Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File:                     LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier:          MP0ygXEU1tneQS57FE7i6xHCSDt2j/TenY3DMp5Qx+U=
Subject key identifier:   9C:5E:36:A4:6B:E7:7D:B6:C6:BB:34:08:13:C3:F0:17:69:FC:08:89
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer:       /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number:          0214
Signing time:             Sun 19 Oct 2025 04:30:55 +0000
Manifest this update:     Sun 19 Oct 2025 04:30:54 +0000
Manifest next update:     Sun 26 Oct 2025 04:30:54 +0000
Files and hashes:         1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: xb1yE+UMThigFO9YGrpuObRJdF4pSov3EpJIUsIg2U4=)
                          2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=)
                          3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
                          rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
        Validity
            Not Before: Oct 19 04:30:54 2025 GMT
            Not After : Oct 26 04:30:54 2025 GMT
        Subject: CN=68f4697e-76cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:aa:55:fe:67:32:0c:e4:e6:02:e4:b6:a5:
                    d0:7a:b5:b4:82:21:27:52:2e:b3:22:0e:1e:76:6e:
                    98:59:18:cf:b9:af:02:60:d3:de:85:08:7e:21:e3:
                    48:25:93:29:34:a7:16:56:4e:fc:5a:5c:77:78:68:
                    a3:5a:93:11:f6:dc:16:e8:a2:5b:81:57:ca:f2:41:
                    de:37:0a:69:49:5a:4c:02:86:9a:77:6d:07:2f:eb:
                    66:69:93:70:2a:28:3c:e9:f6:a1:92:99:7b:9f:75:
                    3c:13:52:27:bb:ff:88:f7:6a:c7:e5:91:5a:f2:ed:
                    90:6a:06:ba:d1:b4:77:01:e4:00:a0:f0:f0:21:a6:
                    18:d8:dc:aa:32:ed:d5:55:1f:53:9e:30:49:19:b0:
                    c3:10:86:23:ff:f9:66:3f:6f:32:18:63:7e:1b:f4:
                    4d:eb:6c:45:ee:88:06:79:2c:84:aa:49:05:f4:f7:
                    2c:8f:65:46:33:fb:d6:25:78:15:dc:f0:0f:cd:1f:
                    61:8b:23:20:22:2a:43:8f:73:67:e8:6b:b7:3e:a1:
                    9f:c9:da:87:0a:d7:b0:8a:43:75:9e:64:1d:0e:b4:
                    f4:4e:d3:79:08:fb:da:93:38:b7:b9:ca:ff:6d:ae:
                    90:f4:61:4c:d9:70:89:3a:27:c0:63:2e:5b:7e:bb:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:36:A4:6B:E7:7D:B6:C6:BB:34:08:13:C3:F0:17:69:FC:08:89
            X509v3 Authority Key Identifier:
                keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:c5:24:ad:a9:6d:52:f3:e1:24:9a:ea:10:00:f5:8e:db:
         c2:65:f9:6f:5a:ad:9b:54:24:f1:34:07:49:35:ab:33:10:d2:
         bd:ac:c4:96:d5:8a:c5:99:c5:06:6f:16:4f:12:96:f1:02:86:
         19:c7:3f:11:c5:de:18:59:32:68:16:ae:2e:4c:56:7d:5b:af:
         05:a4:1e:ac:c5:2b:87:c0:c3:64:2f:60:60:55:d4:f2:73:67:
         07:a2:c1:96:23:cd:f8:db:9b:67:6f:64:c5:a0:57:d5:27:8e:
         b3:85:e7:97:10:56:d7:d4:1e:bf:85:fa:77:5d:21:a6:e2:fd:
         31:bd:a4:43:bd:3e:06:5b:e5:bc:7c:e4:79:77:31:e6:5b:4f:
         6c:64:4c:70:96:16:72:34:fa:f2:da:03:ea:c9:92:2a:b6:ed:
         05:a4:ba:ce:6d:56:46:72:52:f1:49:3e:2e:1b:11:a7:7f:1c:
         c4:f1:7c:d3:71:57:de:4e:f0:45:34:b9:a6:0c:c7:ec:be:66:
         6d:c5:64:05:02:5a:dd:97:ed:3c:1e:f2:7f:75:1d:68:0d:04:
         c1:6a:68:92:24:d1:1b:52:8e:26:e8:b1:76:58:b8:4c:61:a5:
         a1:eb:7d:9b:d0:1d:5e:bf:cf:4c:7e:df:1f:df:11:a0:f2:e6:
         66:6c:2d:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC
RDNFMEUzMjUwHhcNMjUxMDE5MDQzMDU0WhcNMjUxMDI2MDQzMDU0WjAYMRYwFAYD
VQQDEw02OGY0Njk3ZS03NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/+qVf5nMgzk5gLktqXQerW0giEnUi6zIg4edm6YWRjPua8CYNPehQh+IeNI
JZMpNKcWVk78Wlx3eGijWpMR9twW6KJbgVfK8kHeNwppSVpMAoaad20HL+tmaZNw
Kig86fahkpl7n3U8E1Inu/+I92rH5ZFa8u2Qaga60bR3AeQAoPDwIaYY2NyqMu3V
VR9TnjBJGbDDEIYj//lmP28yGGN+G/RN62xF7ogGeSyEqkkF9Pcsj2VGM/vWJXgV
3PAPzR9hiyMgIipDj3Nn6Gu3PqGfydqHCtewikN1nmQdDrT0TtN5CPvakzi3ucr/
ba6Q9GFM2XCJOifAYy5bfruw3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxeNqRr
5322xrs0CBPD8Bdp/AiJMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE
RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB
Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAv2sUkraltUvPhJJrqEAD1jtvCZflvWq2bVCTxNAdJNaszENK9rMSW
1YrFmcUGbxZPEpbxAoYZxz8Rxd4YWTJoFq4uTFZ9W68FpB6sxSuHwMNkL2BgVdTy
c2cHosGWI83425tnb2TFoFfVJ46zheeXEFbX1B6/hfp3XSGm4v0xvaRDvT4GW+W8
fOR5dzHmW09sZExwlhZyNPry2gPqyZIqtu0FpLrObVZGclLxST4uGxGnfxzE8XzT
cVfeTvBFNLmmDMfsvmZtxWQFAlrdl+08HvJ/dR1oDQTBamiSJNEbUo4m6LF2WLhM
YaWh632b0B1ev89Mft8f3xGg8uZmbC1P
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:28:09 2025 by rpki-client