Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File:                     62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier:          4zRCoxC2fLGN1uLPbXCTM3QV1IUlhfGTj4udvDthsmE=
Subject key identifier:   F9:D7:27:BC:93:50:B4:CF:FB:08:87:E5:F0:7F:BF:3F:50:62:50:0D
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer:       /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number:          073C
Signing time:             Mon 30 Jun 2025 22:04:19 +0000
Manifest this update:     Mon 30 Jun 2025 22:04:18 +0000
Manifest next update:     Mon 07 Jul 2025 22:04:18 +0000
Files and hashes:         1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: jxYNcXhvpdLqOgC3ERAnLggQ+1lbf6goyRe7HqrOGlQ=)
                          2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: AMa7aYE2pQQRL34zPWU4u6hxNFQLAiVfzm0sTa2yekY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
                          rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 22:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
        Validity
            Not Before: Jun 30 22:04:18 2025 GMT
            Not After : Jul  7 22:04:18 2025 GMT
        Subject: CN=686309e3-3e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:58:ab:12:a3:55:7d:b4:4e:04:6c:9c:f7:
                    23:e2:6d:46:46:88:34:4c:52:cc:32:bf:a4:0c:c4:
                    32:b1:c4:53:b2:2a:3a:c1:63:db:0f:45:68:59:9e:
                    0c:ab:06:80:61:6c:9d:72:c1:df:be:28:5e:18:c7:
                    4e:f2:b9:c0:ce:a5:c7:72:84:c7:85:0c:11:2c:07:
                    c4:a3:9d:13:13:57:d3:0e:72:a2:c9:aa:3e:a9:ce:
                    52:87:79:81:13:75:3e:af:9b:bb:7d:79:40:94:cc:
                    5a:b6:0c:4a:83:fe:5f:9d:10:94:37:3b:59:17:71:
                    17:79:43:a5:95:40:1e:de:53:d0:96:05:59:31:bc:
                    1c:37:44:dd:d8:0b:62:35:b3:f0:20:46:ac:9a:e6:
                    8f:29:f4:4c:a3:1e:b4:9e:7a:db:c3:91:23:cf:f6:
                    54:1e:93:69:ed:27:ce:6e:70:cd:3f:ab:88:ce:43:
                    77:6e:2e:a7:55:bc:65:12:4e:fd:63:3f:d5:bc:d8:
                    08:8c:16:d8:b5:80:52:5d:31:87:9d:52:37:81:7d:
                    02:9c:ca:a1:80:f4:91:f8:4f:79:ed:25:3c:8a:d4:
                    ad:cb:f6:44:dd:6d:06:62:84:b6:bf:3c:49:5d:8a:
                    86:5f:80:c0:fe:3f:c0:81:7b:bd:27:21:2e:15:f8:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D7:27:BC:93:50:B4:CF:FB:08:87:E5:F0:7F:BF:3F:50:62:50:0D
            X509v3 Authority Key Identifier:
                keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:37:97:e6:fe:60:97:3a:83:dc:a1:ae:2a:36:23:f4:87:
         2a:ca:e0:bb:58:a9:9f:ec:6e:fd:eb:ad:b2:a4:89:b1:09:fc:
         e3:f5:0a:98:68:ea:58:0d:cf:0d:48:86:7e:ca:25:51:d9:5b:
         85:ae:0a:14:66:ba:8c:bf:8d:10:73:e5:3b:34:e6:78:a2:85:
         d8:01:95:24:d1:0f:06:df:48:28:5e:a5:e9:2b:5e:68:8b:a9:
         83:c5:c1:ae:7b:48:39:8d:ad:07:e6:e8:4a:3b:54:84:d7:43:
         ee:d1:cf:5d:44:65:90:94:3f:c0:09:f6:69:52:40:d6:f2:fa:
         cc:b5:6b:ad:19:7d:02:ac:43:f8:24:d3:fd:93:f0:8a:55:fa:
         e6:56:23:5b:c3:df:83:d8:9a:c2:e1:d9:1c:4b:c1:2a:0e:6a:
         2a:a3:5c:74:32:37:ea:07:75:7e:fa:59:c0:f0:1d:c8:e8:f1:
         31:1e:02:2e:97:e3:bc:7e:bc:35:99:c2:bc:1b:19:ce:68:6d:
         04:48:6a:84:33:be:29:67:f4:fb:0d:a5:1c:80:09:14:85:4e:
         8d:b9:97:6b:71:02:31:68:93:55:d8:34:c9:b5:86:dc:1d:ec:
         e9:eb:73:a0:7b:7f:39:08:2d:14:32:86:a1:cd:ca:5a:74:cb:
         d5:47:e2:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyMDkxMTAvBgNVBAUTKEVCNjJERkM3MzRBMjVCQzE1NEQzNjdBOThDRjI3RUQx
NkY0MUVBRDAwHhcNMjUwNjMwMjIwNDE4WhcNMjUwNzA3MjIwNDE4WjAYMRYwFAYD
VQQDEw02ODYzMDllMy0zZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0E5YqxKjVX20TgRsnPcj4m1GRog0TFLMMr+kDMQyscRTsio6wWPbD0VoWZ4M
qwaAYWydcsHfviheGMdO8rnAzqXHcoTHhQwRLAfEo50TE1fTDnKiyao+qc5Sh3mB
E3U+r5u7fXlAlMxatgxKg/5fnRCUNztZF3EXeUOllUAe3lPQlgVZMbwcN0Td2Ati
NbPwIEasmuaPKfRMox60nnrbw5Ejz/ZUHpNp7SfObnDNP6uIzkN3bi6nVbxlEk79
Yz/VvNgIjBbYtYBSXTGHnVI3gX0CnMqhgPSR+E957SU8itSty/ZE3W0GYoS2vzxJ
XYqGX4DA/j/AgXu9JyEuFfh2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnXJ7yT
ULTP+wiH5fB/vz9QYlANMB8GA1UdIwQYMBaAFOti38c0olvBVNNnqYzyftFvQerQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIwOS9CMzM5N0I0QTM1
M0ExMUVCQjdFQjZCMThDNEY5QUUwMi82MkxmeHpTaVc4RlUwMmVwalBKLTBXOUI2
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYyTGZ4elNpVzhGVTAyZXBqUEotMFc5QjZ0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDIwOS9CMzM5N0I0QTM1M0ExMUVCQjdFQjZCMThDNEY5QUUwMi82MkxmeHpTaVc4
RlUwMmVwalBKLTBXOUI2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9LTeX5v5glzqD3KGuKjYj9IcqyuC7WKmf7G79662ypImxCfzj9QqY
aOpYDc8NSIZ+yiVR2VuFrgoUZrqMv40Qc+U7NOZ4ooXYAZUk0Q8G30goXqXpK15o
i6mDxcGue0g5ja0H5uhKO1SE10Pu0c9dRGWQlD/ACfZpUkDW8vrMtWutGX0CrEP4
JNP9k/CKVfrmViNbw9+D2JrC4dkcS8EqDmoqo1x0MjfqB3V++lnA8B3I6PExHgIu
l+O8frw1mcK8GxnOaG0ESGqEM74pZ/T7DaUcgAkUhU6NuZdrcQIxaJNV2DTJtYbc
Hezp63Oge385CC0UMoahzcpadMvVR+L0
-----END CERTIFICATE-----
Generated at Wed Jul 2 11:39:20 2025 by rpki-client