Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          hrloddyjvC+MOQg8U/z5+mhyhZyOAcykg6WJbRrKAas=
Subject key identifier:   CE:7C:FE:17:0A:67:78:EA:F7:94:76:E5:63:CB:FA:51:B7:DA:91:7C
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       054F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          0532
Signing time:             Thu 04 Sep 2025 23:51:30 +0000
Manifest this update:     Thu 04 Sep 2025 23:51:30 +0000
Manifest next update:     Thu 11 Sep 2025 23:51:30 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: sXRaBeLihQ8Ka4VpjL1fKuMeayUdwsBGB4zQ+2dJb1g=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Sep  4 23:51:30 2025 GMT
            Not After : Sep 11 23:51:30 2025 GMT
        Subject: CN=68ba2602-90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:f6:e9:37:fe:e1:64:d7:73:2f:34:ee:26:
                    40:19:05:0a:fb:d4:f6:e0:8d:d3:5b:5e:4a:8c:0f:
                    a0:e3:0b:1d:04:c7:a5:3c:bf:b5:c1:62:7c:f5:8e:
                    c7:7d:8b:f8:28:31:1c:40:36:90:62:3f:97:fc:ae:
                    42:a7:a6:b6:c6:ac:df:72:ea:71:b0:e5:9b:85:cd:
                    7d:74:d3:b9:f5:92:a7:b9:50:0c:37:be:77:4e:28:
                    20:64:00:5b:87:8b:f4:dd:06:c3:35:3b:a9:fb:71:
                    58:d5:2c:fd:b1:70:d0:d2:9c:8f:22:91:ab:03:cf:
                    04:4b:fe:0b:79:81:ef:97:1f:cc:0f:21:2f:6d:eb:
                    f0:e0:b1:59:ec:0b:6f:97:74:02:f4:ed:ac:fe:a3:
                    e7:55:b5:64:5b:e0:f6:ed:c3:2e:9d:d0:bd:c1:a6:
                    52:00:3b:da:62:45:80:70:4f:7e:ee:1d:28:dd:f7:
                    8f:7d:be:45:53:61:b0:7a:43:7a:eb:b6:cc:8c:7d:
                    29:e4:04:64:bf:26:c4:01:a2:cf:5c:0a:63:01:85:
                    fc:a8:aa:40:23:13:16:0c:d6:1f:74:6e:1e:f8:38:
                    3b:d5:70:c2:80:0c:71:4f:f2:89:62:33:2b:8f:9f:
                    ec:7a:24:ca:4b:03:a2:cc:ba:c4:7b:0f:d8:fe:12:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:FE:17:0A:67:78:EA:F7:94:76:E5:63:CB:FA:51:B7:DA:91:7C
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:e2:5e:bf:00:2e:b3:85:e0:3f:0b:7b:50:d7:8c:ca:27:
         6d:78:96:55:8a:3c:a6:b0:66:b4:65:20:f6:ad:95:a0:09:a2:
         cd:0c:c0:c5:70:c0:dd:38:55:c9:22:df:8d:97:b8:76:78:25:
         a9:64:30:10:19:e7:05:08:2e:51:66:23:8f:fb:a4:68:2b:55:
         c1:95:88:f9:df:f3:dd:0b:0c:e1:41:96:3c:24:22:1c:81:d7:
         14:67:4b:76:fb:47:f7:03:67:95:d4:07:97:40:25:3d:f6:e5:
         b1:31:cb:e5:32:c9:5d:0f:da:09:c7:c7:0d:fc:62:2d:62:27:
         9e:6d:f9:bb:cf:1d:8e:e9:eb:88:50:6d:c6:a9:4a:86:8d:d2:
         75:99:5c:17:fa:ad:7b:26:7e:56:15:e1:a1:21:12:e9:dc:f5:
         20:ee:e1:9c:e2:b2:b5:15:b9:72:a4:a7:be:f8:eb:e4:31:3c:
         28:67:06:02:9f:ea:57:f6:0a:55:1e:45:87:59:e2:c5:dd:55:
         ee:1f:e1:e6:b7:a9:60:15:20:8c:e1:38:e4:75:42:9d:7e:0d:
         73:f7:75:bf:5a:c2:34:09:f1:e2:71:24:74:9d:21:b2:c8:44:
         38:f1:10:19:39:87:56:89:fc:95:e5:3d:03:e4:36:14:6a:ee:
         cd:95:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:25:09 2025 by rpki-client