Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
File:                     Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json)
Hash identifier:          8KlxOtotTBCNK9+MLuhbOmERv/9r9vn/Y/8tMXTO5Xw=
Subject key identifier:   18:59:DE:75:A4:3E:7A:E5:EE:71:B5:3C:51:34:6D:86:BE:EA:B3:9B
Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
Certificate issuer:       /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
Manifest number:          014F
Signing time:             Tue 17 Jun 2025 03:14:19 +0000
Manifest this update:     Tue 17 Jun 2025 03:14:18 +0000
Manifest next update:     Tue 24 Jun 2025 03:14:18 +0000
Files and hashes:         1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: BTy2+6JPQkayLM3LEglWNYU7c1wPb4EZZQyVC0DwFcc=)
                          2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 03:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
        Validity
            Not Before: Jun 17 03:14:18 2025 GMT
            Not After : Jun 24 03:14:18 2025 GMT
        Subject: CN=6850dd8b-c1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:8d:e3:27:5b:b1:17:08:79:c1:39:e5:e9:
                    b1:39:f2:cb:66:32:5d:1a:d3:f6:40:de:f0:08:ea:
                    dd:e6:81:2d:75:c8:1b:8f:93:2e:24:03:04:e0:53:
                    12:be:d2:84:a5:a2:74:aa:1a:06:3b:1a:84:73:ca:
                    eb:73:c6:47:18:6b:92:1b:02:2c:33:f5:63:91:1c:
                    74:c4:08:ff:30:de:a9:df:b3:43:6b:75:05:e7:19:
                    81:7e:72:c8:ad:61:69:02:be:24:33:82:b8:50:4a:
                    e6:28:e5:f7:ca:b2:0e:b0:ea:ab:ae:e2:0b:e5:5f:
                    e5:45:ca:48:cf:5d:28:ad:e1:81:b4:30:a5:56:0c:
                    d5:f0:d3:ca:9e:51:00:41:d8:44:1e:77:c8:50:0d:
                    e7:99:08:65:a0:97:8e:3a:98:89:9b:ae:5a:c0:e6:
                    fb:f4:b3:ea:38:45:5f:f3:58:1d:3f:55:8d:16:3e:
                    3c:4a:07:7c:ac:b6:08:34:0b:d7:2c:f9:2b:27:b7:
                    03:59:69:fe:a3:93:ad:4c:33:97:ad:16:2e:cb:b0:
                    c5:fe:56:5c:26:4d:7f:8e:ea:7b:9c:a3:64:3e:a8:
                    de:24:88:ed:4f:c9:86:3e:ca:11:c5:2b:0a:b6:19:
                    cb:32:33:21:59:ff:66:af:cc:ef:91:e8:8f:e4:98:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:DE:75:A4:3E:7A:E5:EE:71:B5:3C:51:34:6D:86:BE:EA:B3:9B
            X509v3 Authority Key Identifier:
                keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:07:9a:0d:81:7f:46:a4:c3:3d:56:14:04:99:8d:33:ce:5a:
         e8:3a:e6:c6:c1:e6:44:a2:0f:4d:09:e3:69:7f:f1:08:03:9c:
         d4:99:0e:b6:f8:a5:a2:0d:33:68:7e:2d:c4:78:9e:36:e4:fe:
         03:11:f8:64:02:cc:7e:46:61:b5:94:a5:66:5a:e6:2a:67:ef:
         fb:8f:82:db:67:1d:2d:4e:80:a4:72:e6:09:bd:f9:11:bb:1a:
         9c:fc:4b:9a:bc:86:fc:73:a0:ff:c8:ae:30:8e:99:c8:f7:8a:
         48:68:41:1e:27:63:74:d7:2f:27:7d:17:fa:f3:46:f0:fd:80:
         81:0b:d2:cf:2c:01:82:4f:d2:5e:1d:24:d1:7e:39:93:fd:a0:
         42:74:2d:0e:61:52:f2:85:e1:39:dc:c2:f3:60:d5:24:bf:6b:
         fa:52:d0:5c:b0:15:ca:77:a8:e4:56:7c:98:0e:24:1c:e4:78:
         89:35:01:85:59:3d:c5:06:88:15:5c:fb:a1:e2:13:eb:ca:46:
         cc:7e:e9:34:b7:85:cc:0d:67:4b:c7:e5:ce:b9:14:81:12:7c:
         20:fa:87:fb:0b:5f:11:00:db:b6:58:d9:f1:64:71:d1:c2:07:
         e1:e4:9a:84:f7:92:78:2a:f3:6b:a1:92:7d:2d:16:00:f5:5d:
         93:67:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:03:49 2025 by rpki-client