Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
File:                     LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json)
Hash identifier:          bP76UoyC3GJKfKGJIO50CN7PeA/+shaFOcAjV3JZg2o=
Subject key identifier:   97:37:34:C6:09:CC:21:3A:1C:FC:A5:FB:6B:2E:5F:3A:78:CA:87:E4
Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37
Certificate issuer:       /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937
Certificate serial:       07F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
Manifest number:          07EE
Signing time:             Sat 18 Oct 2025 22:17:22 +0000
Manifest this update:     Sat 18 Oct 2025 22:17:21 +0000
Manifest next update:     Sat 25 Oct 2025 22:17:21 +0000
Files and hashes:         1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: zD2JrzYdls15TUtMF8f46P2QgToHe6LIMbZ6BOk3foA=)
                          2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937
        Validity
            Not Before: Oct 18 22:17:21 2025 GMT
            Not After : Oct 25 22:17:21 2025 GMT
        Subject: CN=68f411f2-4d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:1e:a1:71:f7:e8:62:58:76:ec:14:9a:5d:
                    72:fd:55:d2:c9:05:6a:db:c5:f5:c9:05:67:c7:c1:
                    32:a3:31:09:d5:4a:ec:ce:b5:07:3b:64:f6:d4:13:
                    1d:7e:cd:f6:2f:9e:66:72:89:ef:47:8d:3f:b3:20:
                    47:cf:90:ae:fb:35:b4:34:50:f0:54:6a:da:e9:66:
                    7e:a3:05:15:eb:90:33:d3:62:5a:bd:26:73:bf:80:
                    6a:67:1a:0d:8c:86:68:6e:0e:01:53:bb:4b:85:7f:
                    99:f4:1c:47:15:40:6e:a1:65:28:08:fa:37:31:9d:
                    17:0e:9e:07:2f:e5:70:29:46:f4:b9:81:77:5f:cc:
                    3b:c3:8f:bb:f4:1c:e7:00:c2:2e:52:5e:c4:86:82:
                    7a:e2:32:99:dd:90:8b:da:7a:f6:4a:7a:71:58:81:
                    28:05:73:d4:0c:32:a7:56:ee:fd:5b:9f:43:fa:c2:
                    cf:1c:82:7a:f2:c1:c5:f2:ef:37:5b:0c:ba:83:5f:
                    5c:46:a3:7d:16:01:5a:f0:b8:3d:b7:b7:2f:66:b2:
                    03:ef:b5:d5:a7:5d:e3:6d:56:82:fd:9e:60:a4:dd:
                    02:77:a6:c0:b1:e2:13:d7:79:eb:c2:63:bd:83:a6:
                    8f:9a:35:d3:6d:8d:95:6a:76:26:39:78:1a:87:50:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:34:C6:09:CC:21:3A:1C:FC:A5:FB:6B:2E:5F:3A:78:CA:87:E4
            X509v3 Authority Key Identifier:
                keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:34:8c:98:04:82:e3:05:6e:c7:9d:cf:05:4c:04:38:78:
         36:21:e5:fd:a3:d2:10:3c:1f:eb:b4:12:96:bd:06:2b:b4:dc:
         c2:cc:aa:ec:fb:98:ce:64:0e:d9:bf:2e:a5:0e:3d:ce:d0:09:
         13:05:03:cd:52:c8:bd:03:27:6d:b2:d1:98:f8:ae:b5:81:cc:
         f5:72:87:97:b8:31:87:ed:14:76:b8:ca:a1:94:fa:dd:06:7e:
         f6:e0:6f:9d:bc:eb:3a:c4:68:9a:66:98:4c:15:39:42:e9:71:
         77:90:60:cb:36:b9:8e:2b:bd:4a:a7:cc:f2:6b:ad:ae:ce:50:
         53:f3:7f:d8:60:f5:29:08:6b:5c:e6:47:4d:35:e2:16:e6:5b:
         07:78:20:33:55:0a:78:4f:13:bc:dc:75:f1:2d:89:47:23:28:
         29:17:bc:68:a8:43:9d:63:a2:41:92:5a:51:e8:c1:42:56:27:
         78:2b:5d:56:8a:19:73:95:06:c1:74:a4:5a:f8:1a:b6:cb:3b:
         da:7a:b0:a0:f4:5a:5b:a7:38:ad:93:65:3a:e9:15:65:d1:37:
         d1:42:d7:f1:ad:7a:1f:1f:96:6c:a5:a2:70:44:07:95:c8:30:
         13:a1:68:88:ec:ec:69:df:c6:b3:2e:cd:65:f7:dc:fc:3b:ef:
         c1:c4:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:56 2025 by rpki-client