Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
File:                     limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json)
Hash identifier:          SJtJ6Ad1x2bXqHuExmlOt2QXPC/eBYfWMg+eotoP9MQ=
Subject key identifier:   7C:99:DC:59:73:76:B7:4A:3B:D7:F8:EF:01:1B:DC:CF:BF:02:D3:E3
Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
Certificate issuer:       /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
Certificate serial:       0C7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
Manifest number:          0C76
Signing time:             Sat 18 Oct 2025 19:12:35 +0000
Manifest this update:     Sat 18 Oct 2025 19:12:34 +0000
Manifest next update:     Sat 25 Oct 2025 19:12:34 +0000
Files and hashes:         1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: lu5gzCJx5IiPjrlwTFwppxKaRykziyjqOBQ0pN4Jcqo=)
                          2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3199 (0xc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
        Validity
            Not Before: Oct 18 19:12:34 2025 GMT
            Not After : Oct 25 19:12:34 2025 GMT
        Subject: CN=68f3e6a3-1be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:b2:9e:dd:d9:a0:3a:2c:eb:7b:e0:3c:13:
                    ef:ae:31:b8:16:ab:48:e8:3c:11:a1:92:8e:04:15:
                    fa:47:d8:bc:20:3b:44:00:ce:ab:0c:f9:d6:4c:84:
                    b2:d3:51:fd:1b:8d:91:e0:fe:7a:e7:7c:e6:8b:ef:
                    7d:03:a6:04:3a:fc:8b:b6:f5:eb:96:c7:50:45:61:
                    70:76:bc:48:68:5c:7f:99:b5:eb:3a:06:6a:a4:c0:
                    0f:7e:fc:b0:5f:95:c7:3a:7f:1d:54:40:35:01:7c:
                    70:41:66:de:7f:f8:f6:3c:41:4a:9f:5b:98:3a:84:
                    06:ce:0a:1d:2c:53:a2:1b:ef:b8:d8:52:2c:96:46:
                    4b:42:35:d7:29:a2:98:06:aa:10:9d:da:ac:3b:5d:
                    d7:18:39:b7:a6:89:a9:87:08:88:dc:74:76:a4:f4:
                    48:ba:99:68:e6:ce:1f:37:2e:8b:71:ce:44:f0:e1:
                    8a:7d:fb:63:d6:fb:73:4f:c5:af:73:e1:12:e2:8d:
                    e9:f3:4a:37:b4:78:c5:8a:9c:78:d4:76:fe:29:62:
                    a2:f6:9f:e3:15:f8:30:d4:d8:a4:a2:e3:cd:4a:34:
                    59:a7:24:38:3b:ec:ed:c3:11:37:19:17:98:94:d8:
                    6f:42:14:f4:72:30:56:82:ba:85:a0:b2:10:d7:04:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:DC:59:73:76:B7:4A:3B:D7:F8:EF:01:1B:DC:CF:BF:02:D3:E3
            X509v3 Authority Key Identifier:
                keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:97:c9:10:19:57:ed:1e:32:1f:c3:bc:3b:72:fc:59:9b:af:
         ca:6d:8b:33:5a:92:e6:6b:a6:c2:f2:c1:c2:4a:e7:1b:72:eb:
         be:07:8f:c4:45:a6:d3:ea:e9:f0:45:ef:da:ff:ac:30:c4:26:
         da:e8:ff:d9:16:b9:0d:4f:d5:3b:e5:47:18:cc:fd:6d:b5:fb:
         c3:8f:32:5e:b1:05:24:f2:c7:d3:09:92:87:23:00:a6:7c:30:
         bc:15:b5:46:48:a6:7e:ee:10:7f:11:69:55:07:79:2e:ae:04:
         6f:0f:11:4e:5b:d5:be:7b:0d:31:f2:55:c3:6a:e7:d0:62:42:
         da:19:bd:6b:31:e4:71:2c:9f:9e:c2:f7:a0:e1:9e:0b:6c:fe:
         b1:35:8f:23:fa:b1:a2:ca:86:71:23:03:09:6a:51:39:06:d5:
         42:1b:ee:2e:32:e7:41:61:8a:5a:28:b8:41:24:1b:64:fb:7d:
         5c:60:7b:31:df:cf:98:37:d0:24:d9:e3:3f:f1:91:52:70:0f:
         80:63:68:7f:b8:ec:a9:1d:04:27:e6:95:90:d2:90:0f:c4:4f:
         78:d9:5e:b2:bb:3d:a1:dc:0d:f1:62:e9:2c:a2:23:51:23:5a:
         0b:a1:09:64:cc:6b:42:33:bc:cd:95:6f:f9:38:ab:1b:7e:01:
         a4:93:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:32 2025 by rpki-client