Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File:                     LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier:          6iS1Mop9dPfIVfsX9HsnUdRLPKhnZcCZ78+R0N9f1oo=
Subject key identifier:   E5:9B:8D:3D:DD:A3:59:E2:68:73:26:2C:8D:2E:EB:1A:36:89:30:88
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number:          8C
Signing time:             Sat 25 Oct 2025 10:36:19 +0000
Manifest this update:     Sat 25 Oct 2025 10:36:18 +0000
Manifest next update:     Sat 01 Nov 2025 10:36:18 +0000
Files and hashes:         1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: Rp4WMa81DnTVnENUnQKPwTbR1m4vRNk2PMsflZRmlbo=)
                          2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w=)
                          3: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: D1S7iqXGUUZHfp/09w60bmU/i0252Rh24H8Dl+FipBU=)
                          4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 10:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Oct 25 10:36:18 2025 GMT
            Not After : Nov  1 10:36:18 2025 GMT
        Subject: CN=68fca822-0be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:e9:90:24:79:9a:f2:b6:e1:5f:af:6d:2e:
                    9d:5d:b2:23:3e:1d:4f:41:d9:0a:a7:85:87:57:e1:
                    7e:41:dc:37:7a:22:64:44:e0:9c:a0:3b:f7:19:89:
                    65:81:b5:e8:87:fb:da:18:1d:a9:47:9b:9c:e5:1b:
                    01:a5:b6:dc:28:33:9b:f5:0b:fa:48:55:3a:f7:ff:
                    f3:ed:fe:11:79:c0:fb:2c:c9:e8:78:ac:3d:a4:b2:
                    20:b7:bb:59:53:6e:9c:93:f2:c4:d0:56:4c:f2:c0:
                    9f:88:00:ff:40:ba:52:a1:ca:39:b9:c1:b7:9d:b4:
                    9f:58:85:96:6c:da:c4:57:16:9a:4f:30:ff:77:b5:
                    b0:dc:72:3a:5d:f6:a4:e8:7a:bc:d3:a0:6a:2f:4e:
                    d7:64:51:07:bd:c9:37:c1:5d:c5:d2:d8:17:19:c0:
                    86:54:e5:d9:a2:1d:79:8c:c4:39:91:22:bb:78:2e:
                    d8:99:d8:ce:77:0d:12:94:66:63:95:56:2a:f0:9d:
                    a1:b8:81:00:97:1a:d2:16:00:b6:7e:54:c3:19:42:
                    48:f3:16:9c:b1:c6:80:5f:e4:82:5f:a0:ac:5b:e5:
                    de:c4:eb:f8:70:c9:70:8c:59:6e:0b:40:90:92:44:
                    a9:60:2a:f8:1d:59:d2:2c:1a:9e:0f:68:41:f5:39:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:8D:3D:DD:A3:59:E2:68:73:26:2C:8D:2E:EB:1A:36:89:30:88
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:bd:2b:07:75:49:92:ab:5e:b6:b3:70:aa:99:61:dd:68:
         2c:54:1c:17:f5:21:8d:fd:f2:2c:cf:26:99:5f:ed:02:ee:7f:
         a6:e3:0d:28:00:0a:c1:eb:3c:57:b4:15:e8:e6:71:28:0b:34:
         2e:90:a1:76:9c:95:38:18:85:fa:6a:56:ee:ec:77:b9:d0:0d:
         93:af:e2:b5:ab:cd:72:c0:4b:e7:e7:f2:50:a2:b5:37:66:02:
         ed:a9:33:51:2e:b4:98:37:7b:be:20:64:b5:49:19:1b:9f:28:
         40:2d:d4:98:bd:2a:49:ba:ef:69:6f:51:8b:eb:b0:5c:0e:cf:
         43:ad:21:0a:f2:0d:f0:69:4b:a1:f5:fa:5c:d1:b9:f6:5a:5e:
         01:f6:d9:cc:a4:00:4f:74:8f:e2:06:bf:04:52:ed:2f:50:16:
         51:eb:f0:fd:d8:44:96:b2:b7:2f:f9:d1:00:21:97:63:1f:72:
         55:96:29:92:a9:7e:23:73:c9:ea:e1:5a:4b:42:dd:df:4f:66:
         8c:89:65:2f:da:4a:6e:8c:59:d5:8c:80:2c:39:5d:20:5a:f7:
         b9:00:14:31:97:f0:60:92:28:ff:7d:04:cf:39:ec:23:be:01:
         bd:81:71:f5:a3:43:12:b9:51:7b:a3:33:3e:fe:1d:0c:17:bc:
         9d:dc:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:12:41 2025 by rpki-client