Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          OVmtO/E1hRZtHjpp4UnLG1eC/rNf/y//ft6LOcAKeEs=
Subject key identifier:   6D:19:69:FB:89:14:06:DA:42:CD:54:61:C5:DB:C3:12:DC:39:54:6B
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          0623
Signing time:             Wed 02 Jul 2025 23:05:53 +0000
Manifest this update:     Wed 02 Jul 2025 23:05:53 +0000
Manifest next update:     Wed 09 Jul 2025 23:05:53 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: nXxZAAj3oXiJxaIYMvImx1UrlS0puJ3xmC2Hfstny2Y=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Jul  2 23:05:53 2025 GMT
            Not After : Jul  9 23:05:53 2025 GMT
        Subject: CN=6865bb51-010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:5d:39:5f:49:86:a1:37:c7:a5:ce:cf:7c:
                    d2:76:bf:6e:30:4f:17:9a:f3:cd:4c:fc:65:4b:54:
                    b9:4f:5c:55:5d:77:fe:f0:7c:8a:30:d3:85:f6:fb:
                    64:04:34:a5:a9:c0:6b:32:4e:18:87:9e:4e:cd:94:
                    12:82:7c:c8:d1:e9:4d:93:bc:70:2c:d5:88:b7:c6:
                    e3:70:59:5c:86:9d:6a:c6:ba:2e:10:84:f6:f9:1f:
                    77:6e:92:1d:37:10:d0:11:f0:4f:c2:66:ec:e5:bf:
                    4a:d9:0a:af:dd:16:9b:12:ea:db:93:55:dc:7e:ec:
                    8c:a1:84:4d:bb:16:7f:32:41:46:93:97:97:5f:d0:
                    5b:94:fc:28:5c:89:ce:69:91:cc:1c:12:c4:49:3a:
                    5c:e3:08:5c:9c:fb:62:a3:bc:84:00:08:7f:87:3c:
                    f1:ef:a9:67:e7:6e:cc:a6:97:09:73:0e:f9:83:2f:
                    33:ad:98:58:0d:3c:d6:d1:60:29:7c:90:ea:42:fc:
                    2b:9a:5c:47:4f:0f:ba:6b:09:36:a2:ed:a6:ab:74:
                    43:6e:ff:02:bc:f6:59:8e:30:de:57:32:e7:c9:c5:
                    f0:ad:39:42:8c:2a:cb:56:e3:b7:cd:b1:9a:8d:bd:
                    1d:ba:f0:42:98:c3:b9:f4:37:65:13:44:02:ea:34:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:69:FB:89:14:06:DA:42:CD:54:61:C5:DB:C3:12:DC:39:54:6B
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:04:bb:a8:b1:ac:56:d9:e1:a7:09:10:5d:d4:7a:f2:8d:
         12:79:22:e8:73:80:1d:95:a3:7a:ee:ac:d4:87:d1:83:dc:05:
         3a:e6:4c:a6:c9:b1:c9:40:d0:51:13:ec:72:7b:0c:4c:e4:bb:
         24:0d:0a:98:9a:19:c9:dd:3d:3d:48:6f:18:98:7f:67:9d:17:
         16:2b:dc:74:c5:e4:6c:78:62:07:98:14:91:54:b2:6a:05:a9:
         c5:b9:21:58:11:0c:32:3a:60:fb:64:94:5b:46:c9:ad:83:45:
         59:7e:54:65:5b:fe:38:2d:22:50:2e:54:70:b3:31:87:99:ae:
         a0:ed:16:13:3b:84:54:20:a8:ad:17:49:c7:cf:37:ee:74:43:
         63:a7:0d:cd:d4:54:ef:73:45:28:ea:e9:b2:43:7e:9c:8a:b2:
         00:20:c4:ea:0d:36:a9:12:9f:e1:d5:6c:61:d7:37:28:09:d3:
         48:86:a9:af:21:26:99:3f:aa:c3:44:66:7e:2a:12:36:77:33:
         4d:b3:74:8a:6c:58:da:ba:98:91:09:03:06:8e:f1:9a:cd:cb:
         98:6e:d7:fd:af:92:01:11:4c:f7:cb:a5:32:15:00:ea:0e:64:
         81:6c:b5:34:a2:a1:96:bb:4b:82:09:a0:25:18:54:85:e1:a6:
         48:9e:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:50:07 2025 by rpki-client