Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          ecpvfyWo1P3NHYhOWFJkHOW+JlNwvxVor9CnPWhjaM4=
Subject key identifier:   3E:CA:2E:C3:52:36:B2:74:27:F8:A8:B9:3F:D2:A4:87:C3:8A:7E:24
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          73
Signing time:             Thu 03 Jul 2025 07:07:15 +0000
Manifest this update:     Thu 03 Jul 2025 07:07:15 +0000
Manifest next update:     Thu 10 Jul 2025 07:07:15 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: G7jIGV6bMnyot4o3mEF2O2aWxbnsVJh/XgZAkXqS4uw=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: Jul  3 07:07:15 2025 GMT
            Not After : Jul 10 07:07:15 2025 GMT
        Subject: CN=68662c23-2eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:55:f8:c6:d1:fa:a5:de:12:19:d7:34:00:
                    68:07:f9:75:ea:17:3f:d5:73:e0:93:a1:82:e6:17:
                    da:8e:65:aa:2d:b7:dc:bf:62:5a:19:07:2b:51:60:
                    66:ec:5f:8c:6e:42:99:f9:5b:04:f1:b7:99:66:9c:
                    b5:04:b2:43:93:61:ba:28:ea:fb:95:c4:fc:d8:47:
                    44:f7:ef:14:1e:76:0b:1f:ff:2a:41:d3:00:e3:51:
                    b5:05:43:50:54:7b:36:08:3c:5c:19:1f:6e:13:db:
                    c0:27:d3:54:c6:2a:e2:03:30:62:71:79:c9:b6:46:
                    a6:85:5a:48:86:35:1a:d4:65:ba:c8:d3:f5:63:28:
                    a8:54:d0:77:62:a9:a5:04:2b:44:42:8e:84:33:c4:
                    33:9f:3e:dd:58:94:2d:15:e3:fb:02:5b:e4:a4:4a:
                    13:ee:a5:af:02:1d:3a:88:4d:81:67:7e:2b:b2:fb:
                    62:39:02:00:a1:a9:fa:0b:f9:b6:e1:3f:95:73:b9:
                    54:e2:53:3a:74:df:21:57:77:12:b3:8f:81:67:ab:
                    34:8e:3a:d8:f9:13:49:bd:b2:29:02:0f:5d:60:a7:
                    45:da:d6:f0:b3:45:66:09:23:f4:ae:10:45:5e:3d:
                    78:f6:e9:3a:86:43:b3:fb:1c:bd:b8:b6:80:a3:44:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CA:2E:C3:52:36:B2:74:27:F8:A8:B9:3F:D2:A4:87:C3:8A:7E:24
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:d4:8e:e0:6e:58:41:e5:47:c9:46:41:53:e1:bf:1c:2e:
         ec:5b:8d:1a:07:45:ea:0a:46:cc:71:c3:4b:70:1a:4b:e8:1f:
         85:ea:46:f8:ab:af:27:88:05:75:ee:18:19:5b:4f:8c:d2:33:
         f0:d0:69:61:03:33:17:1c:c1:a3:04:03:7b:4f:be:c0:33:32:
         2c:e6:54:b1:65:69:5b:2d:00:e4:2a:03:b4:04:d9:19:79:26:
         40:23:0b:10:ae:96:ad:6c:4b:c4:3b:28:e5:4f:c3:60:3c:93:
         36:e8:d5:c4:76:07:32:b5:e3:8a:e6:84:00:d8:93:08:eb:11:
         54:fb:7d:ef:75:c9:42:04:fa:45:bb:6b:d2:64:9b:4f:67:49:
         05:2a:e9:71:8a:39:10:66:e6:33:54:35:79:b1:f9:8f:39:0b:
         c3:e4:ab:7f:22:b9:f3:db:f6:fc:ef:21:25:59:45:6b:39:e9:
         35:1a:e1:76:b3:24:fa:08:d1:ad:ab:aa:47:88:2b:89:71:30:
         0b:8e:4b:58:54:a3:5f:d2:a3:59:74:7c:43:c3:0f:b3:8b:ca:
         10:2c:70:b7:ef:44:3e:93:40:fe:b6:1a:90:3d:f9:a9:3b:e8:
         0c:15:09:fd:a6:c2:fa:de:1e:b4:40:9e:93:9b:8e:fe:7a:81:
         74:b9:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:48:22 2025 by rpki-client