba:21:50:a0:4e:ac:97:08:de:17:f9:56:e6:94:
         49:87:d6:67:6d:db:88:9e:ce:7b:e5:8c:65:55:34:ca:ce:db:
         3c:b6:df:e0:42:1a:ee:cb:f8:44:b1:dc:06:05:9c:45:2e:05:
         aa:81:31:38:67:e2:fd:c1:02:5d:1e:d0:9a:af:90:d5:a3:ed:
         6f:a6:12:74:79:23:de:f0:d2:82:ad:62:0a:5b:a4:0f:0c:d7:
         11:98:56:1b:5e:47:6a:c7:d2:61:41:91:d2:b6:41:aa:3a:a8:
         c8:31:67:de:7e:06:53:24:86:18:6e:ae:4a:27:43:e0:c3:47:
         8f:cd:31:20:ce:f8:84:82:ea:e6:05:e2:ff:2f:45:d4:67:07:
         87:c6:b7:a6:e0:ac:3b:3b:f7:6e:d5:9b:66:65:e5:bb:6a:d6:
         92:3e:6c:ec:bc:23:52:1e:8d:b3:86:6a:a4:88:82:c1:19:35:
         02:2a:49:0d:5a:bd:18:d2:20:a5:47:3a:76:15:95:48:2d:12:
         ba:db:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:17 2025 by rpki-client