Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File:                     PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier:          fRKBsRrNK4tfOfzWIN8L0zMXjj6XzexGGIeovkIXnPo=
Subject key identifier:   6B:1B:E7:E3:42:C6:C9:81:C6:8F:00:63:69:A2:00:36:97:B9:C6:BB
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number:          48
Signing time:             Mon 21 Jul 2025 07:44:19 +0000
Manifest this update:     Mon 21 Jul 2025 07:44:19 +0000
Manifest next update:     Mon 28 Jul 2025 07:44:19 +0000
Files and hashes:         1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: roIrSQroVFVIkkGyOeyzCkYO3xF+299ACII5nVYsoys=)
                          2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=)
                          3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=)
                          4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Jul 21 07:44:19 2025 GMT
            Not After : Jul 28 07:44:19 2025 GMT
        Subject: CN=687defd3-d4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:eb:85:9e:6e:dd:e5:14:8e:8f:88:64:6c:
                    29:69:57:03:8e:2e:70:eb:7b:f4:49:ca:0f:ce:33:
                    0c:b8:12:18:39:9b:57:06:90:0b:41:40:39:fa:05:
                    bb:d7:70:37:7b:b0:7a:09:b6:f6:e3:7d:c4:6c:66:
                    ea:cc:48:35:e5:e0:c7:6a:aa:c8:02:bf:82:4d:9d:
                    4b:8e:48:81:f7:bc:8f:bc:b6:ae:26:04:c9:64:d7:
                    ea:e4:cf:1e:4f:02:a2:54:74:94:fe:f4:8e:8a:13:
                    74:99:6c:1e:11:06:94:56:62:85:12:78:a1:3b:e6:
                    90:46:16:6b:79:1a:71:4a:2a:60:9b:58:dc:be:12:
                    dc:f0:42:7c:c7:11:d7:2d:45:7f:bb:4d:a1:08:00:
                    b3:eb:2e:33:8a:78:35:a0:49:13:c2:e9:16:7f:99:
                    d0:ab:23:20:6f:ea:b9:da:99:1b:2c:c4:15:8f:d4:
                    69:88:aa:de:0a:fd:b3:d2:dd:7c:55:ca:a1:36:1c:
                    e3:c5:e7:1d:fd:54:e1:ab:46:7b:01:b3:10:3e:09:
                    82:29:97:1b:98:f4:01:da:54:3e:24:d6:a5:d6:a2:
                    be:54:67:88:68:c9:ac:90:9f:c9:52:18:23:d9:46:
                    98:11:94:6d:57:a7:5c:83:ee:bb:03:7e:70:c6:37:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:E7:E3:42:C6:C9:81:C6:8F:00:63:69:A2:00:36:97:B9:C6:BB
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:02:cb:0d:69:ea:4d:2b:c0:55:99:4c:2a:38:d7:5e:ba:60:
         98:94:79:f9:08:e5:f1:a0:f5:2d:b1:db:b2:8f:e7:e6:30:cc:
         92:c9:7b:97:e9:26:b9:77:f5:76:1b:fd:5c:85:1c:35:b8:42:
         63:cc:f2:e4:38:8a:ae:2c:f2:6a:d0:b6:0c:78:a2:ec:8f:d0:
         d8:17:87:34:c1:6a:14:2e:57:f8:92:6b:4b:00:17:f7:6c:e4:
         2b:7f:e1:78:19:78:2f:11:1a:96:1f:03:64:a6:f7:a8:e3:df:
         88:ec:05:7d:7e:78:3b:2e:20:16:84:9c:02:97:ea:e5:4c:7a:
         ea:7d:85:78:3a:bd:69:42:a5:69:7d:6e:a6:b6:29:07:1f:1b:
         e3:59:6b:36:84:a7:d0:e6:b8:6a:ef:fd:1b:7d:ae:96:3a:ef:
         1a:7e:63:11:79:b3:2a:ac:7e:5f:57:a7:8e:a0:03:02:84:50:
         59:9e:aa:07:55:3d:58:47:71:e0:6f:ef:80:83:76:11:f6:66:
         d4:f2:de:a7:b4:95:c1:54:fb:f7:9b:10:12:8f:14:9d:b7:34:
         dd:58:37:c2:f0:4d:65:9c:71:15:36:fd:0c:11:e5:79:85:5a:
         32:9a:d4:97:6a:32:1c:07:0c:0b:76:05:d8:ba:16:e3:63:21:
         3d:17:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:09:25 2025 by rpki-client