Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          T+CfQ8B7JHnCRMROBieqeDetc6rIhU5thII4gWzfPko=
Subject key identifier:   0E:DE:4F:65:64:EA:BA:7F:C2:49:43:3D:E1:99:B7:3F:55:F4:A2:BF
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          070F
Signing time:             Sat 06 Sep 2025 22:11:12 +0000
Manifest this update:     Sat 06 Sep 2025 22:11:12 +0000
Manifest next update:     Sat 13 Sep 2025 22:11:12 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: udjTpMrhIxot89DcoLBElPJEvfZw7JRgUv6uuFgRBO4=)
                          2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=)
                          3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 22:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Sep  6 22:11:12 2025 GMT
            Not After : Sep 13 22:11:12 2025 GMT
        Subject: CN=68bcb180-d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:98:56:05:19:07:a9:4f:51:51:42:9e:9a:
                    b3:d1:96:1d:fa:08:90:d6:38:8a:66:67:b8:43:cc:
                    a3:5f:89:b0:20:05:eb:4a:02:52:96:d2:21:72:16:
                    8d:b3:30:c6:9c:80:0b:7f:92:b9:46:ec:c6:91:6d:
                    80:13:1e:92:08:0e:3e:bc:f3:db:45:9c:11:dc:27:
                    fa:25:f0:ca:84:a3:96:00:e6:44:70:02:de:36:41:
                    5a:1a:73:23:ee:22:70:85:3d:ed:bb:c8:d5:42:4c:
                    bd:26:b8:4c:f4:29:49:5e:07:50:8a:d4:23:69:6c:
                    d5:13:46:59:31:b9:1c:19:4e:4d:0b:22:43:a8:7f:
                    62:7b:cd:1a:10:0d:8a:69:78:d3:62:72:10:66:de:
                    65:ce:a5:3a:f8:38:58:a7:d0:e2:44:04:ce:02:78:
                    b5:06:9f:0a:61:ca:56:79:1e:f2:cd:3f:36:71:39:
                    27:c3:d5:5d:c8:16:2b:53:ed:d1:fd:27:b5:1a:46:
                    f7:38:f8:6f:97:75:bc:81:13:78:38:93:80:3b:30:
                    45:bb:52:f5:50:b0:98:7b:62:49:ea:7a:dd:69:b5:
                    43:77:a1:ed:12:12:d8:46:ea:87:dd:30:eb:5d:35:
                    f8:6c:ef:0b:21:3a:b2:9c:1e:71:d3:aa:35:d5:60:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:4F:65:64:EA:BA:7F:C2:49:43:3D:E1:99:B7:3F:55:F4:A2:BF
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:13:05:1e:23:1d:d5:48:a5:8a:2c:9d:5f:58:df:9d:01:
         8f:2d:1c:cb:71:26:20:7d:62:27:3d:c9:e5:a6:75:d0:58:72:
         d1:21:f0:a3:28:24:9f:f6:16:e2:53:43:c1:ac:14:a5:d2:c7:
         5a:b3:73:f7:83:50:e6:30:b0:28:5e:c6:4b:b8:84:83:6f:19:
         c6:c5:21:29:58:47:0a:4c:48:56:b6:c3:86:38:2d:24:09:3c:
         fd:92:20:e8:e4:a3:c7:3a:6e:96:29:86:08:0d:b1:77:f9:b9:
         11:ec:46:9e:db:11:7d:b7:eb:12:d5:2a:ae:9c:8c:49:e7:54:
         a6:7c:13:e0:12:0f:d0:13:3f:f1:69:e9:4c:a8:d3:24:86:5c:
         14:42:08:46:7b:70:71:4d:f9:8b:eb:28:0c:9f:03:21:1c:4f:
         46:b6:88:bc:de:05:8d:78:9c:94:1e:b8:d0:13:48:45:9c:ca:
         34:e9:43:f4:c7:37:c9:9d:39:5c:32:95:33:2e:ca:1f:fd:74:
         84:6c:08:a0:8e:cb:e7:cf:8f:8e:34:f6:63:07:3f:f1:d7:e0:
         45:ac:50:56:8a:e1:43:e9:7b:aa:83:f0:78:89:1c:14:98:c6:
         4e:3f:33:c4:5e:7b:f4:fa:8e:61:91:be:b9:65:67:a3:e4:2b:
         a7:b7:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:41:24 2025 by rpki-client