Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          BP8LKRSH2vNX0Fr9H2uyfUiIFJH9wjdWQ0jCEXGDvRU=
Subject key identifier:   4B:DA:A2:1E:E9:F0:2B:5A:68:FE:23:12:39:82:A9:44:97:F6:C3:6A
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          0601
Signing time:             Thu 24 Apr 2025 22:41:20 +0000
Manifest this update:     Thu 24 Apr 2025 22:41:20 +0000
Manifest next update:     Thu 01 May 2025 22:41:20 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: ynTinCqV270v1ybZfS8Ykvz9Yd9mSpwziaHeaxdgBus=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Apr 24 22:41:20 2025 GMT
            Not After : May  1 22:41:20 2025 GMT
        Subject: CN=680abe10-214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:ce:88:0b:b6:9c:4e:64:c6:46:a1:12:bf:
                    00:85:8e:ab:99:b4:41:de:fd:a7:07:f9:81:4d:3d:
                    1e:72:67:0c:79:80:b8:8b:39:bd:30:e5:06:00:c4:
                    54:c4:e0:be:45:2f:71:5f:7f:19:b5:ed:33:4e:f9:
                    27:30:e7:a0:27:c6:3e:df:27:f1:06:90:ad:51:76:
                    ae:27:9e:26:64:bc:5b:3f:28:ba:1a:d4:a1:14:73:
                    42:33:b6:bb:39:63:00:45:71:38:20:24:81:aa:88:
                    2d:0c:ab:ba:06:a6:61:01:ed:8f:92:e5:5d:77:99:
                    b1:f2:b6:65:45:e7:e7:d7:8e:d5:2f:9d:fe:48:62:
                    4c:80:ee:2c:df:d8:67:d0:9d:d6:1e:54:25:f3:57:
                    d2:6b:b1:2b:67:47:95:86:0c:67:ed:74:27:98:22:
                    a2:8d:14:64:09:39:7b:d5:de:c9:80:e5:e3:eb:73:
                    ed:e4:6d:b5:0f:d5:a6:66:9b:95:c4:7f:55:1a:99:
                    4b:40:40:2a:b5:d6:b7:83:ed:94:b6:c6:4d:15:6b:
                    0d:f5:98:53:bb:09:87:23:91:4b:aa:95:2b:39:82:
                    ae:63:ce:15:ba:30:ff:dc:c6:1b:dd:96:72:47:c0:
                    76:8f:1c:dc:7b:ee:fa:97:94:0a:a8:6d:76:9a:77:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DA:A2:1E:E9:F0:2B:5A:68:FE:23:12:39:82:A9:44:97:F6:C3:6A
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:de:21:1c:fd:0f:1a:ed:ae:be:4d:55:31:33:c7:a9:0d:67:
         75:66:13:5c:98:04:0d:6c:69:4e:82:42:18:c3:8c:2e:c8:63:
         30:7f:ac:5a:ca:4b:1a:c5:7b:fc:d4:6b:40:d5:ac:53:0f:ce:
         73:41:3b:6a:41:51:91:ca:55:97:9a:fd:0c:00:30:cd:4b:b9:
         f4:b6:fd:cd:6d:b3:41:1c:d4:20:55:ce:86:51:a9:66:29:f7:
         52:cd:36:2e:e2:9b:26:1f:9a:14:e2:bc:f1:a1:30:44:3a:0c:
         99:54:bc:fc:71:f3:0a:cb:6c:e3:58:59:f4:af:ec:29:0e:1b:
         0e:af:70:5c:2f:ae:a4:1b:e8:29:81:c8:09:b3:b4:7d:57:cc:
         9d:2e:eb:99:e4:87:8c:15:55:c0:bb:4a:c5:ce:c6:02:b0:b6:
         42:ee:dc:72:0b:e0:fa:aa:19:eb:c3:81:ef:5b:9c:af:9e:38:
         e9:72:70:80:da:72:1e:2f:50:62:02:e7:24:d1:06:2e:66:4c:
         8c:7d:3e:b9:99:b0:51:11:c2:1a:8e:02:a3:cb:1e:67:d8:c9:
         0d:d1:82:1f:72:1b:79:fc:d0:01:99:07:10:99:54:55:65:36:
         e9:56:e6:e4:9c:b8:c5:ea:e9:1d:c8:97:56:41:80:6c:bf:8e:
         23:3d:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:35 2025 by rpki-client