Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          DNDX3keI9uwljK/0DH0I5dO2mEaQZbZeA/1Xr2o9uEo=
Subject key identifier:   C7:37:5F:10:B0:50:18:F5:9B:F8:4A:3A:4F:49:CB:F9:C1:A4:C6:29
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       060F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          060A
Signing time:             Mon 12 May 2025 22:39:17 +0000
Manifest this update:     Mon 12 May 2025 22:39:16 +0000
Manifest next update:     Mon 19 May 2025 22:39:16 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: Q51uJqlcOuSbswzImQcTqyLxZGUwCODjZtkIPRBzB5M=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: May 12 22:39:16 2025 GMT
            Not After : May 19 22:39:16 2025 GMT
        Subject: CN=68227894-44b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:d4:0f:c0:93:e5:8f:a1:7d:41:d0:ad:8b:
                    29:f1:2a:bc:2a:73:8c:0e:98:88:2a:7f:59:62:09:
                    e0:30:31:03:f7:f5:82:6f:f5:46:20:db:d3:b5:2d:
                    91:57:61:53:d6:8e:df:6d:95:9a:49:86:fd:31:ad:
                    98:2c:8c:ce:22:d0:02:b9:8f:36:24:3f:fb:be:09:
                    d7:b7:4b:44:8d:b2:9d:66:88:35:20:e0:ae:70:41:
                    12:64:0c:86:1f:4d:8a:73:85:b3:ce:bc:4a:2b:0d:
                    ed:7d:cd:13:ad:94:d2:2c:4d:ed:87:c9:97:21:63:
                    2c:56:19:76:d7:94:1f:fd:8d:2c:37:f2:42:57:4a:
                    fd:16:47:a6:e3:27:2d:af:25:e8:73:c4:73:de:27:
                    e2:95:2c:18:ff:ce:5d:1b:2b:5e:18:e0:ca:4e:ae:
                    5d:78:01:33:92:51:cb:1d:2e:dc:d8:96:61:11:52:
                    06:20:f6:7d:b4:49:ed:9a:d4:f8:54:d6:0b:93:28:
                    b6:e5:fd:4f:b9:a1:cd:9e:c4:7f:de:7e:6f:f3:ce:
                    f9:49:80:58:21:40:30:e0:e2:44:86:97:d0:6e:ff:
                    c4:a3:eb:6c:a1:df:55:78:04:8d:e8:90:7a:0c:74:
                    38:39:c4:f9:d6:a7:e1:85:40:14:bf:3b:fd:b1:ec:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:5F:10:B0:50:18:F5:9B:F8:4A:3A:4F:49:CB:F9:C1:A4:C6:29
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:79:98:ff:ea:82:59:55:e3:15:f7:2d:01:97:22:a9:b1:
         4f:19:3f:77:81:04:45:dc:60:35:c6:3f:30:75:6e:27:fb:96:
         04:8c:e5:c9:21:c4:0e:1d:c9:c1:69:1e:1b:d3:0c:08:2d:8b:
         97:91:6f:c4:ee:31:01:ed:51:9a:e4:3c:c9:0b:66:e3:aa:45:
         7c:a7:a4:7b:7e:d1:2c:df:f4:7f:69:f8:b6:8a:6f:31:ff:5d:
         a5:42:6e:78:2d:7f:04:a5:97:0f:c1:c4:36:94:a5:ac:fc:ef:
         b9:97:db:af:75:5d:04:8c:c9:6d:3e:e9:58:e8:10:a8:4e:65:
         d1:57:60:47:86:c8:5f:7f:54:26:29:07:ad:d7:82:59:dc:51:
         73:97:0d:86:e4:77:b0:75:1a:94:ba:d8:1c:63:70:17:5b:d9:
         82:14:3b:b3:a4:87:4d:b4:cb:3a:63:b7:5b:87:4f:77:f5:c4:
         c7:ea:c9:43:f7:94:a3:d5:e0:ef:f0:a9:bb:78:bd:fc:a4:96:
         35:ed:a1:4b:7e:9a:c1:46:93:c3:d9:72:fc:fd:90:b8:fc:d8:
         cf:34:1b:96:17:83:77:14:30:4c:04:27:a0:b7:f7:d9:0b:4a:
         62:c0:8b:2e:17:50:1a:50:6b:f0:93:95:6c:49:8e:5a:2b:77:
         38:c1:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:50:22 2025 by rpki-client