Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          mW3dRZdMvR5Scvmplhq6ef0ohLCAcfH/2UJXAf/XGHc=
Subject key identifier:   6E:7F:59:F7:13:D0:AE:5B:3A:3F:B7:CE:C8:0D:4C:BC:6F:3E:1F:54
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          DB
Signing time:             Wed 05 Nov 2025 05:46:48 +0000
Manifest this update:     Wed 05 Nov 2025 05:46:47 +0000
Manifest next update:     Wed 12 Nov 2025 05:46:47 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: jAEf7wykEdVzvdu1PfgRazXP0bcuTckvnDg7sW0AAiQ=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: EF4oE/lxCN23IMjmuuP02cCqUrL7uq26SoDsV63e3dw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Nov  5 05:46:47 2025 GMT
            Not After : Nov 12 05:46:47 2025 GMT
        Subject: CN=690ae4c7-c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6f:45:e2:2d:26:5c:26:1d:a4:85:f2:90:6b:
                    b2:e9:c5:9d:94:b7:82:0d:74:03:2d:4e:fc:3c:ae:
                    7b:a7:cc:a9:f9:ec:45:2b:fe:33:06:d7:9a:11:19:
                    28:e0:11:71:71:49:5e:64:85:6a:1e:8f:76:53:67:
                    0f:07:7a:54:0f:d5:e2:5e:5f:e5:12:94:58:7b:8e:
                    1b:c0:8f:61:28:11:f2:cf:c4:dd:85:c1:62:05:5f:
                    7a:fb:88:1a:f1:ac:8c:b0:c9:03:f7:89:c1:ad:31:
                    64:d2:89:91:20:73:05:6e:a2:8e:52:99:c3:4f:4a:
                    2a:2c:4e:25:0f:cc:eb:43:7e:33:71:4f:70:af:d9:
                    66:32:65:69:1d:55:76:b3:f3:5e:4d:35:c6:01:37:
                    9f:74:c7:05:d2:6c:fd:20:61:8a:b0:e2:aa:eb:b8:
                    e8:af:ac:3e:21:8a:70:49:63:46:d1:d1:b8:0d:b2:
                    06:73:1e:d1:82:0c:e0:62:94:39:aa:11:0e:1b:96:
                    89:a9:eb:26:73:58:f2:04:b6:8d:b1:6e:ba:60:5b:
                    50:72:ce:09:9b:3b:d5:8d:a7:0f:2b:51:11:db:73:
                    12:b7:35:05:56:23:4d:46:b4:60:a1:58:4a:8a:32:
                    80:a8:62:4b:2c:15:90:58:c9:dd:2a:ea:48:a2:e8:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:59:F7:13:D0:AE:5B:3A:3F:B7:CE:C8:0D:4C:BC:6F:3E:1F:54
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:04:b9:19:34:67:6d:c5:a1:8a:a4:a5:28:cc:1c:35:4e:82:
         a4:ae:be:4c:a6:36:29:9e:81:44:75:77:8d:53:22:1e:54:17:
         7d:66:d7:f7:48:a9:eb:9f:e6:18:86:4e:03:86:05:d8:9f:b6:
         82:de:28:72:27:04:04:95:e6:2e:2c:fd:aa:4c:9b:fe:74:59:
         be:5c:a2:62:35:58:eb:2e:62:92:86:b0:6e:d6:88:17:b3:44:
         80:36:5f:88:4e:67:0b:bb:9a:09:a5:27:a6:1e:6c:51:63:2b:
         ff:68:65:cc:c2:b9:25:43:f4:34:13:68:d1:2d:2e:a7:4b:4b:
         22:70:22:b8:54:cb:ef:0a:de:89:f7:fe:90:bf:a9:06:11:c4:
         40:88:90:07:cb:5e:98:49:f0:a3:04:4a:05:6b:28:74:ce:8f:
         1e:b9:96:e6:8d:d7:6d:cf:d6:2e:db:bf:40:d5:6f:15:5b:2c:
         20:16:95:81:c5:d8:f2:c9:a0:e2:15:26:f2:d0:32:f9:ae:bd:
         93:31:e0:8c:a5:87:95:ba:ea:5e:9b:e5:f5:02:1d:6b:54:88:
         d7:3b:fa:58:ab:c2:79:58:31:72:ca:1a:82:17:32:ca:98:80:
         1c:37:2c:2e:14:ee:1a:5a:74:33:73:5a:29:fd:ea:3e:b9:dc:
         12:7d:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:30 2025 by rpki-client