Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File:                     LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier:          bTeZqHr2UmIWEEeFz4nhUKSI23FykVlR6VY843z2YiE=
Subject key identifier:   E4:60:A4:73:88:5E:B3:9C:63:60:EF:F1:46:3B:E8:C3:94:2B:1E:4F
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer:       /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial:       05CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number:          05C6
Signing time:             Wed 02 Jul 2025 23:22:39 +0000
Manifest this update:     Wed 02 Jul 2025 23:22:39 +0000
Manifest next update:     Wed 09 Jul 2025 23:22:39 +0000
Files and hashes:         1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: 5uMXoeQ28LmyJ4oJ72hz07sV2ptHWYCBhMUzkxOsY90=)
                          2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
                          rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
        Validity
            Not Before: Jul  2 23:22:39 2025 GMT
            Not After : Jul  9 23:22:39 2025 GMT
        Subject: CN=6865bf3f-5eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:15:c1:cf:d0:70:0d:d6:71:ae:a5:cc:5b:
                    6b:93:91:b4:95:0f:dd:56:8c:53:09:a8:8a:3b:9e:
                    2f:8b:53:d1:1a:c4:3c:33:93:03:7a:fa:03:de:74:
                    9d:49:a4:49:45:49:49:cd:e2:76:f4:8d:13:bf:0f:
                    f4:39:ec:d9:86:1e:ee:98:59:f2:58:71:af:9a:94:
                    ca:fe:e0:fa:cd:d1:e2:ff:e7:87:b3:3a:db:e7:68:
                    c8:64:f4:d2:02:d0:12:1d:b5:08:4a:b3:24:35:1e:
                    fa:cf:07:ff:91:f8:d7:a6:b6:23:13:a8:f3:ba:48:
                    21:c6:14:bd:79:e9:15:af:e8:06:ce:bd:ca:11:1c:
                    a8:97:2a:b2:3a:c0:7c:81:be:1d:72:59:4d:11:94:
                    be:12:b1:11:44:2d:ea:df:ac:9e:4b:45:19:fb:d6:
                    d8:f7:e6:ae:58:56:ea:9b:ff:bf:68:37:02:e6:68:
                    01:00:4e:0a:00:69:f5:20:ba:ef:22:22:09:77:dc:
                    2c:1e:8e:70:4c:b6:d8:93:70:24:b5:64:e8:13:f3:
                    99:e9:bd:ae:fc:ee:f9:92:79:c2:ed:53:0c:fd:a9:
                    37:7e:de:c4:8c:8e:b4:6e:26:21:57:d2:34:55:ef:
                    fc:64:bf:57:41:3f:fd:81:ae:d8:c8:a3:dc:c3:9b:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:A4:73:88:5E:B3:9C:63:60:EF:F1:46:3B:E8:C3:94:2B:1E:4F
            X509v3 Authority Key Identifier:
                keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:85:0c:6c:49:fc:53:d1:c3:ea:b6:0a:ae:5d:b8:dd:04:
         e2:16:ed:b3:fe:4f:69:35:2d:fb:40:7a:d8:c8:88:42:49:ba:
         7b:ac:65:14:36:0d:35:54:77:18:5c:19:48:ef:46:cb:6e:2d:
         46:48:84:18:75:f7:e9:95:6b:c5:0c:b2:91:3b:23:9c:db:0b:
         ef:54:12:ad:2f:2b:5e:26:70:43:06:76:99:15:89:09:b4:8f:
         7c:22:f9:2b:01:70:63:ae:f1:ab:bc:7d:ba:4d:67:bd:5f:41:
         52:13:3a:b6:5c:c5:83:31:4f:51:71:4f:3b:88:51:10:07:ef:
         ff:66:2b:84:24:84:02:af:93:5c:c6:df:a5:6e:e0:86:ad:f9:
         2c:03:28:e3:05:67:8e:48:4b:d9:6d:b8:fa:e5:f7:d2:e3:0a:
         92:ab:07:c1:3d:6b:fe:fa:1e:9d:2e:42:53:d4:28:e2:bf:3f:
         94:a1:0c:e6:a0:6a:b3:07:75:78:7a:d9:94:18:81:5f:03:67:
         dd:0b:b2:c4:bc:9c:2c:b6:d1:64:55:10:b6:d1:14:f4:9a:b4:
         f3:6d:6a:e0:f2:4d:22:64:83:46:f7:b9:d9:de:32:83:2c:77:
         38:85:e9:f7:1c:fb:9a:a8:19:a3:45:ae:66:5e:f7:b7:ac:26:
         39:55:af:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1
MzA2MTM2QzEwHhcNMjUwNzAyMjMyMjM5WhcNMjUwNzA5MjMyMjM5WjAYMRYwFAYD
VQQDEw02ODY1YmYzZi01ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPUVwc/QcA3Wca6lzFtrk5G0lQ/dVoxTCaiKO54vi1PRGsQ8M5MDevoD3nSd
SaRJRUlJzeJ29I0Tvw/0OezZhh7umFnyWHGvmpTK/uD6zdHi/+eHszrb52jIZPTS
AtASHbUISrMkNR76zwf/kfjXprYjE6jzukghxhS9eekVr+gGzr3KERyolyqyOsB8
gb4dcllNEZS+ErERRC3q36yeS0UZ+9bY9+auWFbqm/+/aDcC5mgBAE4KAGn1ILrv
IiIJd9wsHo5wTLbYk3AktWToE/OZ6b2u/O75knnC7VMM/ak3ft7EjI60biYhV9I0
Ve/8ZL9XQT/9ga7YyKPcw5tGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORgpHOI
XrOcY2Dv8UY76MOUKx5PMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3
MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF
MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsNIUMbEn8U9HD6rYKrl243QTiFu2z/k9pNS37QHrYyIhCSbp7rGUU
Ng01VHcYXBlI70bLbi1GSIQYdffplWvFDLKROyOc2wvvVBKtLyteJnBDBnaZFYkJ
tI98IvkrAXBjrvGrvH26TWe9X0FSEzq2XMWDMU9RcU87iFEQB+//ZiuEJIQCr5Nc
xt+lbuCGrfksAyjjBWeOSEvZbbj65ffS4wqSqwfBPWv++h6dLkJT1Cjivz+UoQzm
oGqzB3V4etmUGIFfA2fdC7LEvJwsttFkVRC20RT0mrTzbWrg8k0iZING97nZ3jKD
LHc4hen3HPuaqBmjRa5mXve3rCY5Va9z
-----END CERTIFICATE-----
Generated at Thu Jul 3 04:30:10 2025 by rpki-client