Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File:                     mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier:          9F8vsLsfwLAYa4We59wVuR5gPC5Uszarq6xgA/gd5dI=
Subject key identifier:   4B:CD:98:8F:16:AD:53:D8:27:EF:6F:12:1E:13:2D:E6:65:BB:79:19
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       05F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number:          05DB
Signing time:             Sat 25 Oct 2025 01:16:10 +0000
Manifest this update:     Sat 25 Oct 2025 01:16:09 +0000
Manifest next update:     Sat 01 Nov 2025 01:16:09 +0000
Files and hashes:         1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: mDeyeP5hZHXNFhoyt79vqCSjGM86I8lNuuWTTNvqACE=)
                          2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
                          3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 01:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Oct 25 01:16:09 2025 GMT
            Not After : Nov  1 01:16:09 2025 GMT
        Subject: CN=68fc24da-c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:50:6d:1a:68:74:6d:9a:3a:db:30:a8:2b:
                    26:8f:51:6a:94:49:bd:98:1c:2d:db:28:39:6e:93:
                    9c:95:59:e4:97:47:d4:d8:8e:61:11:63:05:b8:ae:
                    55:33:16:7c:11:4d:2b:c0:b3:d2:a3:85:c2:b0:2b:
                    3b:c0:13:93:10:e9:f0:e9:40:a0:23:6a:ba:d4:78:
                    6f:64:86:d8:96:de:21:ea:3c:0b:66:9e:72:d1:c4:
                    fd:8e:7c:c8:00:1b:cd:04:1a:e5:07:d1:a1:ec:3a:
                    0d:ff:54:66:68:da:97:d5:54:a4:39:6b:84:a1:df:
                    42:52:41:37:b3:9e:b7:7e:32:0d:a0:96:da:ad:72:
                    32:e9:60:1e:14:a7:16:db:33:ac:5c:12:95:15:20:
                    db:03:be:c4:28:9c:1d:d0:23:fa:73:fe:99:c4:73:
                    77:3b:0e:06:30:90:26:3d:69:46:c3:7e:95:94:be:
                    4b:10:cf:2e:98:51:7a:33:c3:eb:0f:79:55:ce:d5:
                    9a:82:52:c8:f2:95:f7:a8:94:f0:77:c4:56:e7:b4:
                    1b:70:1f:7a:55:6b:b0:05:f1:09:f1:de:cd:6e:a4:
                    c2:49:3f:13:7a:0a:e9:b8:60:1d:58:d3:9e:49:0a:
                    26:d0:38:1e:e2:3e:96:f6:14:2c:a0:bc:d7:12:b5:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CD:98:8F:16:AD:53:D8:27:EF:6F:12:1E:13:2D:E6:65:BB:79:19
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:81:94:20:3e:92:60:61:7b:79:0f:cb:1a:e0:a2:a0:9b:
         5a:17:24:2a:29:09:5c:0b:04:86:40:44:d5:5b:39:d4:de:29:
         76:23:8a:0e:e8:bf:b1:7e:a7:3a:7c:31:1f:b4:25:a3:47:bc:
         54:44:f4:09:5e:78:4b:6f:b3:43:fb:43:a7:1f:52:04:a0:ed:
         07:d6:31:28:2f:1f:ab:51:c3:52:0a:22:11:ba:a5:11:17:a3:
         8d:41:25:74:d3:1d:52:c2:23:3f:5d:81:a8:61:9c:ab:e9:d1:
         d8:cd:8c:b7:58:de:42:19:a6:10:11:b3:40:5c:8d:22:c5:01:
         7f:f7:a4:19:b1:f0:6e:57:bf:55:24:3c:aa:2d:e4:d9:cf:9b:
         6d:8e:31:e9:e0:83:0c:78:05:6c:7c:71:c7:0c:af:12:9a:c8:
         bb:f8:3d:6b:6c:68:a2:96:7f:4e:f5:2d:27:89:fd:e3:c4:c0:
         ab:9e:38:73:56:46:00:6a:04:b9:13:51:4d:39:ab:d3:7f:f2:
         6a:65:59:02:51:c4:8d:5d:39:82:fd:cd:5c:b1:e2:c8:3a:bf:
         86:ee:3c:6e:2a:cd:f2:12:0c:58:56:a4:5f:4d:ad:c7:af:f9:
         18:01:08:55:ba:9d:ef:30:46:6b:61:a9:e8:32:63:86:81:37:
         e3:30:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:19 2025 by rpki-client