Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File:                     LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier:          MgeCrXLMkMx795E/pyT01FgZwRihf0xHm5bZcUy675c=
Subject key identifier:   C8:12:59:68:36:DF:E1:D2:57:0A:88:09:25:1B:39:A0:96:AA:EA:47
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer:       /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number:          01A3
Signing time:             Mon 03 Nov 2025 03:16:01 +0000
Manifest this update:     Mon 03 Nov 2025 03:16:00 +0000
Manifest next update:     Mon 10 Nov 2025 03:16:00 +0000
Files and hashes:         1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: Y5ju93DhpWWcuW2Ifb96cHjQZX0E0iYnAxZxTl4QZDs=)
                          2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: 8zqEQWI1w6Acg0Y6GNe0A6jcmkOuB5o9vI1Cd2RhRsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
                          rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
        Validity
            Not Before: Nov  3 03:16:00 2025 GMT
            Not After : Nov 10 03:16:00 2025 GMT
        Subject: CN=69081e71-341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:f1:3f:fd:20:12:8b:3c:64:ca:2b:5b:9d:
                    6b:ac:5c:8b:ad:4e:7c:af:fd:c8:e1:36:36:19:47:
                    ec:86:69:a1:9b:96:5f:f3:ee:23:cc:c2:40:aa:3a:
                    1e:5a:e3:e2:81:a8:05:49:c0:e2:1f:f7:7b:7b:3e:
                    24:18:92:e8:00:e9:29:70:ed:16:c5:eb:3c:b3:0c:
                    ab:15:37:67:46:05:17:5e:f7:2c:03:79:5c:ca:35:
                    7a:ad:6e:90:4c:d1:44:98:9d:7d:85:32:17:1b:ec:
                    10:03:34:25:b5:eb:13:e2:a9:45:0d:db:16:4e:0b:
                    ac:58:8e:15:3f:5b:da:b9:f1:06:30:41:12:57:fc:
                    7a:90:26:00:a2:cb:8e:67:7f:11:f8:c1:a2:c1:ff:
                    9d:ec:d8:38:22:52:42:02:b7:f8:93:23:82:e2:b9:
                    78:df:1e:74:1b:1b:cf:ff:52:d1:60:b3:87:b8:f7:
                    5f:f3:86:45:02:1e:6e:e0:83:58:e1:7c:f5:45:70:
                    91:ff:68:2c:cf:1d:4b:11:f1:01:06:91:51:74:52:
                    bd:e1:09:6b:a5:6b:ae:72:87:a6:b2:e4:f6:07:a3:
                    a7:a9:93:eb:26:07:7a:a3:b0:a3:f7:38:7b:b9:72:
                    e7:7f:3e:e5:52:2f:f9:e5:3e:0e:25:9d:e7:60:98:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:59:68:36:DF:E1:D2:57:0A:88:09:25:1B:39:A0:96:AA:EA:47
            X509v3 Authority Key Identifier:
                keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:7f:52:2d:25:71:86:2d:0e:3b:1e:22:a0:75:7d:1b:69:
         81:b0:09:ab:1f:12:fd:7b:24:87:62:70:ec:e4:2b:0b:f1:e6:
         4b:9e:5a:dc:10:d9:8e:0a:b2:34:89:17:c4:04:88:0b:d0:fe:
         e6:6a:20:64:08:b4:74:1c:73:80:da:de:5b:59:73:ea:f0:c7:
         51:e7:99:9f:fd:77:d2:80:d6:18:0d:8c:90:03:4d:08:44:b7:
         6c:b9:36:1f:2c:30:b6:92:9a:40:cc:cf:aa:26:03:4c:f8:ff:
         91:81:51:9e:6a:22:30:ec:2b:52:bd:e6:70:74:d2:78:74:99:
         17:50:17:fe:47:1a:c6:04:af:fc:22:5a:44:cb:87:70:d1:f1:
         67:4a:0c:92:66:18:bd:de:69:16:75:cc:02:a8:b6:cf:5a:ec:
         4b:11:1b:c8:44:be:4c:a3:65:94:27:c7:5b:37:e6:3a:f4:62:
         11:84:83:aa:60:75:22:17:3b:be:fa:5d:48:a4:03:86:f2:bc:
         59:21:8d:58:51:7d:e8:27:f3:51:41:47:c9:11:79:49:ea:6c:
         85:e6:74:0b:0d:dc:f5:d2:80:12:2f:24:5d:a7:28:58:f6:8d:
         fc:b3:3b:81:06:70:b2:92:49:4f:20:e7:73:ab:73:13:2a:a3:
         aa:e8:3f:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkzODg0MDBDQzZG
RDhCMDQ5RDIwHhcNMjUxMTAzMDMxNjAwWhcNMjUxMTEwMDMxNjAwWjAYMRYwFAYD
VQQDEw02OTA4MWU3MS0zNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvi7xP/0gEos8ZMorW51rrFyLrU58r/3I4TY2GUfshmmhm5Zf8+4jzMJAqjoe
WuPigagFScDiH/d7ez4kGJLoAOkpcO0Wxes8swyrFTdnRgUXXvcsA3lcyjV6rW6Q
TNFEmJ19hTIXG+wQAzQltesT4qlFDdsWTgusWI4VP1vaufEGMEESV/x6kCYAosuO
Z38R+MGiwf+d7Ng4IlJCArf4kyOC4rl43x50GxvP/1LRYLOHuPdf84ZFAh5u4INY
4Xz1RXCR/2gszx1LEfEBBpFRdFK94QlrpWuucoemsuT2B6OnqZPrJgd6o7Cj9zh7
uXLnfz7lUi/55T4OJZ3nYJiBUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgSWWg2
3+HSVwqICSUbOaCWqupHMB8GA1UdIwQYMBaAFCy4wfnqDHtagDaJOIQAzG/YsEnS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE1RC80MTRBRUQ2QTM0
RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUxcUFOb2s0aEFETWI5aXdT
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xMakItZW9NZTFxQU5vazRoQURNYjlpd1NkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUx
cUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyTH9SLSVxhi0OOx4ioHV9G2mBsAmrHxL9eySHYnDs5CsL8eZLnlrc
ENmOCrI0iRfEBIgL0P7maiBkCLR0HHOA2t5bWXPq8MdR55mf/XfSgNYYDYyQA00I
RLdsuTYfLDC2kppAzM+qJgNM+P+RgVGeaiIw7CtSveZwdNJ4dJkXUBf+RxrGBK/8
IlpEy4dw0fFnSgySZhi93mkWdcwCqLbPWuxLERvIRL5Mo2WUJ8dbN+Y69GIRhIOq
YHUiFzu++l1IpAOG8rxZIY1YUX3oJ/NRQUfJEXlJ6myF5nQLDdz10oASLyRdpyhY
9o38szuBBnCykklPIOdzq3MTKqOq6D91
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:27 2025 by rpki-client