Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
File:                     lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json)
Hash identifier:          FeJINExR3mn3i2Ouwf25A+SLdBVuV+Sg+hwCh7qAXGs=
Subject key identifier:   8F:AA:26:7F:39:C8:97:3E:91:29:0B:FB:BC:33:FA:9E:3C:4D:AC:42
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Certificate issuer:       /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial:       060B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
Manifest number:          0605
Signing time:             Tue 04 Nov 2025 22:59:18 +0000
Manifest this update:     Tue 04 Nov 2025 22:59:17 +0000
Manifest next update:     Tue 11 Nov 2025 22:59:17 +0000
Files and hashes:         1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: L9seJQIL839n6uvzAPwJtq2FjST0MnxaU52HH4lhJPo=)
                          2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: IerjiVdpTpomboBtzuyqypAEqQk0Qd/Z1MS5uP0DEYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
        Validity
            Not Before: Nov  4 22:59:17 2025 GMT
            Not After : Nov 11 22:59:17 2025 GMT
        Subject: CN=690a8546-58a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:0a:bc:14:ab:35:92:60:41:0c:a2:73:e2:
                    ca:92:1d:f4:6d:b9:26:6b:ce:6a:ec:96:0e:60:3c:
                    4e:74:df:12:9d:28:b8:95:07:84:05:a4:88:79:29:
                    41:e0:0a:03:fb:ea:e0:3c:db:a8:22:ca:0f:07:20:
                    b9:07:55:50:e2:97:83:80:e0:64:65:54:cc:8a:50:
                    dd:bd:ea:4e:f3:e8:bd:d9:20:2b:19:e9:6b:7d:1f:
                    38:4a:17:da:d1:8e:d9:cc:ba:39:5a:c1:2a:8a:47:
                    81:38:c8:d7:a9:88:93:09:77:05:0e:57:f6:9f:4c:
                    c8:da:16:15:3b:6b:78:24:fa:2b:b8:20:b6:d8:00:
                    b3:a1:12:1e:7b:bc:a6:29:21:92:a9:60:50:77:6d:
                    1c:fe:c6:cb:37:0e:c2:f3:79:4d:ff:57:9b:40:90:
                    6d:c8:59:08:15:7e:ed:77:3c:29:47:4f:ac:8c:d4:
                    99:89:de:45:1b:4f:56:ca:e1:6c:5e:e3:da:8e:1d:
                    77:50:5d:1d:cd:39:98:93:6d:aa:33:aa:4d:a6:54:
                    55:bc:60:f0:6c:95:8b:27:d1:a9:24:1e:c0:74:0b:
                    62:70:e7:0a:80:85:18:08:95:6d:b6:80:13:2a:37:
                    1c:9a:aa:46:c7:fc:2f:81:3d:53:8e:c5:8a:d3:b5:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:26:7F:39:C8:97:3E:91:29:0B:FB:BC:33:FA:9E:3C:4D:AC:42
            X509v3 Authority Key Identifier:
                keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:fb:c0:79:31:b0:8c:ec:5c:7a:34:ee:3b:3b:22:a0:48:
         7e:39:c6:5c:32:d7:a7:98:ee:63:bd:96:ac:a2:81:e0:e7:d2:
         ee:53:61:59:c3:44:db:16:bb:05:fc:7d:32:dd:ce:f2:8a:7d:
         d3:1e:4f:22:60:0b:44:72:6c:c3:55:87:17:7c:fe:64:e7:2b:
         75:28:c8:67:82:ee:3f:e3:5a:03:b2:f3:1d:18:89:90:38:d9:
         38:0d:60:2b:e0:5b:e4:2b:40:e1:e1:2b:c1:29:27:64:37:3b:
         f0:43:7d:d1:08:05:dc:f1:c2:c8:b2:02:e9:eb:04:c2:d2:0a:
         49:21:90:84:2b:5a:70:8b:bf:57:d9:27:b2:72:8b:c5:72:34:
         df:8b:8f:7f:62:b0:63:af:d9:b8:13:13:d1:89:30:32:02:61:
         d2:2f:3b:6c:e4:55:a3:a2:55:68:8c:d8:93:23:3f:ea:bf:20:
         27:85:31:ed:4d:9a:d8:ae:b4:82:ed:42:cf:9e:49:0f:52:78:
         69:09:55:39:53:b9:da:de:08:7a:6a:5b:b8:9e:a3:56:79:67:
         71:c2:1b:ad:a6:89:fd:2f:4f:dc:db:ac:91:91:53:79:fb:bf:
         c5:13:63:01:67:e9:e3:9e:37:58:91:c5:f2:ce:95:17:ea:13:
         26:2a:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:36 2025 by rpki-client