Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          5vt8igi8y7HAAnnKhZ/FEv1GtB7Vwjaw322NxonGGhY=
Subject key identifier:   89:70:E7:1D:D6:CE:2B:57:42:34:85:F9:F9:56:E3:29:73:B5:7C:8C
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          69
Signing time:             Fri 13 Jun 2025 05:55:22 +0000
Manifest this update:     Fri 13 Jun 2025 05:55:21 +0000
Manifest next update:     Fri 20 Jun 2025 05:55:21 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: IA1Lq2o8wh5imV1/mepdnZHn5XsBYDzVjFTJvskoNRc=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: Jun 13 05:55:21 2025 GMT
            Not After : Jun 20 05:55:21 2025 GMT
        Subject: CN=684bbd4a-bf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:9d:44:8b:6e:c2:a4:a4:e6:b6:2b:87:1e:
                    d5:b7:42:b0:5d:81:7c:a8:39:23:a8:58:0c:e4:98:
                    4d:d1:07:cf:ca:2d:bc:a1:ae:a3:5f:7a:ca:8e:df:
                    e5:51:05:33:55:ed:00:56:2b:2d:09:5f:9e:28:60:
                    15:9d:6f:08:38:49:82:ac:7a:6f:86:77:28:52:53:
                    8d:43:99:a7:c9:28:e1:6a:22:af:8b:c4:fd:c7:4d:
                    e4:bb:b8:fc:8f:b1:00:dc:29:e2:14:40:4e:18:da:
                    f6:c5:3b:dd:7d:40:1b:b2:7f:79:4c:4a:bf:81:b5:
                    d5:96:16:e9:a3:0a:ff:0d:0f:74:2c:3c:df:a8:35:
                    bf:c6:e9:4c:58:33:e1:4d:b2:9e:d2:ea:2a:f3:61:
                    88:99:84:c5:5e:81:c6:87:be:12:65:ba:53:71:3d:
                    71:5c:53:aa:e1:93:3b:5c:97:d2:ba:ca:68:df:ab:
                    9d:98:7e:df:c7:70:a6:eb:57:2d:1b:41:61:1e:12:
                    9f:6c:65:d4:cc:3e:96:e6:bd:00:6c:67:61:26:b4:
                    5e:22:b1:c6:bc:93:46:b3:4a:74:dc:0a:d1:ff:88:
                    21:8d:c1:eb:39:30:1e:4f:47:bf:53:f1:27:7c:20:
                    f9:7c:ba:7d:f1:4a:27:58:29:f1:9b:cf:d9:55:9c:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:E7:1D:D6:CE:2B:57:42:34:85:F9:F9:56:E3:29:73:B5:7C:8C
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:78:8d:63:e5:1c:bf:50:ca:cc:1f:8a:c5:db:46:eb:26:86:
         4e:0b:fa:ec:04:88:67:3a:c9:ec:ac:1e:af:2e:02:d4:7c:58:
         49:b7:b2:73:9e:ba:4d:fb:fb:e0:8d:b5:40:b8:1b:2e:da:c3:
         57:8c:ce:d9:be:42:05:7c:ee:fc:34:3c:4b:31:41:d6:32:cb:
         51:68:b8:4e:e0:d7:fa:e2:bf:36:94:9d:c1:58:6e:7f:10:73:
         40:87:47:28:a9:67:22:54:66:d6:c1:e1:37:a6:d6:06:ed:d1:
         72:c1:4b:fc:83:df:3f:28:80:20:2e:08:f2:4d:a0:80:4a:59:
         db:d7:80:8a:50:3f:ac:6f:d5:19:3b:94:5c:48:9f:9d:1d:8a:
         d5:71:db:a7:a6:9f:1b:f2:c7:82:08:a9:23:6c:64:a9:6e:26:
         2e:55:d3:fa:09:6f:b6:9d:17:8f:8b:d7:26:c7:c8:54:68:f3:
         7f:ea:f5:69:81:e0:2d:47:08:dd:0c:35:63:06:d3:7b:72:d1:
         c5:93:83:00:8b:20:50:59:a0:b2:26:56:81:53:81:e7:61:d6:
         42:ba:2a:bb:6c:c5:c1:e6:d5:5b:25:e9:b8:c9:eb:e4:27:55:
         87:1a:d8:91:28:fe:60:54:3a:04:69:cc:52:d1:cb:c1:0b:2a:
         43:cc:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:20 2025 by rpki-client