Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          dwHzGoa2VbMha/pdvtr82PwAfMa67QZpmO7vZsKJMDk=
Subject key identifier:   F1:61:9C:5A:11:37:6F:5A:2B:B6:55:8D:98:DA:74:88:5C:89:8B:BB
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0B54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0B24
Signing time:             Tue 10 Jun 2025 19:13:27 +0000
Manifest this update:     Tue 10 Jun 2025 19:13:26 +0000
Manifest next update:     Tue 17 Jun 2025 19:13:26 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: dis5YLWB7PYhtnzuoXALaks0typKsZrJ1IDoG0gSzmY=)
                          2: 155B355E414311EE8E969116C4F9AE02.roa (hash: 8n8jzkGbayepgQzEpsL65F4oyNOM3A+zDOLQR9DNID8=)
                          3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: KzwFd8PDenGf+ZwF13ldlpLL32AHpZJ+BkfX9UFd2E8=)
                          4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: 1/sB6pu/nvBS4QJYppsZekVqlkIQlRDFcO4hqm31NTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 19:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2900 (0xb54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
        Validity
            Not Before: Jun 10 19:13:26 2025 GMT
            Not After : Jun 17 19:13:26 2025 GMT
        Subject: CN=684883d6-b594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:b3:97:f8:ee:d1:89:4a:ad:59:0c:74:1e:
                    a9:2e:c8:ce:9b:d8:a4:96:af:9e:7d:44:94:39:fc:
                    92:8c:2a:05:81:d4:c6:32:f9:76:41:23:33:e8:8b:
                    10:6b:ec:9b:4b:04:81:c2:64:68:3d:42:38:30:cb:
                    dc:7b:f7:28:b2:64:df:60:d3:60:29:0d:00:c9:fe:
                    17:65:14:5f:f3:c3:51:75:91:9e:42:97:23:89:b0:
                    37:c4:57:f2:12:c3:43:c0:7d:2c:59:40:79:86:81:
                    01:d1:f5:ad:4a:68:12:fb:32:ba:8d:14:11:8f:8e:
                    20:03:c7:70:16:8a:11:df:16:4d:66:cc:1a:e5:01:
                    36:eb:b1:a9:e9:7b:d6:0d:9e:16:ff:d0:3c:31:dc:
                    1f:ae:d8:6d:c9:ad:89:04:af:0b:25:f3:a8:eb:3b:
                    26:b5:8e:66:7d:92:80:f4:b5:5d:4c:bd:b6:5d:33:
                    f2:10:83:b6:b3:71:a0:cd:a0:d8:f7:f2:79:47:63:
                    fd:e3:84:80:b9:77:4d:9a:bb:8d:88:c9:c7:ec:c3:
                    d0:e4:1c:a3:46:a1:7b:f4:ee:3d:5a:a8:8e:37:54:
                    53:97:be:89:0e:f6:42:89:3c:62:87:a8:67:7f:43:
                    d1:64:0f:02:ee:9f:e3:ba:b5:2c:99:a3:14:d1:72:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:9C:5A:11:37:6F:5A:2B:B6:55:8D:98:DA:74:88:5C:89:8B:BB
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:41:93:47:25:82:3b:6f:8d:b1:c6:d9:44:66:46:4d:01:c7:
         c0:e9:3d:08:4e:4c:f9:9f:90:ab:da:b9:8d:ba:3b:cb:0e:de:
         e4:c4:ce:3a:0e:05:19:dc:8d:f2:f1:f3:4f:a2:28:95:2a:87:
         8b:67:4f:a8:39:50:a5:a5:dc:e8:f5:d7:78:d3:44:6f:53:95:
         38:d7:da:69:fc:a4:93:55:c1:8e:1b:19:e6:fe:b1:1e:9d:1b:
         44:84:49:88:c5:fe:a5:af:e9:dd:0f:12:39:74:74:e6:6d:26:
         e6:61:e6:8e:23:42:c3:03:05:9d:34:68:03:2e:bd:29:27:5d:
         33:fc:e8:95:50:4b:59:9f:8f:a5:43:53:42:de:20:bb:97:2c:
         27:a3:fa:97:2d:7d:b3:ef:76:e9:2b:c0:df:89:13:73:e5:fb:
         7c:e9:b6:6b:6e:b0:89:95:8b:83:30:9c:05:d5:2d:f3:0b:70:
         17:90:7a:3d:ae:96:86:9c:3b:73:ee:ef:10:b9:de:62:b4:c7:
         03:4a:38:73:38:08:5c:e8:f6:28:5e:53:a0:9e:6c:7f:21:74:
         64:c6:bd:db:53:3a:87:e7:40:9d:0b:d1:22:0a:b1:85:01:9d:
         ba:24:0f:cb:ce:11:e7:55:04:52:06:09:88:bc:99:bd:f7:5a:
         f5:9f:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:44:24 2025 by rpki-client