Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          cvQ0YVwOhIexKa24Tq825+K4mH9J5Kr/oOPpqDQl0g8=
Subject key identifier:   06:44:41:19:2E:83:F0:41:95:7E:9C:3D:D2:34:AE:92:E5:B5:F7:C6
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          FC
Signing time:             Sat 23 Aug 2025 05:21:06 +0000
Manifest this update:     Sat 23 Aug 2025 05:21:06 +0000
Manifest next update:     Sat 30 Aug 2025 05:21:06 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: XgCsNoAuZzA8aC55y40L/oWe1LVIxK9b6DmMzgyhoaQ=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Aug 23 05:21:06 2025 GMT
            Not After : Aug 30 05:21:06 2025 GMT
        Subject: CN=68a94fc2-2bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ee:31:18:d4:a8:ba:1b:7b:dc:11:62:3c:72:
                    b7:b6:99:e9:f9:62:34:a8:43:89:ef:63:a7:a3:6a:
                    1b:80:e2:4e:9f:8e:74:47:3f:19:e4:b5:d5:2c:0d:
                    a5:42:b4:78:f7:86:48:f1:70:e5:df:a2:d5:60:bb:
                    0a:3d:0e:5e:54:b5:73:bb:15:38:28:34:e6:32:19:
                    6b:96:7e:83:75:dc:2a:8b:aa:81:c7:d2:a6:57:cd:
                    b9:6a:a1:69:de:f6:c2:2f:5c:e5:92:b9:ee:98:db:
                    02:7d:19:71:39:36:42:5a:68:86:d2:66:d2:e7:1d:
                    45:fc:df:d5:04:cc:aa:6c:04:7a:07:54:9e:f7:8f:
                    c1:f7:ee:f6:9e:b2:10:10:eb:fc:38:80:11:14:d8:
                    cc:7b:cf:a7:ff:9b:dc:ba:4e:50:54:f7:ea:cc:f1:
                    10:f7:4b:e8:c5:ee:ed:9c:78:1d:71:99:7d:68:00:
                    03:c0:7b:92:78:b8:c1:ff:fa:27:5a:bf:bc:20:08:
                    03:a7:8c:1c:c6:fc:3f:66:9b:c7:c7:b3:44:f1:25:
                    80:c1:cb:02:34:ad:6e:9c:3d:d8:8b:5e:54:db:dc:
                    2d:7c:1e:5e:ee:b0:1c:05:11:aa:08:73:19:21:a3:
                    1e:2e:fc:94:99:c3:4a:c7:b7:19:12:14:e1:a6:65:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:41:19:2E:83:F0:41:95:7E:9C:3D:D2:34:AE:92:E5:B5:F7:C6
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:44:89:58:a7:0a:21:72:d4:6c:96:61:38:fa:c2:de:70:28:
         9f:2e:ce:0f:63:6b:81:d5:98:88:3a:27:4a:8c:f5:85:5f:32:
         fd:de:58:2b:24:17:1f:13:0a:95:9b:f8:5f:c7:dd:ec:94:36:
         72:fe:b1:99:b0:49:f7:e7:c0:5c:e3:a3:17:ff:75:8c:23:a8:
         c1:a8:15:d0:7c:67:c6:28:7c:d6:34:76:bf:43:1c:cc:5d:7e:
         7d:73:4c:16:ed:49:f9:41:95:68:37:2b:06:4d:e1:8b:9d:97:
         4e:9f:7e:eb:61:fe:ba:d5:3f:ec:a5:95:06:15:ac:50:37:6c:
         e9:66:64:48:38:df:38:3a:89:fc:1a:24:a7:13:aa:fa:26:80:
         96:b7:a5:db:7c:ac:3a:50:5e:cf:71:e8:42:f4:73:f0:7c:e0:
         c3:fb:74:4f:c5:ce:61:d0:7a:94:be:9f:17:da:04:ad:4e:12:
         fc:31:1a:0a:13:61:0b:df:17:a3:49:64:9f:3f:90:20:bd:9c:
         e7:3e:31:7e:f3:74:18:05:31:2e:7b:e3:2f:9a:77:d0:83:82:
         b5:f8:cf:a4:17:c2:4e:23:f9:42:09:0e:68:c4:ab:19:e9:21:
         b9:b1:50:fc:22:9e:8b:2d:ed:7a:62:34:1d:7a:58:f1:39:b8:
         24:b9:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:33:25 2025 by rpki-client