Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          BvJY8Ny2knggzeYta2kCNs9z3hhKF28nc9DSoQ/JN5U=
Subject key identifier:   B4:8D:2E:CF:B9:DC:8D:DE:3C:CF:DB:F2:03:EA:06:CD:D4:3D:AE:29
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          01B1
Signing time:             Sun 19 Oct 2025 05:39:53 +0000
Manifest this update:     Sun 19 Oct 2025 05:39:53 +0000
Manifest next update:     Sun 26 Oct 2025 05:39:53 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: Y4bn7XGVZ0tPwFc81A75RjMMuH236PwbKUqTGrydxZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Oct 19 05:39:53 2025 GMT
            Not After : Oct 26 05:39:53 2025 GMT
        Subject: CN=68f479a9-5626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:20:44:b0:9d:1f:0d:c9:fb:45:36:5e:cb:
                    97:11:fa:af:e2:fe:d9:91:58:9d:0b:37:ad:7b:7a:
                    3e:81:e5:bf:93:2f:3c:51:af:74:b1:43:b9:b2:c0:
                    3b:d1:4c:be:63:a4:e1:90:14:df:c6:49:15:07:89:
                    6f:1d:75:38:95:4d:6c:0c:9c:f2:f3:b1:f6:33:70:
                    9a:44:71:f3:b5:9d:3c:4a:40:09:f3:29:f9:17:4c:
                    c7:26:ad:6f:14:11:9e:de:bd:92:e0:0f:fc:ee:c3:
                    b2:81:bc:3e:6e:ca:23:67:fb:5f:59:44:a4:1d:37:
                    6a:8d:12:08:24:07:90:81:60:09:9e:67:6c:69:13:
                    17:e0:03:53:f8:6a:ca:a6:87:cf:bc:00:58:84:28:
                    b8:72:e0:5b:4a:af:f0:73:b2:00:11:20:01:fb:a5:
                    bc:62:97:5d:f6:9e:af:66:ad:1f:e5:39:3c:0f:d9:
                    7a:4b:ee:2e:61:2c:f5:8a:16:47:cd:a1:49:54:46:
                    ca:c4:29:e6:1f:dc:25:ef:f1:3c:1c:2d:b3:73:50:
                    b3:35:c4:f1:7b:f6:7b:c2:5b:3e:57:45:21:de:55:
                    1b:e2:05:a8:60:20:b6:b2:57:9e:58:b9:7b:08:dd:
                    eb:80:96:d7:a2:81:7b:f3:cf:d8:13:60:79:59:42:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:2E:CF:B9:DC:8D:DE:3C:CF:DB:F2:03:EA:06:CD:D4:3D:AE:29
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:26:83:ea:50:9d:77:5f:c3:68:60:28:18:8b:88:12:6d:08:
         c5:f0:56:d7:bc:f1:87:7d:d0:4a:1f:f3:54:d0:54:57:19:cb:
         5f:80:75:53:52:2a:36:16:8d:ef:81:25:72:ae:4d:69:47:b1:
         f2:6e:61:dc:b5:c1:be:a4:1e:14:72:0f:50:2d:a8:04:50:b3:
         cf:cb:f6:84:19:99:e7:e4:22:09:ca:1c:e3:cd:00:33:f7:e7:
         78:01:2c:28:b4:43:b8:9a:b7:39:ab:8f:22:c3:33:46:8a:ca:
         a7:4d:ab:05:93:13:b2:da:96:6f:8d:5f:a0:e1:f6:c0:cc:d5:
         d2:d7:ed:10:a6:dd:05:f7:6e:56:6b:70:d0:3e:11:8d:b8:2d:
         ee:5a:75:5d:55:65:19:ce:b3:0e:1e:34:33:08:3b:0f:6e:2c:
         59:17:78:8d:35:3f:90:e5:c0:50:6a:c0:79:7c:87:df:d3:cf:
         3a:ac:6a:b0:3c:bf:3b:0f:a4:03:98:72:80:9d:09:3f:e5:cc:
         06:c4:d6:03:80:32:8d:3b:b9:95:91:c8:48:83:9b:bc:78:6b:
         c6:3a:a1:3a:48:6f:2a:9e:2c:27:17:7e:3d:e1:48:9a:3e:b8:
         b2:aa:1e:1c:cc:db:4a:c4:10:56:b2:3a:37:2f:e3:5d:28:4e:
         2f:cb:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:08 2025 by rpki-client