Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          TBqfXHFk23gaAMR1qxBAStAB5GdgkBWXoSxE/h3+6b4=
Subject key identifier:   47:C4:2F:FD:29:1F:2D:75:A8:F0:62:AA:EE:17:D8:A2:B8:18:0E:92
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          EB
Signing time:             Mon 21 Jul 2025 05:32:35 +0000
Manifest this update:     Mon 21 Jul 2025 05:32:34 +0000
Manifest next update:     Mon 28 Jul 2025 05:32:34 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: HmEh5GQzmYQ5VBWrcHSOIv3IEsDbngUBwbVVn8aHcVE=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Jul 21 05:32:34 2025 GMT
            Not After : Jul 28 05:32:34 2025 GMT
        Subject: CN=687dd0f2-bb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:59:6a:c2:ab:e2:32:82:b1:0b:b3:db:3a:
                    e7:ee:81:80:a4:44:51:32:e3:28:21:23:b7:93:29:
                    9a:08:0a:c6:8d:4f:4d:85:01:50:81:46:e4:7d:c1:
                    bf:a9:19:0a:cf:8c:0b:e4:b1:ca:a9:d5:a2:82:0b:
                    0e:42:33:71:ca:a5:cf:28:85:61:7c:cd:02:a3:fa:
                    cb:b0:c5:8b:de:0c:93:e9:a3:76:7d:15:60:f6:d9:
                    09:39:a2:eb:f9:d3:c2:07:b2:23:11:dc:43:3d:61:
                    cc:73:1a:e3:78:08:50:d4:4d:1e:05:a6:fa:61:cf:
                    c3:fa:05:fa:d5:24:d7:50:31:d3:c1:4c:45:bd:53:
                    1b:f4:0e:34:48:b1:57:48:60:c5:ea:83:ab:8c:79:
                    2c:f3:d9:ac:bb:39:b3:44:9b:4d:b2:6a:aa:7c:1f:
                    46:3b:8e:6c:ad:80:a6:c1:8f:49:0d:b9:a5:05:c1:
                    60:55:b4:8e:06:16:f5:a9:86:e8:56:3e:ac:96:61:
                    bd:f1:9b:bf:c2:0d:26:e7:eb:af:17:cc:41:86:6b:
                    8b:8e:da:96:87:e9:b7:b6:18:3d:83:6b:39:03:d7:
                    18:d1:6b:54:76:bd:e9:38:a2:27:d0:a8:0c:00:52:
                    58:2a:35:77:39:2f:86:0d:27:7b:97:c9:a0:e7:72:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:2F:FD:29:1F:2D:75:A8:F0:62:AA:EE:17:D8:A2:B8:18:0E:92
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:5d:c4:4d:04:b6:bc:17:81:0f:f0:5d:76:f9:17:9d:8c:
         c7:ac:94:74:d4:a0:a9:3f:f8:27:a9:ac:da:6e:c0:b7:26:ed:
         0f:4f:04:12:16:6e:a0:f5:08:51:ed:a2:d6:d8:31:76:8a:ed:
         0f:0f:b5:6e:36:1c:7b:50:11:7d:9b:ab:db:fd:2f:c6:f8:09:
         41:9a:e1:67:0b:59:3f:f7:4b:cb:2f:20:3d:eb:f3:57:ca:8f:
         d9:af:58:96:70:c0:d4:8d:7e:68:44:a8:4d:84:db:af:5c:42:
         f6:3b:2d:4e:8a:46:82:e7:36:0b:fd:6b:1f:3a:4b:e3:6b:06:
         82:84:61:3b:c6:1c:e1:2d:c8:7f:0d:a8:a2:b8:40:eb:fd:05:
         da:a2:c1:12:e1:3d:b7:c8:94:4c:20:95:61:f4:30:99:ca:95:
         40:01:a0:72:5f:e2:38:f4:f8:b3:2a:2a:25:39:24:58:8e:cd:
         db:f3:01:aa:0d:e8:34:ee:d0:5d:ff:c4:5b:80:c6:c1:78:f3:
         09:e4:74:69:16:05:82:7a:38:44:aa:cc:22:3f:54:ae:7a:02:
         da:14:f9:6c:41:07:9c:03:69:66:90:8f:39:cf:8d:4d:3a:f0:
         76:be:29:f1:a2:a8:39:d8:8a:48:51:ef:a5:63:1b:c2:3b:ae:
         8f:41:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:01 2025 by rpki-client