Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File:                     LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier:          yvtFq6dU2o0gqv1c2eAbNbEA2QnTLrDZnuqBh3C/Dlc=
Subject key identifier:   4B:EC:76:6D:0E:60:11:F2:36:BF:4D:D9:2E:20:9B:07:77:FB:9B:93
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer:       /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number:          013F
Signing time:             Mon 03 Nov 2025 04:22:52 +0000
Manifest this update:     Mon 03 Nov 2025 04:22:51 +0000
Manifest next update:     Mon 10 Nov 2025 04:22:51 +0000
Files and hashes:         1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: XwfYKWJtfl6PnUz6b057WVU0WZT37shl5Y3ops/OZKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
        Validity
            Not Before: Nov  3 04:22:51 2025 GMT
            Not After : Nov 10 04:22:51 2025 GMT
        Subject: CN=69082e1b-9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:d1:bb:c7:29:2c:43:a7:5a:da:21:fd:6e:
                    e6:99:81:c7:c9:6e:a2:e4:da:be:e9:96:e2:99:22:
                    f2:57:18:d1:7d:bb:29:01:d0:e6:9e:f5:36:2f:18:
                    c6:d7:f1:71:f0:5f:3d:4b:43:99:c4:36:d5:1f:c7:
                    f6:7b:97:85:1b:62:eb:b6:19:1c:dc:a0:52:6f:32:
                    a7:bd:34:fb:e5:fe:01:3b:04:17:b6:31:17:29:f3:
                    14:2a:42:6e:68:c5:b1:f9:41:74:f0:e6:15:84:0f:
                    68:49:02:25:5b:7d:a0:f9:bf:75:3d:14:04:3d:a0:
                    b4:f1:c0:0e:df:e1:3a:3f:8b:fb:07:8c:e7:9d:f0:
                    6a:38:d0:6f:b8:09:be:50:cf:cb:32:64:d5:7c:d2:
                    36:2b:e4:9d:84:6b:e4:38:d6:05:53:e9:4c:00:f3:
                    ba:20:d9:19:d2:33:4c:ed:6e:61:ee:8e:f4:2f:88:
                    0f:b1:73:8a:ff:24:c8:eb:6a:2a:8f:35:fe:07:a8:
                    54:99:37:c4:3c:f8:a8:9d:4a:d2:79:ff:18:1f:65:
                    6f:27:d7:1e:1c:c2:ec:7e:d2:0b:42:ed:c9:ce:d4:
                    c4:16:33:99:fb:d3:80:26:0e:04:53:c4:0c:26:f8:
                    47:84:e3:34:39:0e:e6:4c:34:4d:c7:d8:4a:92:1c:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:76:6D:0E:60:11:F2:36:BF:4D:D9:2E:20:9B:07:77:FB:9B:93
            X509v3 Authority Key Identifier:
                keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:22:2a:17:8e:de:9c:cf:f4:5d:a3:8e:50:1c:1f:83:4c:
         3a:22:05:9f:48:4a:3b:62:37:ed:83:0f:9b:78:cd:15:33:37:
         af:ab:2e:27:90:59:1e:9d:0c:c1:02:cc:15:3d:39:cf:db:23:
         31:05:03:76:3e:cf:83:b7:40:b3:17:26:f1:a2:75:94:f8:2c:
         6e:21:ef:79:14:15:e7:4c:17:db:2e:9c:af:84:52:6b:05:b3:
         03:21:f1:f3:8b:46:96:17:05:b7:4e:65:4b:1f:7a:5c:f0:fb:
         ba:89:d5:e9:09:f2:df:63:10:6b:f2:a5:59:4b:38:fd:5a:93:
         46:16:43:0f:73:d1:0e:71:34:92:4d:22:15:ff:1a:72:f7:25:
         ce:91:ba:d6:2e:b3:60:31:d9:5d:7e:9e:00:b7:6d:3e:64:58:
         aa:e8:cd:4a:13:3c:d0:d4:c5:e4:f4:c6:66:40:69:e6:32:09:
         8a:50:b2:9b:81:9f:31:bd:9e:13:67:2c:8c:b9:7f:4a:02:fd:
         62:98:29:13:11:e4:78:6e:11:a7:1e:a6:20:3d:6d:bc:95:4d:
         3d:ef:4a:f4:3b:79:92:f3:45:34:ce:8b:29:ea:f6:02:da:fd:
         df:41:29:f2:7f:21:04:1f:d0:10:02:04:81:2f:3f:83:10:c9:
         c0:6d:a4:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC
NUYwQjJFQTQwHhcNMjUxMTAzMDQyMjUxWhcNMjUxMTEwMDQyMjUxWjAYMRYwFAYD
VQQDEw02OTA4MmUxYi05Njk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTjRu8cpLEOnWtoh/W7mmYHHyW6i5Nq+6ZbimSLyVxjRfbspAdDmnvU2LxjG
1/Fx8F89S0OZxDbVH8f2e5eFG2Lrthkc3KBSbzKnvTT75f4BOwQXtjEXKfMUKkJu
aMWx+UF08OYVhA9oSQIlW32g+b91PRQEPaC08cAO3+E6P4v7B4znnfBqONBvuAm+
UM/LMmTVfNI2K+SdhGvkONYFU+lMAPO6INkZ0jNM7W5h7o70L4gPsXOK/yTI62oq
jzX+B6hUmTfEPPionUrSef8YH2VvJ9ceHMLsftILQu3JztTEFjOZ+9OAJg4EU8QM
JvhHhOM0OQ7mTDRNx9hKkhyxFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvsdm0O
YBHyNr9N2S4gmwd3+5uTMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC
MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox
NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDnSIqF47enM/0XaOOUBwfg0w6IgWfSEo7Yjftgw+beM0VMzevqy4n
kFkenQzBAswVPTnP2yMxBQN2Ps+Dt0CzFybxonWU+CxuIe95FBXnTBfbLpyvhFJr
BbMDIfHzi0aWFwW3TmVLH3pc8Pu6idXpCfLfYxBr8qVZSzj9WpNGFkMPc9EOcTSS
TSIV/xpy9yXOkbrWLrNgMdldfp4At20+ZFiq6M1KEzzQ1MXk9MZmQGnmMgmKULKb
gZ8xvZ4TZyyMuX9KAv1imCkTEeR4bhGnHqYgPW28lU0970r0O3mS80U0zosp6vYC
2v3fQSnyfyEEH9AQAgSBLz+DEMnAbaQY
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:19 2025 by rpki-client