Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          CLbPNin21j3a97bz4YqkLlSmoU1qqEAFFwFXNCW3QL8=
Subject key identifier:   EC:7C:C4:0F:A9:B7:03:9C:DF:73:2D:90:CA:40:78:47:1C:04:E9:DA
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          61
Signing time:             Tue 13 May 2025 06:15:15 +0000
Manifest this update:     Tue 13 May 2025 06:15:15 +0000
Manifest next update:     Tue 20 May 2025 06:15:15 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: OZtRccbsWWoas74YkAaHTYTeWPyCJ5rP+YB8Oe6eSbk=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: May 13 06:15:15 2025 GMT
            Not After : May 20 06:15:15 2025 GMT
        Subject: CN=6822e373-ad17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:7a:86:ec:7b:51:bf:b5:ed:8b:f0:0b:fd:
                    3e:74:12:fd:c8:86:30:48:3d:e7:a7:ed:b2:5a:e4:
                    dd:59:27:a6:ef:30:66:58:62:5f:02:b6:92:31:d7:
                    14:e1:be:43:4e:d6:5e:25:42:16:de:0d:7d:76:55:
                    a5:7e:be:b6:83:44:de:54:62:4b:f8:ff:c1:61:27:
                    ee:6a:1e:5b:61:2d:db:0b:7f:52:47:09:f0:ad:cf:
                    36:54:82:22:cf:6d:4a:90:9d:7d:84:c3:5e:7e:86:
                    a0:3f:b0:b5:62:71:07:93:13:ca:43:ea:e4:c6:65:
                    bd:26:ca:6a:71:79:ea:3a:e5:60:2e:82:af:f0:55:
                    9b:2a:a8:67:5c:be:3a:b6:12:20:a5:35:ae:5f:3e:
                    c8:3f:74:14:4c:31:93:58:01:c2:ac:36:e8:75:fe:
                    8c:2c:d2:5a:27:51:a2:4f:54:e9:ab:ef:9b:b7:f2:
                    e3:64:67:cf:d8:e6:f7:01:96:7e:e9:5c:3b:ca:84:
                    c7:25:a2:07:30:a3:0c:54:2d:8f:0c:42:e5:62:5f:
                    87:a3:30:bf:04:6d:b3:35:98:15:fe:b8:45:fc:ca:
                    ae:d8:6d:1d:e8:3e:25:f1:a8:17:34:22:ac:fd:a1:
                    8e:cc:c4:2b:2c:78:83:05:8d:d8:7e:15:81:60:30:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:C4:0F:A9:B7:03:9C:DF:73:2D:90:CA:40:78:47:1C:04:E9:DA
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:06:e8:8e:f3:73:ad:30:7b:e7:e3:94:18:e9:15:87:0a:c4:
         d9:54:6a:02:8e:a9:51:29:67:10:04:fb:2a:72:5e:e1:b8:67:
         0c:0b:d8:34:09:f9:cd:37:bf:5c:01:3c:0f:25:c6:00:92:d9:
         c9:42:35:81:7a:5b:53:c6:19:d2:39:f1:0e:0d:64:98:db:7e:
         9a:ca:07:73:c9:d0:8e:bc:c0:ab:84:f1:56:32:03:68:1e:f4:
         5d:bc:ac:3f:3e:aa:da:85:77:73:d6:14:ca:d9:8d:8e:02:62:
         f6:3f:88:ed:bd:cb:66:86:f8:f5:e2:9f:3a:63:69:f1:69:5d:
         62:97:60:5a:a4:38:49:5a:69:3e:e3:79:6f:cf:e7:97:c1:e9:
         0b:5b:a3:10:f9:cf:94:75:cc:d1:90:20:87:e7:44:bd:18:9e:
         93:5f:03:a3:88:d2:a5:83:fe:88:fa:70:02:41:46:80:9a:5e:
         49:bc:e9:e9:d2:60:1e:75:d3:a6:87:92:c2:8b:e8:09:f8:43:
         ec:4c:c0:39:05:8c:f7:c3:92:a7:c9:ea:8c:e3:e5:f9:35:fe:
         40:af:4d:e9:a8:c3:86:9b:8b:a3:6d:09:db:f2:7b:a4:0f:15:
         11:bb:27:16:1a:53:a5:26:9e:15:db:0e:31:46:fb:33:36:d0:
         98:31:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:01:44 2025 by rpki-client