Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
File:                     tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json)
Hash identifier:          AmoqI0TRgX5VDc5p1yNsTtgee3062d8YvF6DEg2jyQA=
Subject key identifier:   8A:3C:1B:7F:80:03:5C:C5:BE:98:05:40:54:37:26:9D:89:F2:83:6B
Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37
Certificate issuer:       /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
Manifest number:          0113
Signing time:             Sun 29 Jun 2025 03:56:16 +0000
Manifest this update:     Sun 29 Jun 2025 03:56:16 +0000
Manifest next update:     Sun 06 Jul 2025 03:56:16 +0000
Files and hashes:         1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: 1iF69Oew9ECGKyAkdCpm+x3FBiwZaQzkzfd8uFVK4eM=)
                          2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 03:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
        Validity
            Not Before: Jun 29 03:56:16 2025 GMT
            Not After : Jul  6 03:56:16 2025 GMT
        Subject: CN=6860b960-06e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:c0:45:8c:e9:e8:38:f8:67:bc:47:76:5a:
                    4b:bc:52:c6:3c:4f:dc:0d:2b:06:f8:fb:59:18:4e:
                    90:b7:1a:3a:69:c0:68:20:9a:79:09:bf:97:66:ea:
                    2b:c4:bf:62:a9:3e:e0:38:97:f4:fa:8d:1a:3b:b5:
                    47:53:b0:88:bb:73:3c:b8:1a:b2:8b:d4:f7:48:49:
                    68:14:56:aa:90:8a:eb:52:b3:a8:73:5a:96:ce:fa:
                    2c:e4:a4:bd:4d:41:24:96:03:44:c2:ef:57:ee:5b:
                    e0:77:dd:cd:71:6c:15:57:fb:85:b1:cd:10:a3:fd:
                    fb:70:47:62:57:14:86:a9:66:c1:66:19:42:ce:96:
                    25:89:a0:8b:d1:39:ae:8a:8b:7f:bf:36:0d:38:b3:
                    5d:18:72:92:ce:85:1a:ac:7e:cc:05:96:33:00:61:
                    6a:38:6f:e2:51:ab:e8:f7:d1:10:71:79:f1:dc:fb:
                    ec:c4:14:f2:83:27:4e:03:a1:d1:76:42:32:ed:b6:
                    31:93:1e:dd:58:03:6d:5b:d6:5f:2b:02:e5:e9:85:
                    4e:4d:f5:3e:b4:a6:2e:8c:d2:47:9e:7c:b5:b2:de:
                    b1:73:2a:f2:9d:80:67:a4:43:04:70:bf:bf:99:aa:
                    ea:52:20:1a:5c:c3:95:34:d4:ef:8a:90:55:29:77:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:1B:7F:80:03:5C:C5:BE:98:05:40:54:37:26:9D:89:F2:83:6B
            X509v3 Authority Key Identifier:
                keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:43:b5:46:4d:a4:2f:73:d9:7b:2f:1d:77:12:ea:97:5f:78:
         a8:d9:6b:7a:00:6a:da:ed:8e:15:82:5d:da:a1:9b:23:81:f9:
         4f:b8:73:13:16:49:fd:5e:c5:d8:36:cc:3d:b6:61:75:b1:72:
         25:94:96:1c:ab:48:0a:a5:32:86:4e:b6:90:33:2d:03:37:1d:
         2a:d0:e3:51:62:e5:0a:c4:7e:99:32:21:b2:fa:e3:de:0e:5f:
         93:33:31:2e:74:d6:33:cc:42:79:a9:79:9b:32:c9:58:70:73:
         e7:a8:0c:05:76:da:9f:fc:01:e3:a7:0c:bb:f3:67:8a:d2:b9:
         4b:97:80:22:d2:33:1c:e2:d0:96:d6:9e:82:0d:ce:c2:f4:a3:
         dc:31:7d:a8:00:86:30:85:29:a8:0b:38:ce:ae:06:e1:a5:99:
         55:de:c1:df:a8:ab:ed:7a:e6:ad:c5:2d:ba:8b:cd:40:27:d3:
         88:61:9b:6b:53:05:02:75:77:e3:9c:76:85:4a:6e:25:f1:37:
         d9:f0:c9:c0:3c:9f:f6:63:4f:8e:1b:6a:ef:83:02:86:9d:f8:
         52:10:8d:5a:7d:27:3c:b4:31:ab:e4:db:9f:67:e4:04:94:26:
         70:f9:49:68:a0:c5:62:96:5c:12:67:39:90:17:3a:d9:8d:42:
         c1:ce:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:07 2025 by rpki-client