Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File:                     LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier:          S95ysA3OTImaDhzRA8Nx3pWwPayQpjyfjf5JRID8AKo=
Subject key identifier:   C7:33:47:93:DF:B0:3F:61:77:D3:CA:62:48:D9:9D:A6:10:47:3D:05
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer:       /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial:       05C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number:          05BD
Signing time:             Sat 14 Jun 2025 22:50:23 +0000
Manifest this update:     Sat 14 Jun 2025 22:50:22 +0000
Manifest next update:     Sat 21 Jun 2025 22:50:22 +0000
Files and hashes:         1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: gyZTGz0EZr515QjZ1FqM7IlJkAMBwUJVTjBGbFDKwyg=)
                          2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
                          rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
        Validity
            Not Before: Jun 14 22:50:22 2025 GMT
            Not After : Jun 21 22:50:22 2025 GMT
        Subject: CN=684dfcae-50d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:ba:6b:f8:50:90:3e:25:11:30:8a:b9:6c:
                    7b:d2:b1:ff:f7:27:25:72:d2:6c:43:9b:f9:ae:dc:
                    90:7e:83:4f:30:bb:41:c5:9e:90:c2:d6:3d:9c:3a:
                    9f:bc:af:05:b0:3c:ff:a5:07:2c:b2:35:f2:1b:b3:
                    c6:fc:dd:01:a8:cd:8a:63:5c:a0:17:ff:a2:b8:54:
                    fe:2f:7e:37:7a:56:22:3d:37:95:81:86:2b:1b:78:
                    0a:d3:54:34:f7:ef:a5:19:66:e4:a3:cf:8c:c0:2f:
                    f9:10:d8:31:d7:e5:75:fa:f2:2b:fb:2a:1b:12:57:
                    eb:75:a1:8d:ee:e4:84:f3:d1:26:52:65:a8:29:e7:
                    26:ef:2f:77:8b:24:5b:68:28:61:94:f9:05:fa:b5:
                    31:14:6f:56:45:2d:c9:ac:1e:f2:d4:75:bd:3e:ed:
                    6d:02:01:7c:24:dd:50:38:8a:2b:36:c7:63:d6:fd:
                    f1:6d:c3:42:79:1a:2b:7d:d0:ab:24:2d:e1:cb:5a:
                    a9:8d:07:fc:a9:0c:2f:2e:f8:20:83:bb:73:02:d0:
                    a8:83:c4:dc:64:4d:f8:3d:39:11:2e:66:21:b7:b8:
                    d8:54:07:6d:46:b7:aa:26:3c:c9:73:e0:04:a3:19:
                    c9:75:aa:90:3f:26:01:6b:27:c1:0b:70:ae:1f:d8:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:47:93:DF:B0:3F:61:77:D3:CA:62:48:D9:9D:A6:10:47:3D:05
            X509v3 Authority Key Identifier:
                keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:bd:a1:cd:53:cc:07:5a:79:cc:7a:f7:c8:4f:46:04:84:
         54:b4:20:a0:4a:13:94:2a:aa:db:a4:45:83:30:7a:66:40:2e:
         ef:86:44:64:92:96:08:5d:7f:64:d7:44:d3:b8:c1:74:f5:fb:
         55:9e:cb:9a:37:76:9e:b0:60:65:a4:04:a5:d0:75:31:36:5d:
         6a:70:e4:2c:fd:8d:74:8f:8f:7c:b3:da:de:40:af:f1:95:af:
         23:ee:9c:e6:90:b9:d7:29:04:63:8d:f5:65:d2:e9:b5:e0:e9:
         5a:ef:90:b8:d8:44:f4:f4:b3:7a:30:32:73:51:62:08:18:83:
         d6:5d:0f:ee:f1:16:b1:9e:04:69:79:c4:42:3f:b0:3c:ed:3d:
         6f:bc:ab:14:59:fe:9e:a3:0f:8c:84:cf:bc:a0:a4:b7:c0:70:
         4c:a0:31:c8:4a:e9:14:58:f7:fd:04:a4:2c:c1:55:5b:be:8c:
         19:16:33:8c:6d:b5:ee:30:6f:9c:78:8a:cf:c0:a3:e7:d7:71:
         6f:fc:05:02:9f:f6:d7:7c:68:14:6f:41:d3:49:d1:06:f9:e9:
         84:1b:24:ff:8d:23:f3:36:c6:be:17:b1:5f:9b:20:39:df:e0:
         d2:f1:d1:de:00:75:e3:fd:a3:1e:b0:ce:ee:85:e3:56:19:5e:
         ea:d1:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:17 2025 by rpki-client