Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
File:                     LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json)
Hash identifier:          O2N3K8/JAlS1j0lagnlk8mcuLtM9d54DeblUwnLTikA=
Subject key identifier:   99:0C:2E:0B:06:4B:78:02:1A:77:CC:EB:88:54:B1:B8:3E:DF:D0:B9
Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3
Certificate issuer:       /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
Manifest number:          0348
Signing time:             Wed 05 Nov 2025 01:05:11 +0000
Manifest this update:     Wed 05 Nov 2025 01:05:10 +0000
Manifest next update:     Wed 12 Nov 2025 01:05:10 +0000
Files and hashes:         1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: AKRPUnnL70VinOsbQsb30TDqD+VhVZycfizCvxL3eBs=)
                          2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: jwHoQgOY9fRB3Dqb7u0CR2POMqXltdonHQARnzrE8nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ADA, serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
        Validity
            Not Before: Nov  5 01:05:10 2025 GMT
            Not After : Nov 12 01:05:10 2025 GMT
        Subject: CN=690aa2c6-2390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:10:b4:ef:f0:c7:1a:a1:33:f4:7e:f3:af:
                    be:73:94:b3:99:a5:2a:11:90:86:40:7d:70:4f:51:
                    df:d7:66:81:d8:97:1e:3d:5f:30:ca:93:f5:ec:d4:
                    f0:5b:ff:cd:7a:0f:f2:64:11:69:ac:f8:75:12:d0:
                    92:ea:70:3f:4e:e8:7b:c1:dc:b9:a3:e0:91:14:19:
                    f8:f9:8d:14:66:00:ec:b1:1f:5f:1a:cb:d3:c6:46:
                    40:0f:aa:ec:ec:2c:7d:d8:75:2e:4c:a3:72:92:15:
                    82:73:ca:d1:db:b0:ba:b9:29:c1:4c:f5:40:5a:34:
                    14:c6:da:bc:e0:04:a6:85:16:13:38:64:3f:36:28:
                    f2:54:76:ff:b4:df:86:81:e7:9f:16:91:18:9d:80:
                    31:92:1f:d4:40:db:8d:90:95:2d:9f:f3:2b:08:5b:
                    24:87:c0:f0:60:ee:79:d6:d9:48:32:b3:01:52:41:
                    68:0e:2e:0c:ad:09:d3:5c:86:4e:d9:a5:e9:1e:d3:
                    1b:ab:39:5a:bc:b3:1d:ba:40:a8:ac:ea:0b:a4:87:
                    5b:4b:72:04:22:a1:e9:cd:bc:83:55:28:bc:f9:04:
                    4e:3a:42:36:27:21:54:b0:f9:d2:d8:d4:de:eb:06:
                    31:db:93:e7:7e:d2:91:41:f4:72:f1:30:24:cb:1d:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:2E:0B:06:4B:78:02:1A:77:CC:EB:88:54:B1:B8:3E:DF:D0:B9
            X509v3 Authority Key Identifier:
                keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:c3:c6:7b:ef:9e:42:b4:cd:cd:19:8f:b5:a8:93:b0:41:
         d1:70:8d:60:8d:dc:8c:24:c9:12:8e:8d:58:51:07:47:ca:a5:
         c9:27:70:0f:68:ef:cd:05:b4:af:a6:08:b5:54:76:48:e5:e7:
         f5:dd:0b:39:56:4e:43:4a:5b:56:be:0c:87:a2:ab:c3:0d:1b:
         e9:39:af:ae:cd:db:b0:de:62:e6:b8:07:ac:bf:52:24:ab:a6:
         31:ae:c5:9b:08:1b:1d:48:78:25:92:17:31:0f:5e:45:8c:71:
         43:3c:a0:12:07:e1:a9:5d:cc:2c:a2:e3:ad:4c:27:80:0f:64:
         c3:53:7f:0b:58:3a:60:4c:81:bf:8c:e5:3b:54:46:c4:5b:ee:
         9a:0c:cd:8a:fe:8c:c6:97:12:b8:fb:30:80:d1:c4:3d:3b:f0:
         4c:eb:10:6f:79:b0:7a:7d:8f:a2:9e:0d:38:98:cb:f0:56:80:
         02:6c:24:f9:93:16:47:93:d1:c7:e4:e9:35:94:7a:a1:af:ba:
         7b:e5:c5:5b:5c:5e:b9:91:7f:20:37:e6:8b:94:7f:ae:49:95:
         4d:d2:6c:c1:9b:ab:d3:26:b3:ce:d9:3f:f8:32:3e:8a:1e:75:
         19:a0:56:5a:e0:9e:d0:6f:03:29:b8:11:cc:0a:3a:a1:bc:de:
         d3:81:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:48 2025 by rpki-client