Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
File:                     lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json)
Hash identifier:          EO2+VdiXH4/m3WrZ/S+TOePi8mcpAfEJW0snkw1n1Zg=
Subject key identifier:   EF:82:DB:48:78:F5:94:92:1A:BB:B5:6E:5E:16:5C:11:5B:6B:62:18
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
Manifest number:          23
Signing time:             Fri 13 Jun 2025 06:46:29 +0000
Manifest this update:     Fri 13 Jun 2025 06:46:28 +0000
Manifest next update:     Fri 20 Jun 2025 06:46:28 +0000
Files and hashes:         1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: wcBL1RJeyNsrSAJvyuSBYzTBvfuLeHnvCkBms+T4Ixs=)
                          2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Jun 13 06:46:28 2025 GMT
            Not After : Jun 20 06:46:28 2025 GMT
        Subject: CN=684bc945-314c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:81:7e:f9:6d:a5:4d:b7:af:cb:6b:30:e0:
                    37:c1:23:87:0b:73:ef:0d:5b:d5:e8:74:3d:4b:f7:
                    2c:f0:14:8b:a2:47:0d:29:cf:03:ba:5b:3f:1f:9c:
                    21:4f:c7:b0:41:df:c3:c3:57:47:06:ad:84:e6:61:
                    7a:1f:de:e7:89:35:23:0f:d5:58:a6:e4:dc:73:71:
                    e6:da:70:b8:6b:7c:03:07:33:af:a2:22:25:c6:7f:
                    2f:53:dc:b2:eb:13:33:be:a4:2c:29:23:31:c4:b3:
                    57:6c:68:c9:10:5f:cd:55:ec:4a:7f:80:90:9b:34:
                    ba:cc:4a:b5:6a:89:1a:a7:02:b1:a1:f3:ae:08:da:
                    07:f0:e1:ee:fe:c0:30:90:4e:65:04:0f:18:3d:fd:
                    d0:98:a8:8f:c3:44:8a:b6:16:96:cd:d3:1f:24:54:
                    d6:54:aa:8c:c4:b2:0e:1f:42:da:26:d9:21:25:83:
                    f4:c2:57:2f:f8:39:ed:c0:5e:ec:8f:af:99:e4:0b:
                    62:0c:54:98:79:22:66:c1:3a:1d:8f:35:fd:ad:8c:
                    46:2e:27:5a:2c:e7:1c:8b:af:d6:0f:27:49:a2:aa:
                    30:29:40:de:47:0f:59:c5:8c:ed:a5:19:ea:84:45:
                    63:7f:88:6c:40:37:58:f2:b3:36:36:f3:96:d3:c0:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:82:DB:48:78:F5:94:92:1A:BB:B5:6E:5E:16:5C:11:5B:6B:62:18
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:e1:ca:f0:8e:80:69:d2:77:26:59:5b:a7:ae:54:95:20:
         1b:c5:97:19:14:65:cd:16:b5:a1:e8:1d:92:46:34:5b:2b:f6:
         77:92:f7:2b:da:8c:49:36:da:38:af:a0:bc:51:27:0c:83:c8:
         4a:60:3f:aa:0c:dc:78:13:55:1f:da:d3:d9:7f:d9:21:16:e9:
         91:4f:84:25:5b:43:04:d5:a2:3a:b2:ab:92:cc:a4:1e:6c:83:
         27:3f:60:98:7c:bc:ec:f1:2b:06:81:34:12:74:cf:39:2f:37:
         59:ac:24:c8:c3:91:0e:76:8f:38:58:55:b4:93:a0:ad:da:0b:
         af:6a:a2:8c:27:89:2b:cf:9f:58:12:29:d4:8b:9b:0f:a7:92:
         14:84:d1:b4:f4:ed:d7:40:64:7c:5a:a2:24:01:d9:38:9f:b4:
         17:70:a3:30:bc:24:4a:11:06:e0:0d:f3:35:46:0e:25:20:a4:
         62:db:fc:80:01:f1:95:e6:b1:36:08:e2:ab:c0:8e:b4:13:44:
         a1:4b:3d:c4:ab:c2:73:8a:cf:92:c8:40:34:32:33:32:dc:58:
         05:9f:33:61:b2:dc:36:00:7d:78:37:56:9f:d5:60:48:32:ff:
         a0:81:d1:e3:17:9a:a2:76:c2:17:77:94:a9:7a:1d:4d:b4:ca:
         f7:b4:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:03:14 2025 by rpki-client