Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File:                     LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier:          oGrPxdL6ti1RmQlic46iWJOEw2VLeb7TS1WZy/moKZ0=
Subject key identifier:   4B:44:54:C5:6A:83:03:3F:5D:49:6C:15:8C:15:7A:62:37:A3:F0:E5
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number:          42
Signing time:             Wed 23 Jul 2025 07:48:47 +0000
Manifest this update:     Wed 23 Jul 2025 07:48:46 +0000
Manifest next update:     Wed 30 Jul 2025 07:48:46 +0000
Files and hashes:         1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: dEkbDMbC8wkp375+BTS7ykHLJiEGD6g3fwltKxXtYb4=)
                          2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: riovgsjK6T9Xk/OVypXbdv81H28kZxqc1J6kqB+epyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 07:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Jul 23 07:48:46 2025 GMT
            Not After : Jul 30 07:48:46 2025 GMT
        Subject: CN=688093de-e9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:20:f9:88:a7:19:bd:c6:06:d9:9d:4d:c3:
                    aa:6d:b9:39:d7:88:78:ae:c9:5f:3a:8f:59:65:18:
                    41:0e:99:40:9c:8b:9e:46:73:77:da:2c:16:79:90:
                    f3:61:47:3b:47:2c:fc:5d:96:88:1f:5e:13:e8:7a:
                    5e:06:36:ff:a9:96:1b:ea:80:39:a4:52:69:72:a1:
                    8f:46:42:c6:3c:b5:f5:2f:64:97:76:29:87:7f:75:
                    4d:a1:27:29:0c:1b:5b:3f:28:de:3f:3b:ff:b2:59:
                    77:a6:5b:e8:a0:75:a6:8c:af:ba:a6:03:1b:84:64:
                    8a:d7:43:c8:e1:33:02:2b:63:ad:0e:6a:17:dd:80:
                    87:16:b1:b7:e6:82:38:c0:4e:78:91:a4:3d:df:14:
                    f1:a8:fd:3c:9d:a1:54:7b:05:47:5c:07:76:48:6e:
                    de:c1:e5:61:fb:7b:3e:59:f8:95:c2:ac:3e:36:4f:
                    c5:50:19:8b:4a:22:ba:b2:51:ed:81:e4:3c:1f:ba:
                    97:d8:cb:1c:be:44:66:f2:35:6e:d6:98:1b:07:14:
                    bc:23:ea:cc:8c:5f:c8:1d:09:05:65:52:96:c0:04:
                    a9:1a:a4:09:4c:4a:b1:11:3d:93:23:56:0b:3d:96:
                    bf:56:28:92:49:5c:f5:2d:63:cf:ed:0c:f9:2c:9a:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:44:54:C5:6A:83:03:3F:5D:49:6C:15:8C:15:7A:62:37:A3:F0:E5
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:59:a6:3b:82:fd:0d:9c:e5:cc:b4:ef:a6:4b:1a:b1:fd:
         ee:61:f8:84:10:c7:bb:fc:b9:cd:8c:49:62:37:5b:a5:30:df:
         15:ab:63:35:15:ee:41:b8:66:24:a9:97:15:c9:ca:3d:a2:37:
         78:4a:c1:39:f6:0e:10:50:78:1f:67:0d:d5:bb:2a:f8:38:9e:
         32:a8:cb:e2:2b:42:7d:e7:31:e6:4c:bf:25:53:30:b9:fd:1a:
         e7:00:92:e2:e0:b8:af:ba:4c:32:f2:6d:6c:f8:aa:61:c6:d4:
         0f:b8:d7:a8:97:28:c8:ef:02:78:38:11:df:54:8d:d4:9c:d1:
         eb:d0:8d:76:4f:bb:c9:58:6d:03:23:28:53:71:63:42:9f:d1:
         a2:f9:ff:62:bc:81:ee:f3:43:61:69:cf:a3:e6:78:93:00:64:
         89:3b:08:b7:30:08:85:e0:b5:9a:15:4b:b3:e0:ec:c3:c0:35:
         57:ea:c7:05:81:fc:9b:40:8c:60:65:45:05:1b:d0:7e:38:66:
         7f:5a:88:74:f4:96:b1:c2:70:1d:67:a8:79:d1:2e:90:81:2c:
         2d:61:2f:b7:32:66:dd:7f:ee:d7:ef:f5:c6:72:16:32:d8:a7:
         1d:2d:03:9c:92:19:64:06:54:4b:06:23:83:9d:ea:34:43:8b:
         0a:bb:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:02:54 2025 by rpki-client