Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          692Yces0tbZCJODJyvJMxpB19TJZVxkFCYyjU6vhZq0=
Subject key identifier:   8D:E2:76:7C:1B:54:B9:B2:CC:33:B7:D4:A8:C3:E3:72:98:AB:57:57
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       0536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          0519
Signing time:             Sat 19 Jul 2025 00:00:59 +0000
Manifest this update:     Sat 19 Jul 2025 00:00:58 +0000
Manifest next update:     Sat 26 Jul 2025 00:00:58 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: ubTOskWJzp3hByxRKe5uvQBxWtrDQFE2BbEAp8ZQ0rs=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Jul 19 00:00:58 2025 GMT
            Not After : Jul 26 00:00:58 2025 GMT
        Subject: CN=687ae03a-9abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:0f:bb:ab:fb:6e:54:b2:06:d4:58:04:70:
                    e1:fc:6d:f7:bc:8b:d7:62:70:c8:28:b8:44:fe:54:
                    61:42:1b:02:46:c9:15:d5:ff:2b:ae:86:d9:a7:20:
                    ef:98:5c:fb:2d:8c:d8:43:de:40:ad:a5:4f:e5:b7:
                    a2:a0:5c:19:47:b7:57:e8:2a:33:89:8e:0f:bb:7b:
                    81:8e:d1:b3:36:1e:8a:f6:83:ac:78:76:73:1e:cd:
                    81:b3:b9:78:35:eb:24:98:a8:bb:0f:30:85:c5:65:
                    6e:c3:a4:5e:0e:f9:58:c4:b5:4f:9e:62:a9:78:a5:
                    29:4d:47:ee:bb:03:d4:01:51:50:bb:da:e7:e2:e0:
                    f8:c1:8c:17:fa:07:a6:2a:2f:98:2d:5b:23:48:c5:
                    18:04:3b:dd:26:3c:0b:87:3f:06:ca:9a:53:91:a8:
                    a4:4e:3a:a3:14:38:fe:35:18:40:72:29:a9:00:38:
                    de:7b:ff:ae:2b:9c:7d:d1:48:f8:ec:f6:9e:24:f3:
                    e3:76:b6:fe:61:64:0e:7e:0a:9c:bd:38:e0:23:67:
                    b1:33:29:5e:b4:da:8c:3a:79:19:f9:33:f4:df:a7:
                    e5:34:23:8e:bc:82:14:51:25:c7:73:89:b3:7b:e8:
                    94:10:7e:fb:bf:c5:87:3f:28:ac:17:56:50:32:34:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E2:76:7C:1B:54:B9:B2:CC:33:B7:D4:A8:C3:E3:72:98:AB:57:57
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:43:80:1c:69:78:41:16:5a:c8:12:4d:0e:58:c5:75:36:ba:
         71:ce:94:07:c7:5e:de:82:26:3b:35:5c:f8:1a:28:8f:b1:87:
         f0:42:51:c8:67:18:ed:07:80:ec:2c:cc:64:4e:d0:5a:8c:e0:
         af:37:47:8d:51:b2:a2:aa:6b:0b:cc:98:8c:21:f3:26:49:7f:
         49:53:14:e5:d6:46:30:52:89:40:42:d6:bf:bd:cd:c7:a2:d1:
         8d:f0:df:d3:e9:18:42:83:01:e4:df:b6:85:07:86:04:16:d0:
         84:68:a0:e7:12:bb:25:0c:8e:1f:99:45:41:bb:08:ee:b1:b3:
         fb:66:e0:2b:b7:75:cc:b5:cb:b7:2f:e3:a6:63:23:be:c7:7e:
         6c:3b:6b:a8:68:18:36:a9:84:a5:d6:dc:90:ef:9a:a1:66:3a:
         c0:91:9a:f2:ea:16:e2:a8:2e:dd:9c:84:33:4c:81:4f:ff:87:
         e3:97:af:89:bb:83:b3:f2:da:5f:92:5f:d5:db:f0:a6:fe:c9:
         4f:30:a1:30:e3:78:dc:78:81:df:f1:ec:72:3b:b3:95:2f:fc:
         78:1e:c6:08:f5:66:2d:dd:98:6e:cd:b8:ab:9d:f6:e6:1d:b4:
         8d:6a:69:7a:f4:7e:96:de:80:e6:42:35:90:27:8d:2f:15:c7:
         ac:a1:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:31:17 2025 by rpki-client