Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          IVRIEBP2KyIXLXRbNAzgb/dvrkIjs2PjwW1s4f2dtKw=
Subject key identifier:   57:C3:BA:85:40:3C:4C:5C:2E:F6:5B:C3:EE:09:24:20:EA:30:62:C4
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          01FC
Signing time:             Wed 29 Oct 2025 02:13:18 +0000
Manifest this update:     Wed 29 Oct 2025 02:13:18 +0000
Manifest next update:     Wed 05 Nov 2025 02:13:18 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: 23hm0t121VYiDLiWRKu2ZnKcNbAkE+jYeU0eB6jdvwY=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: w5eiVbjwCl7FcDiQB51RhcBa3fhBXTl0kBsUFzWTzow=)
                          4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: YzxhkuTIla90nMxllMuAPcH6Qo+CPshpVYgjHxiUelw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 02:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Oct 29 02:13:18 2025 GMT
            Not After : Nov  5 02:13:18 2025 GMT
        Subject: CN=6901783e-15f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:63:78:fa:7b:d8:ef:8b:b9:ef:e8:f8:57:
                    b7:ec:c8:3f:0a:5d:dc:65:6f:31:25:44:0f:15:50:
                    e0:bf:89:00:f5:3a:b1:ae:64:1d:d6:80:5f:3b:6d:
                    18:44:c1:22:ec:e1:b4:34:d5:14:75:2e:4e:25:49:
                    b3:ec:43:6c:38:5d:ab:88:9d:4b:2a:ab:8d:a3:52:
                    e8:01:9f:fd:e3:50:d9:ef:6f:3d:29:d5:f6:3a:29:
                    ad:1e:f8:85:f0:1d:e5:58:2d:c0:f1:29:d4:12:48:
                    46:ae:75:97:9c:ba:a1:2e:ab:7b:41:5f:81:5a:f2:
                    c0:e3:f8:e5:7a:7c:f5:0a:ec:a2:df:85:77:b7:c3:
                    b6:87:da:7a:f5:97:e3:5b:01:e6:02:c5:6e:0f:78:
                    38:60:d2:24:81:46:2f:96:a5:b8:98:d0:0d:30:31:
                    a1:7d:c6:a0:02:87:27:af:41:66:66:da:69:29:c2:
                    86:dc:e4:76:4b:87:94:dd:63:6e:48:7e:74:1d:4b:
                    0b:8a:92:4c:8a:99:32:00:06:46:26:33:5b:9b:51:
                    f9:8f:9b:df:ac:83:59:9b:ae:b9:c6:91:33:a3:26:
                    a5:90:bd:5f:9e:b7:3f:86:5b:e4:c9:8a:e4:fc:6b:
                    92:9b:5c:48:ae:23:ba:46:3b:5c:5d:55:d8:85:52:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C3:BA:85:40:3C:4C:5C:2E:F6:5B:C3:EE:09:24:20:EA:30:62:C4
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:02:9c:f8:b4:a9:c5:92:f8:f2:fa:13:1c:bb:79:55:4b:dc:
         36:a8:13:0c:db:96:9c:9c:1c:4c:75:bc:cf:a1:f9:bb:7c:ed:
         18:f3:fa:d5:fc:b9:79:fa:60:fb:b8:6f:30:ad:f6:03:f0:fa:
         f3:bb:88:1f:47:44:01:03:c6:51:3d:8d:ec:17:df:d4:00:9b:
         7f:ae:d2:6b:ae:a4:6a:7a:39:cf:03:ab:45:7f:96:9a:fe:32:
         c9:58:d0:a0:f1:7e:5b:04:52:55:f7:5c:8f:90:14:00:ec:c8:
         d5:11:4f:f1:e6:5b:a1:9e:b2:88:bb:0e:b9:54:28:84:01:9e:
         db:4e:02:81:c1:3b:af:ad:8d:58:ac:a8:54:66:76:e6:36:be:
         4c:e5:35:0a:3c:bf:1a:e7:04:3b:2d:c2:4e:02:02:5d:b3:f6:
         00:24:86:2a:47:4d:0b:0c:31:07:dd:39:86:f4:b3:31:54:0f:
         30:02:83:eb:61:91:3a:fc:e9:08:a8:ed:80:13:dc:36:7f:ca:
         9c:00:50:43:6c:38:35:3c:72:83:3d:62:a1:4c:85:b4:5b:51:
         7d:2f:70:72:0c:ea:be:e3:1c:59:cc:70:48:9e:48:7c:99:73:
         5f:28:6a:2b:95:2c:93:56:18:be:30:20:99:ca:8f:75:c3:13:
         1e:53:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:27:46 2025 by rpki-client