Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          gEEieF6z3ChHfmbTdH7YedtD6DMiJcDeMxN6eZIsplg=
Subject key identifier:   4F:7F:04:55:5E:F5:72:C3:32:DA:01:B9:FD:14:A1:CB:52:A4:42:F6
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          EC
Signing time:             Wed 23 Jul 2025 05:40:53 +0000
Manifest this update:     Wed 23 Jul 2025 05:40:53 +0000
Manifest next update:     Wed 30 Jul 2025 05:40:53 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: dFjupv/aKk+ZRTSPOIfW2BGO+anDHUhM1lY755jlOxs=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Jul 23 05:40:53 2025 GMT
            Not After : Jul 30 05:40:53 2025 GMT
        Subject: CN=688075e5-2fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:1c:8c:cd:49:b7:62:66:fd:c5:61:48:05:
                    d1:d8:ed:66:79:5e:f6:05:22:7a:8a:cb:94:df:e1:
                    1c:7a:53:16:b5:15:f1:80:89:e6:f8:46:8f:97:94:
                    5b:4f:88:0f:04:0e:b3:56:db:8a:4b:a0:bf:1f:d6:
                    80:6c:f6:ae:47:de:2b:5f:25:2e:92:c9:f8:70:14:
                    cc:34:20:f8:bd:7b:3c:54:c4:20:a6:30:af:93:f0:
                    00:b5:cb:df:83:c4:5a:a5:53:8f:03:d7:f2:36:83:
                    f3:26:38:71:92:22:89:98:87:19:31:10:41:57:d9:
                    eb:df:45:e0:e5:23:11:94:61:b0:76:09:86:70:a8:
                    02:e8:a9:9a:7e:35:84:e5:f0:ee:61:c3:28:01:fd:
                    7c:e0:22:a2:ee:0e:e0:9d:ad:a9:f2:cc:be:63:c3:
                    22:0f:09:52:58:98:d8:bc:8d:52:c3:a5:8f:c0:a1:
                    54:f1:9b:b5:4d:b8:44:14:cc:4b:df:de:3d:09:73:
                    f1:27:b1:e9:6a:46:47:d4:5b:ac:01:1e:b0:af:3a:
                    0d:da:43:6e:67:67:84:7e:b7:bc:77:6e:93:c7:b0:
                    41:f6:d5:78:ee:ed:db:26:bf:cc:5a:d4:19:1c:a6:
                    58:c5:41:13:b6:a6:84:9a:73:53:a8:5b:11:0a:c7:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7F:04:55:5E:F5:72:C3:32:DA:01:B9:FD:14:A1:CB:52:A4:42:F6
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:5d:ef:a8:ad:59:e3:f2:bf:21:5f:24:b8:e3:78:09:73:
         df:4f:7c:22:a7:6b:60:a3:0f:0b:40:31:7f:f6:84:9c:38:0d:
         05:b7:4f:ba:78:82:06:dd:3e:01:c2:e9:de:5f:ff:56:9e:b3:
         f1:c0:6d:6b:e0:38:1f:a7:1a:28:03:c3:2c:08:af:63:b1:45:
         07:37:4a:42:32:e3:1e:f6:71:13:7a:d1:00:73:15:c1:2f:73:
         41:d9:e8:eb:72:2a:ad:45:d1:05:98:fd:a8:79:b1:93:d5:71:
         69:eb:1f:b7:2e:4d:f3:83:c1:80:27:83:98:a2:7e:a9:96:89:
         78:86:73:68:9c:07:e0:20:b4:8b:3a:3a:50:b0:ad:48:d0:b4:
         19:f3:52:6a:79:ef:5d:48:bf:2c:2b:1b:35:a3:0b:1a:be:77:
         37:3d:69:36:2e:d8:07:b1:d8:ee:0b:d1:67:ab:87:60:94:21:
         da:08:a7:47:cb:90:f9:23:4c:6f:ce:25:8a:68:35:3f:b2:8d:
         05:37:ef:c7:e7:8b:ea:5b:39:2a:90:eb:ba:6c:db:c8:ef:bf:
         9f:e1:52:29:8d:62:75:4f:26:5d:b3:3b:cf:7a:56:3e:02:4a:
         8e:1c:b3:ef:52:2f:ef:f9:e8:73:1b:18:60:d7:5b:e8:4f:98:
         3a:ec:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:06:22 2025 by rpki-client