Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File:                     K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier:          qxSfKF4oHO/akpxbAK0z5GBFhbSFHdOTcv/h6PeYOxk=
Subject key identifier:   DD:85:7E:23:85:43:9D:56:73:BB:2C:F1:14:72:03:8D:C9:E6:46:50
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer:       /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number:          74
Signing time:             Sat 19 Jul 2025 07:05:45 +0000
Manifest this update:     Sat 19 Jul 2025 07:05:44 +0000
Manifest next update:     Sat 26 Jul 2025 07:05:44 +0000
Files and hashes:         1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: ORIv2+yssiNYmM2+5YUyBt11K+omyV2Kb6rJoMowB6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
        Validity
            Not Before: Jul 19 07:05:44 2025 GMT
            Not After : Jul 26 07:05:44 2025 GMT
        Subject: CN=687b43c9-d59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:6b:9c:c2:6f:39:5c:06:7a:45:9c:2b:d2:
                    fe:6c:1e:3f:be:24:f6:2b:0b:a6:8c:ea:f7:22:89:
                    40:2d:ec:7a:70:bb:71:94:a1:70:97:bd:e2:89:57:
                    bc:09:90:9a:8b:77:3d:18:2e:a6:93:57:2c:39:4e:
                    db:46:88:a6:03:3a:a4:68:d5:bb:eb:9a:1e:77:07:
                    23:9f:fa:d0:f1:84:bc:77:00:72:a0:41:4f:a0:b7:
                    92:bf:07:05:77:09:64:74:5e:78:4d:fc:10:05:2e:
                    8e:67:d6:62:54:71:ba:73:37:72:eb:b9:67:20:ff:
                    08:77:f2:90:aa:7e:f1:9d:e5:03:7a:ef:e8:d6:b5:
                    8f:4f:c9:38:d1:66:4c:f7:ec:fe:37:2e:10:e3:25:
                    2a:0f:88:30:08:b8:73:78:05:2c:62:ee:86:c4:8d:
                    c9:06:34:55:7c:8a:f0:4b:48:5c:92:43:22:b8:8c:
                    26:cc:75:74:77:73:4d:51:1e:80:51:89:ce:14:a0:
                    22:6e:87:7a:c9:b0:24:9f:0b:aa:95:fd:fb:89:e3:
                    50:6a:28:dc:df:f0:32:b6:02:1f:b8:25:af:6f:ec:
                    b4:f9:65:c1:49:ff:98:c9:fe:4b:fd:81:20:a2:71:
                    0e:21:45:8c:3a:1b:4e:98:5b:70:b1:67:43:42:1d:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:85:7E:23:85:43:9D:56:73:BB:2C:F1:14:72:03:8D:C9:E6:46:50
            X509v3 Authority Key Identifier:
                keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b5:b9:86:34:67:88:39:c8:80:af:ad:49:f9:a5:2e:54:a7:
         57:fb:01:eb:14:1a:5b:ad:69:de:f1:44:46:9b:36:2a:f5:ea:
         f9:4a:ec:02:e4:45:9d:e4:33:a9:4f:92:28:7d:ee:10:43:48:
         0e:c5:18:2c:35:ea:a0:40:a0:85:f8:95:c6:54:c9:a6:f0:94:
         28:43:0f:7c:55:ee:b3:59:00:87:e4:75:c2:f9:60:42:c8:0b:
         db:6f:01:e8:c6:89:e3:77:01:a8:04:ff:01:c8:2a:67:f3:77:
         df:69:6f:24:1f:2d:fd:5d:1a:a9:9c:7a:72:87:88:86:d8:ce:
         ec:64:fa:e6:94:32:10:87:10:b9:23:85:ba:ac:08:11:bb:e5:
         c9:9e:b2:23:14:ec:3c:ff:a4:e6:9c:61:d0:74:76:17:9e:06:
         e2:83:4f:e0:8f:f1:5b:e9:1b:72:68:6c:d0:8b:22:f1:9a:98:
         63:8f:65:fd:01:25:74:80:4f:90:18:f3:18:99:01:a8:ba:42:
         ba:a0:91:0e:1f:45:c7:c9:95:a5:ec:ee:17:fc:37:03:50:4b:
         b4:1f:75:8a:c2:2e:b3:6e:95:0c:ca:9f:17:03:0a:a7:10:f9:
         02:6d:4e:89:3f:7f:a2:df:c2:e7:c8:d7:b5:8e:d5:f9:b3:4b:
         a6:c3:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:05:35 2025 by rpki-client