Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File:                     LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier:          dbBg5U9mZ5qxWuy6xh8MyrJZexMsgIVHEA+QLFViMN0=
Subject key identifier:   A7:F9:CB:E6:18:4D:84:B9:6A:79:8F:5B:E0:51:49:1A:FA:72:0F:0E
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer:       /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number:          97
Signing time:             Wed 02 Jul 2025 19:41:19 +0000
Manifest this update:     Wed 02 Jul 2025 19:41:19 +0000
Manifest next update:     Wed 09 Jul 2025 19:41:19 +0000
Files and hashes:         1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: XRGnueopSYeymqAeNP7UPGCUm049TBO/cWzZC4Vm9bE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
        Validity
            Not Before: Jul  2 19:41:19 2025 GMT
            Not After : Jul  9 19:41:19 2025 GMT
        Subject: CN=68658b5f-3241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:cc:19:0e:4a:0c:14:5a:11:4c:02:f9:1c:
                    01:57:87:31:59:a8:61:28:9b:54:8a:5e:f4:ff:9a:
                    0b:10:84:7e:94:9d:de:fc:51:e5:44:bb:b5:e4:38:
                    c7:8b:8b:90:18:f0:89:63:02:a3:35:88:51:73:26:
                    3c:2a:1f:8e:fa:64:a0:02:9c:22:25:23:9d:3a:93:
                    41:db:22:4d:46:a8:95:47:61:20:11:f5:03:05:0a:
                    d4:14:02:6b:ca:25:b5:e4:a5:e5:86:cb:79:19:41:
                    19:6d:af:db:4a:96:f8:77:9a:06:e4:87:f1:a0:43:
                    66:57:c9:c0:e9:71:98:86:b7:2a:b4:6e:0f:f6:08:
                    0b:8a:1d:0b:34:e5:11:be:ec:2a:b3:6d:86:88:9f:
                    3e:b3:68:8c:6a:05:69:53:d8:2b:c4:45:80:cf:a6:
                    14:51:78:c9:49:24:52:46:df:a3:d1:b7:04:01:01:
                    cb:08:09:af:f0:ce:c5:c7:43:13:5f:84:e8:6a:46:
                    33:51:9e:2e:1c:b5:c5:92:90:f3:25:99:c2:6e:f1:
                    8c:2b:6d:ef:fa:6f:49:19:c5:f6:ce:5f:04:03:39:
                    da:2c:d1:39:08:4a:b1:61:ea:6c:88:34:c9:d1:83:
                    5a:eb:5f:64:90:5a:61:ad:30:27:44:83:af:03:f6:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:CB:E6:18:4D:84:B9:6A:79:8F:5B:E0:51:49:1A:FA:72:0F:0E
            X509v3 Authority Key Identifier:
                keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:ed:16:49:06:4d:bf:f8:b8:51:cd:95:ed:98:d5:5e:c0:
         40:e3:78:87:9d:6d:1d:fc:f0:ed:2f:2d:3d:b0:e6:19:b7:06:
         f9:5d:fa:84:cb:05:fc:3f:f0:22:7f:e2:32:f2:ab:fe:67:1e:
         39:5f:e8:69:12:e4:ff:f3:35:db:4f:52:b5:d8:9c:8f:79:ce:
         e7:fc:b0:84:ff:a3:f0:a0:83:13:72:35:60:76:af:fe:8d:d6:
         d2:5f:2f:a8:c5:34:a8:90:29:49:19:88:5a:b4:d2:45:ab:84:
         60:2b:be:cd:e9:14:91:04:85:eb:91:48:42:92:61:4c:6a:ed:
         28:e9:5a:98:2c:33:8b:c6:d2:28:1d:c1:02:48:60:84:8a:d1:
         ba:bb:f5:09:21:59:04:ce:bc:eb:c0:4f:e5:e8:05:04:f8:4a:
         8f:6f:37:b8:a2:36:67:f1:c3:06:8d:e4:05:57:30:53:76:3c:
         5b:88:8e:f4:8a:bc:75:4c:2e:57:53:91:bd:49:cf:a7:0a:c4:
         88:a2:92:3d:69:7e:38:0b:55:82:cb:24:44:c9:7f:99:a9:0c:
         00:c1:7f:f0:30:a3:87:ef:5b:0e:55:1f:b9:00:96:bb:dc:29:
         cc:46:f4:85:9d:62:0b:ea:cb:50:b1:46:e4:f5:11:46:63:7a:
         8f:d8:39:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD
OEIxQUQ4QUIwHhcNMjUwNzAyMTk0MTE5WhcNMjUwNzA5MTk0MTE5WjAYMRYwFAYD
VQQDEw02ODY1OGI1Zi0zMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIPMGQ5KDBRaEUwC+RwBV4cxWahhKJtUil70/5oLEIR+lJ3e/FHlRLu15DjH
i4uQGPCJYwKjNYhRcyY8Kh+O+mSgApwiJSOdOpNB2yJNRqiVR2EgEfUDBQrUFAJr
yiW15KXlhst5GUEZba/bSpb4d5oG5IfxoENmV8nA6XGYhrcqtG4P9ggLih0LNOUR
vuwqs22GiJ8+s2iMagVpU9grxEWAz6YUUXjJSSRSRt+j0bcEAQHLCAmv8M7Fx0MT
X4ToakYzUZ4uHLXFkpDzJZnCbvGMK23v+m9JGcX2zl8EAznaLNE5CEqxYepsiDTJ
0YNa619kkFphrTAnRIOvA/ZkXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf5y+YY
TYS5anmPW+BRSRr6cg8OMB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx
OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ
TkRhc19sdGg2SjdJc2EyS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAH4+0WSQZNv/i4Uc2V7ZjVXsBA43iHnW0d/PDtLy09sOYZtwb5XfqE
ywX8P/Aif+Iy8qv+Zx45X+hpEuT/8zXbT1K12JyPec7n/LCE/6PwoIMTcjVgdq/+
jdbSXy+oxTSokClJGYhatNJFq4RgK77N6RSRBIXrkUhCkmFMau0o6VqYLDOLxtIo
HcECSGCEitG6u/UJIVkEzrzrwE/l6AUE+EqPbze4ojZn8cMGjeQFVzBTdjxbiI70
irx1TC5XU5G9Sc+nCsSIopI9aX44C1WCyyREyX+ZqQwAwX/wMKOH71sOVR+5AJa7
3CnMRvSFnWIL6stQsUbk9RFGY3qP2Dkw
-----END CERTIFICATE-----
Generated at Fri Jul 4 00:00:56 2025 by rpki-client