Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File:                     K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier:          VV05n6qyYj9VQfzMmNhKLI62681u92olfSDHYusYqss=
Subject key identifier:   64:88:34:A0:8A:B1:50:E9:F5:5D:31:BF:C8:11:F4:2C:74:16:13:29
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer:       /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number:          62
Signing time:             Fri 13 Jun 2025 05:59:21 +0000
Manifest this update:     Fri 13 Jun 2025 05:59:20 +0000
Manifest next update:     Fri 20 Jun 2025 05:59:20 +0000
Files and hashes:         1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: sj2gPPbaBSr1uuTfVfec79N2D8N9AYKzDrga0dkdm+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
        Validity
            Not Before: Jun 13 05:59:20 2025 GMT
            Not After : Jun 20 05:59:20 2025 GMT
        Subject: CN=684bbe38-7849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:31:c2:68:a3:93:4a:d3:b0:87:51:58:05:
                    51:49:76:8b:44:58:bc:a2:cc:a3:7f:dd:16:11:78:
                    d1:6c:4a:b8:7e:4a:6b:f7:6e:52:22:96:87:53:4d:
                    91:1d:34:f6:77:79:71:82:a5:40:9c:ee:86:a9:c2:
                    48:3f:ba:69:0a:22:30:fc:11:1d:b9:82:56:ae:9d:
                    ea:7e:85:89:f9:d9:7b:3d:b3:44:cb:d1:36:56:a7:
                    72:29:be:e2:45:f2:6f:89:f3:57:59:3a:77:17:dc:
                    ba:13:48:1b:7e:46:50:c9:df:34:15:20:15:c9:e4:
                    4c:f8:63:fb:20:ee:0b:98:15:c3:bc:63:b0:26:05:
                    6d:0b:76:11:a4:56:8b:17:b2:d4:9f:67:86:c0:c1:
                    1d:a1:2e:2e:83:23:34:3f:07:a0:b3:9d:40:0d:81:
                    ce:8b:d7:d6:e0:2e:3d:61:87:d6:87:b6:0f:04:b2:
                    5e:44:0f:dc:6f:1f:05:f7:0f:1d:5d:65:b4:1a:3c:
                    84:f1:88:4f:40:43:01:da:71:a0:09:96:3e:6a:17:
                    33:ea:37:84:73:3c:87:62:01:07:15:ad:82:09:16:
                    b1:4f:4b:5d:30:95:4d:df:7e:04:47:2d:0c:da:bc:
                    77:c8:67:15:1f:68:0f:ee:78:da:bb:e9:2c:f5:3d:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:34:A0:8A:B1:50:E9:F5:5D:31:BF:C8:11:F4:2C:74:16:13:29
            X509v3 Authority Key Identifier:
                keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:02:41:de:d9:1e:a5:fc:14:2d:b5:83:ff:70:02:b6:6f:
         66:71:d8:5f:c4:e1:de:a5:3d:d1:38:21:de:a7:9c:45:62:b4:
         f9:23:3f:3c:07:d6:52:8d:d9:5b:dd:76:19:dc:80:40:d6:22:
         d8:ce:0a:b4:3b:76:a9:19:18:76:4d:3f:e8:89:38:9f:9d:ed:
         59:9f:ff:9b:19:11:8f:66:46:c1:b1:13:9f:64:a9:eb:b5:51:
         83:5c:d8:7d:06:67:53:e6:4b:82:ed:99:72:ec:06:c2:8d:03:
         e9:79:17:78:f1:cc:13:35:6f:a0:85:48:6d:b6:be:39:ed:fc:
         67:1c:12:89:3b:bd:26:ff:82:0d:e5:5b:0d:cf:18:d4:50:f8:
         77:b8:69:e8:96:0c:30:c2:6e:20:b6:87:02:e1:f7:e9:79:b4:
         2a:16:e8:41:6d:af:13:f5:0c:97:bb:88:a3:c8:33:85:22:5f:
         78:6b:c7:ad:60:29:5e:c3:96:99:69:e4:ff:b1:68:87:87:7c:
         ec:b8:8a:fc:cb:df:45:3e:6d:d9:89:e2:4f:06:c3:fd:8a:0b:
         6d:0c:3e:8a:8e:77:9e:77:cc:c8:e7:9b:ce:8b:7f:4f:7c:23:
         c2:ee:92:bd:4c:37:26:e0:f7:a1:bd:6d:13:30:14:ec:f5:1a:
         ac:75:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:18:47 2025 by rpki-client