Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          cVz0cuZnn8jOFV459x5I7Mw8jdiaIBHW7I7gDRAeyAs=
Subject key identifier:   13:54:CB:7D:E9:A2:DD:91:77:0E:AD:62:AA:C5:24:20:98:2C:AB:5C
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          01F8
Signing time:             Sun 19 Oct 2025 04:54:11 +0000
Manifest this update:     Sun 19 Oct 2025 04:54:11 +0000
Manifest next update:     Sun 26 Oct 2025 04:54:11 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: OY03hNNk0JEOECGCyw89gi10F5dWDs8w+NQ8f/iZUWI=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: w5eiVbjwCl7FcDiQB51RhcBa3fhBXTl0kBsUFzWTzow=)
                          4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: YzxhkuTIla90nMxllMuAPcH6Qo+CPshpVYgjHxiUelw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Oct 19 04:54:11 2025 GMT
            Not After : Oct 26 04:54:11 2025 GMT
        Subject: CN=68f46ef3-6338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:85:8b:bd:be:3c:3e:2d:7a:68:0f:f7:55:ac:
                    5f:37:46:6f:6f:e8:34:38:d0:8d:c7:4f:38:6c:cd:
                    5c:3c:cd:4f:bb:58:70:93:ce:a3:6f:62:2d:3e:22:
                    da:50:12:39:37:f6:ec:cb:66:3f:d3:e0:1e:9d:c1:
                    3f:12:6d:eb:f7:b7:56:e3:02:44:5b:7a:ca:61:60:
                    23:62:48:f4:bf:60:b0:53:2a:a2:74:e2:d2:c0:12:
                    6d:b3:59:99:82:da:06:f5:f3:f3:88:ec:94:ce:24:
                    7b:cb:b9:0d:05:64:89:77:29:db:c6:cf:ab:ff:21:
                    a4:af:9a:c7:a0:0d:d1:3f:fb:f9:9e:a1:18:70:46:
                    0c:be:64:7a:de:08:9a:6a:6f:62:de:c1:e3:6c:9e:
                    c7:cd:b2:62:f3:3b:3e:51:2a:70:2e:1c:f1:b1:0d:
                    cd:bf:c6:45:80:52:b8:3f:4c:63:21:bd:96:e8:5f:
                    a0:4c:89:66:9b:70:71:30:f1:b8:ad:72:bc:b0:09:
                    4e:08:69:50:d1:7b:88:85:7d:76:d3:8a:0c:22:3c:
                    78:88:d3:80:91:73:1e:f1:3b:2d:5f:ad:07:72:aa:
                    ae:e5:a4:82:e4:93:92:a8:db:3f:0c:88:8e:ba:cb:
                    9e:f9:80:3d:65:bd:09:5e:98:ba:d3:27:35:6e:50:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:54:CB:7D:E9:A2:DD:91:77:0E:AD:62:AA:C5:24:20:98:2C:AB:5C
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:61:04:7c:13:52:6b:0f:e5:c6:3f:c3:4f:0a:84:44:c0:
         51:33:13:4b:14:78:34:38:7b:e3:87:bc:b9:06:51:44:4d:54:
         6a:e0:85:a0:2f:92:05:60:2d:32:df:82:33:09:29:7d:b3:7a:
         f5:fd:9d:6b:a2:cd:2b:b6:1e:9b:81:3d:2c:0d:0d:02:d6:20:
         32:a5:f4:9d:16:48:f7:7a:6b:8a:93:e6:72:17:e7:48:8a:d5:
         91:c4:e7:02:8e:06:ec:6d:bc:fc:c6:2d:13:3e:8f:6a:df:4f:
         a5:a9:65:83:72:41:74:64:b6:c7:53:c6:6c:1b:d4:67:be:d5:
         83:2e:48:6d:81:c7:57:40:91:d3:44:66:25:88:20:e5:23:ed:
         d7:be:4b:c2:d3:17:45:a6:c0:71:0a:4b:4a:b6:c9:e4:73:28:
         c6:9e:92:06:64:e0:37:97:c5:d0:f5:50:e9:88:d6:d1:dc:4e:
         42:cf:dd:42:3f:30:06:e8:36:3d:1f:4b:b2:de:ea:32:99:43:
         50:3f:0f:22:8d:5b:14:4e:61:d3:c9:9a:29:78:eb:43:cd:35:
         10:d8:80:00:04:e7:8e:a9:a9:1f:1c:14:4c:1c:54:68:2b:d4:
         02:99:a1:77:4c:fb:49:12:05:1d:f6:43:53:c1:19:30:76:97:
         dc:13:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:39 2025 by rpki-client