Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          f4BW5dGxXCinc80p0Tr/B7FH1Nce8ks6uccc9i+KHPo=
Subject key identifier:   36:21:83:15:CF:F9:C6:C1:CE:D7:51:00:AA:AA:8B:D6:82:A1:A5:5B
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0808
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          07F9
Signing time:             Sun 02 Nov 2025 21:05:46 +0000
Manifest this update:     Sun 02 Nov 2025 21:05:45 +0000
Manifest next update:     Sun 09 Nov 2025 21:05:45 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: cDsoTx4UxWf2ymJecoSBOiuL/Lfy5jPPGI76ARdTLPo=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Nov  2 21:05:45 2025 GMT
            Not After : Nov  9 21:05:45 2025 GMT
        Subject: CN=6907c7a9-a914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:7e:c7:fb:1b:05:da:c0:d1:71:27:55:8e:
                    93:8c:75:94:fd:2b:e7:a1:2d:f7:6d:e7:f4:f2:3f:
                    8b:bf:a4:1e:00:90:28:64:1a:40:2b:18:73:3f:1a:
                    fa:80:93:bb:bd:ce:f3:a2:03:97:52:56:e1:bf:0a:
                    f5:67:0c:0b:68:7d:9d:6e:ee:be:77:92:d9:54:4b:
                    0a:d9:49:8e:c8:d6:12:7d:53:03:10:10:ac:71:3d:
                    bb:56:08:0c:82:94:86:f4:d4:a5:3d:18:e0:e3:65:
                    a5:6b:ed:06:6a:97:0a:19:b0:7c:4e:47:fc:b2:00:
                    6e:30:8f:e9:01:df:70:f2:9f:01:0b:87:62:ea:94:
                    70:50:53:02:91:eb:32:c9:70:c8:b7:1e:38:a2:96:
                    c3:e3:33:14:77:1b:d8:44:00:0d:09:80:ce:50:4e:
                    61:fa:cc:e5:f3:21:89:03:f1:8c:e4:e3:97:bb:fa:
                    ac:c9:5a:cb:13:f9:75:6a:19:65:b8:b6:94:90:36:
                    d4:c4:20:c0:8f:d4:01:bd:f1:d2:db:b6:5e:e9:75:
                    da:55:1e:38:90:fc:7c:f4:04:bf:14:14:9e:e3:85:
                    6f:23:8d:12:a1:7c:a6:80:93:0b:39:2a:cf:08:dc:
                    77:5f:2c:72:2c:d2:a2:7b:02:da:bd:6a:1f:03:a1:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:21:83:15:CF:F9:C6:C1:CE:D7:51:00:AA:AA:8B:D6:82:A1:A5:5B
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e0:c0:db:54:96:6e:e3:15:a3:99:45:1e:68:c2:17:1d:f7:
         9d:c4:02:ab:2d:f3:df:35:d8:0d:f4:86:d5:40:5c:0d:6f:ab:
         a8:eb:ef:42:87:7c:be:15:98:49:bf:2f:2b:3b:ff:da:5c:67:
         86:94:3e:60:7d:2c:e1:2c:a5:80:a5:96:06:1d:fd:a9:73:a0:
         4e:e7:e5:ad:ba:66:c3:a9:69:83:b7:c5:f6:c3:80:96:c7:25:
         5d:39:45:70:60:a3:7c:64:e1:ce:4a:8c:d4:89:56:07:10:fa:
         3d:01:5c:d1:c6:55:d0:3c:0e:2a:a1:43:6e:5f:04:82:0d:2c:
         76:58:bd:a8:6f:27:0a:b4:1f:75:ce:5f:50:03:08:bb:ea:57:
         14:90:54:3b:38:ab:6c:19:79:b1:78:9f:00:cf:82:0e:7f:06:
         c5:35:d1:c1:62:47:2c:36:34:b9:50:8d:8f:e0:ba:4b:6c:b5:
         a1:21:2c:dd:d1:94:b7:9c:1b:f4:22:67:c5:da:62:94:2c:de:
         c7:2f:ed:3e:00:09:19:3a:2b:25:e8:e9:0c:44:d4:b1:5f:60:
         8b:0e:c1:c8:d2:e1:e9:fb:34:d8:71:06:a9:33:ff:88:4d:e9:
         16:20:89:f6:18:91:c0:47:5c:ca:7b:5f:fb:6e:ae:58:83:53:
         fc:6b:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:12 2025 by rpki-client