Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          t+LzX8d/ljF4eXAKfqg/PQo9TzoXqVZTCUwlPzLVc5g=
Subject key identifier:   19:20:71:67:9A:0E:CF:F6:3D:71:08:71:F5:38:19:A3:F5:62:D3:39
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          B2
Signing time:             Thu 03 Jul 2025 06:13:31 +0000
Manifest this update:     Thu 03 Jul 2025 06:13:31 +0000
Manifest next update:     Thu 10 Jul 2025 06:13:31 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: oZ9X0bzrzFgUjkSKW70pXuCmUYtKMnGfsROAMiGvhCQ=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Jul  3 06:13:31 2025 GMT
            Not After : Jul 10 06:13:31 2025 GMT
        Subject: CN=68661f8b-609e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:93:08:a5:62:6a:9e:31:53:29:80:c7:0f:
                    23:1b:b1:4f:dd:5e:50:ea:4c:f3:f4:f6:9b:26:92:
                    4f:c6:42:96:cb:f7:69:d9:a7:7a:a4:86:2c:f0:e3:
                    8f:7e:c0:2d:ab:7e:69:04:30:00:9d:de:b8:29:57:
                    9e:45:c6:b7:14:66:a5:1d:4e:04:39:ae:34:27:4d:
                    ef:60:75:59:97:a7:e8:d5:01:43:29:10:d4:5f:b0:
                    e9:74:0e:cf:6f:f2:31:ef:48:89:69:89:0c:27:7c:
                    1c:9c:16:ec:43:93:a9:9e:6d:86:f8:22:7c:51:a3:
                    ea:56:85:d5:ab:30:41:26:b6:fe:8c:07:c0:40:ed:
                    87:65:e0:fa:58:2c:db:3a:85:4c:25:ae:e3:4c:0d:
                    d3:ee:d7:68:44:b0:25:8a:96:db:37:e7:18:3e:c6:
                    10:65:a6:f9:f0:65:3f:e3:30:e0:a3:9a:d8:e3:fe:
                    44:ef:4a:4f:90:9c:bc:67:d5:57:0e:8f:34:0b:fa:
                    f6:d0:8a:e6:42:69:53:ac:11:90:c8:b1:a5:90:69:
                    fa:fc:dd:39:23:9e:4c:a6:0d:e7:7c:0e:f5:38:be:
                    f2:ff:28:e8:5c:7b:93:58:8a:8a:71:f5:69:a8:00:
                    45:0e:ac:d2:15:6b:ce:7d:60:b1:82:44:83:cf:d4:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:71:67:9A:0E:CF:F6:3D:71:08:71:F5:38:19:A3:F5:62:D3:39
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:66:5e:ca:a6:41:ae:f1:89:4a:4a:39:f0:d3:c4:e0:bf:
         ff:b1:f5:1f:66:37:08:bb:e9:70:1b:ce:8f:cf:f1:53:7b:6d:
         fe:6b:ef:57:29:5e:9b:7c:cc:88:f3:ca:94:1d:64:ad:b3:0f:
         df:44:87:af:cb:dc:f5:d6:17:8f:e5:de:40:76:09:2b:2b:88:
         fe:97:f2:7e:ff:4a:75:1e:d9:23:0a:0c:a4:0b:86:02:8f:ab:
         a7:3a:c0:4d:0c:e0:53:11:5c:b6:3e:d0:c8:72:14:12:b0:76:
         b8:21:70:a2:b2:05:64:0c:40:47:30:b9:5b:7d:ba:83:b3:85:
         65:20:e1:05:7b:34:55:23:7d:9a:9f:bd:c4:2b:cd:e0:70:25:
         c9:2d:7f:ec:eb:e5:94:da:86:e9:5b:0d:f4:fa:4a:af:00:bd:
         df:6e:a0:27:23:b9:1c:6c:be:89:b1:dc:44:5a:49:38:c6:9a:
         f3:37:4b:0c:67:30:3a:b6:de:8a:db:87:ff:0c:db:6e:4e:f9:
         c4:53:fa:b6:bb:dc:e0:16:29:d3:e9:ae:c2:ce:52:e8:56:33:
         49:f6:59:e5:e3:02:23:92:60:9f:f5:10:9a:7a:15:e1:6f:93:
         41:c6:a1:7f:1f:58:5a:bd:43:fe:e8:28:1f:20:ac:0d:39:58:
         62:dc:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:35:12 2025 by rpki-client