Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File:                     l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier:          htrDso6r7WtPoEB9F6TCQxTculKJfnElTxZjsxuZwZs=
Subject key identifier:   8A:5B:67:8B:D4:92:E4:34:06:11:10:AF:32:A3:76:6A:73:AE:78:E7
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer:       /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number:          07A6
Signing time:             Thu 12 Jun 2025 20:59:44 +0000
Manifest this update:     Thu 12 Jun 2025 20:59:44 +0000
Manifest next update:     Thu 19 Jun 2025 20:59:44 +0000
Files and hashes:         1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: 1vBOj0zqph4uDYdvlEcP90yAze/VN2y8nVrrcJ+qFME=)
                          2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
                          rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
        Validity
            Not Before: Jun 12 20:59:44 2025 GMT
            Not After : Jun 19 20:59:44 2025 GMT
        Subject: CN=684b3fc0-9614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:fb:c6:40:ec:40:03:15:a3:5e:64:ad:a1:
                    94:4e:47:88:e4:ff:b7:49:68:5c:69:28:53:26:6c:
                    0f:6c:6e:3d:2c:54:db:c8:c9:2a:20:45:0f:1e:23:
                    ca:6e:99:2a:17:60:f2:1c:9a:dc:b6:1f:40:b7:b5:
                    d1:b9:e4:b3:86:6d:5d:13:e7:ac:12:6e:9f:36:05:
                    e7:c5:97:66:da:cb:c9:ab:c9:32:e4:1c:58:55:b6:
                    c9:66:89:33:d1:4a:cc:5e:14:32:1c:74:2c:11:a3:
                    cf:ab:67:86:97:a4:9f:41:79:76:2d:fa:5f:39:99:
                    c1:b8:bc:d4:37:fa:e1:92:a8:4c:e0:0c:f3:d7:a2:
                    5c:06:d9:af:ed:29:05:5c:40:e3:a9:66:f3:2d:6f:
                    cb:6b:de:9f:2c:f6:15:fc:e9:9a:8c:2e:4d:53:db:
                    5c:71:4b:8a:c2:5a:b0:9b:20:bb:2b:52:28:fc:ad:
                    3f:20:b5:ed:48:06:57:f8:d4:b0:77:49:32:0f:57:
                    12:fa:c9:33:5a:3d:f4:04:99:3b:be:91:cd:2c:16:
                    85:48:33:7d:cf:4c:21:42:09:b3:35:46:5b:de:a9:
                    43:38:31:85:ee:f7:c3:c1:15:ea:12:ce:23:b8:74:
                    3a:c7:cf:81:50:48:8c:28:dd:cf:8a:cd:03:c9:e5:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:67:8B:D4:92:E4:34:06:11:10:AF:32:A3:76:6A:73:AE:78:E7
            X509v3 Authority Key Identifier:
                keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:e9:da:b4:7a:44:00:14:4a:5c:4e:6e:6e:b4:e8:4e:43:59:
         d7:d0:fc:33:9c:6d:e9:93:e7:9f:35:cc:89:52:ec:46:60:54:
         00:5d:89:b7:dc:58:01:79:e7:d9:40:25:6c:f4:25:c2:3e:dc:
         e5:f5:6f:97:6b:45:ef:1f:d4:f6:d6:03:f8:96:65:3d:f1:5e:
         97:4b:4a:fa:2b:e6:4f:f2:10:1b:78:43:6e:e2:ee:f5:c8:9e:
         79:c5:dd:f9:f6:18:b5:54:ae:23:be:30:17:df:25:99:ba:01:
         76:b4:93:b6:5c:53:8b:59:60:e4:54:ee:c3:d4:20:84:db:f8:
         84:d0:e7:dc:85:ec:0c:45:e8:8e:65:5f:27:a3:72:d1:d5:cf:
         c7:6c:4a:8e:03:56:17:ca:0d:5c:6d:0b:83:d6:ef:57:46:ef:
         45:bb:a6:6c:24:09:e8:57:d6:52:16:ab:4e:c0:3b:f9:b8:06:
         47:6b:10:82:2c:26:43:62:3e:1b:ea:0d:22:eb:3d:45:2d:17:
         2e:5d:01:f0:c8:40:2b:2c:49:92:2a:96:82:5e:24:a8:16:99:
         67:6c:f7:31:a8:e2:13:7c:c0:9e:ff:48:b9:05:8d:89:9e:4c:
         af:17:eb:c0:54:16:21:f6:c0:d8:4e:96:7f:01:66:eb:f1:d1:
         3c:97:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:03:29 2025 by rpki-client