Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          WZfRps6a0xPDXbUPc6ZzVYBcKPEmbQEyqimhNxc7QC8=
Subject key identifier:   32:7D:50:61:BC:35:C3:0F:6D:19:C4:7B:8F:A1:4B:77:4A:39:49:88
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0B72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0B6B
Signing time:             Sat 18 Oct 2025 19:56:38 +0000
Manifest this update:     Sat 18 Oct 2025 19:56:37 +0000
Manifest next update:     Sat 25 Oct 2025 19:56:37 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: 4mpYGqVoCiaszezOIjRD9870cSeFdNDqBMsm1a6gB+k=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: nC2MCb31DN75ahkTYwNnww6l+ZVraZqBgRvw8nlhuTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2930 (0xb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: Oct 18 19:56:37 2025 GMT
            Not After : Oct 25 19:56:37 2025 GMT
        Subject: CN=68f3f0f6-cc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:c9:8c:7f:59:37:ee:bc:a8:51:b1:1f:fa:
                    d6:54:53:0e:91:ac:ef:f0:3f:39:8a:89:3a:57:19:
                    d8:e2:4e:8a:ab:ec:be:99:f4:f1:7f:a5:6b:64:5d:
                    b2:fe:74:19:62:f3:be:a4:c0:df:5c:9c:35:e5:fb:
                    07:dc:1c:0f:2e:87:fa:26:65:60:de:e0:7c:a7:87:
                    8e:cd:4e:d9:92:36:98:34:2e:74:f0:2d:dd:03:2d:
                    8c:bd:a6:1a:74:ab:b1:4d:f7:94:8b:1c:c2:6b:27:
                    45:50:b3:32:3a:38:64:31:20:f7:53:bb:c9:66:9c:
                    47:87:29:00:02:45:ba:a1:e6:89:2c:07:b0:60:8e:
                    81:fc:9b:c2:0f:ac:d1:b4:cb:1b:6b:a4:33:cb:1c:
                    59:25:e9:11:64:cc:2d:55:fd:fe:ec:73:77:97:15:
                    19:e1:e5:50:60:88:ce:9d:10:12:f5:fd:88:a8:41:
                    cd:d3:b4:54:5e:27:f5:9c:09:ed:a1:7a:9a:0c:36:
                    ef:8b:96:d3:22:78:c3:91:d0:6b:b2:77:7e:ef:8b:
                    47:34:d1:b9:ac:45:26:a8:b2:f9:7e:a9:82:b7:d5:
                    1f:84:db:95:a7:41:49:9e:2e:52:ef:b8:09:de:bd:
                    3a:1e:95:15:e2:00:81:51:42:13:3c:2f:64:09:ab:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7D:50:61:BC:35:C3:0F:6D:19:C4:7B:8F:A1:4B:77:4A:39:49:88
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:cf:cc:9f:e7:90:e0:19:09:40:10:31:d6:06:62:45:c5:
         44:c0:4c:ae:a0:21:f2:b8:4f:2f:03:31:7d:23:1b:9a:64:48:
         6a:4d:fe:4d:4a:aa:99:26:10:db:ed:3d:53:3a:26:37:27:17:
         1a:b2:60:30:50:0c:b9:60:b3:01:9e:94:02:9e:62:04:53:70:
         aa:17:5c:03:1a:87:84:91:d5:a6:9d:4c:c2:eb:40:1a:4d:ce:
         cf:62:2f:a9:bc:90:19:c3:83:68:2a:1a:16:0d:fe:7f:52:a0:
         72:0c:4d:ef:cb:d2:ef:af:68:02:e9:ce:04:15:e2:d4:1a:6d:
         3a:b1:14:87:62:15:90:03:e9:95:59:58:3e:88:bc:b1:83:7d:
         7c:c0:61:1c:dd:25:0a:a3:50:8e:31:d8:28:ca:2e:ed:09:14:
         b3:2c:b4:63:4a:db:d6:40:69:5d:69:a8:b0:0c:66:2d:06:8d:
         bb:88:c7:26:9c:44:a6:fe:a5:5d:f0:2b:4d:d5:13:63:45:6f:
         0e:8e:c2:22:7e:0f:13:bf:3c:d6:5b:5d:31:7b:c0:75:6b:09:
         0b:db:d5:16:fe:dd:66:da:82:de:24:fa:14:c3:43:2e:97:d4:
         46:6f:a3:38:40:07:59:1e:a7:e1:a1:f0:6f:00:be:81:b9:25:
         ff:51:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:56 2025 by rpki-client