Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
File:                     RLu-zETJHgkDBfMc5g-37DrJU-c.mft (raw, json)
Hash identifier:          CfGn1BDnVA3h12x+Gtk8tkUm6QlH4BRj22eTxOhc4Vg=
Subject key identifier:   07:1D:A7:40:DD:D1:F2:04:9E:41:46:84:CD:81:49:13:84:86:43:52
Authority key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7
Certificate issuer:       /CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
Manifest number:          0149
Signing time:             Mon 21 Jul 2025 04:23:50 +0000
Manifest this update:     Mon 21 Jul 2025 04:23:50 +0000
Manifest next update:     Mon 28 Jul 2025 04:23:50 +0000
Files and hashes:         1: RLu-zETJHgkDBfMc5g-37DrJU-c.crl (hash: /ZdeOehdKsX084EiCtLl8Yg5l8X5k8uNWR6zg/HN2GU=)
                          2: 5E69790087C911EEBD25E611C4F9AE02.roa (hash: zSXGJmTsXKdiDtNgwopT6QPhOVb+YnFkKvCHFZMvhtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl
                          rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177D93, serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
        Validity
            Not Before: Jul 21 04:23:50 2025 GMT
            Not After : Jul 28 04:23:50 2025 GMT
        Subject: CN=687dc0d6-769f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:9f:1a:08:33:08:ac:f7:ad:ca:0a:17:46:
                    c7:33:4a:12:39:43:15:ac:41:00:df:2d:54:ba:c9:
                    42:a2:40:0a:e2:fb:a4:c4:d2:0e:e5:49:24:09:8a:
                    ab:2b:60:42:79:83:bb:af:eb:5c:be:15:d1:91:f9:
                    87:60:ac:1b:02:9d:da:78:81:c2:de:86:f3:78:66:
                    82:be:d2:96:60:69:5e:e0:3a:62:75:b6:b7:b8:07:
                    a2:11:43:46:1d:13:17:16:6e:05:1f:9b:d1:c3:5c:
                    04:55:4c:2f:a0:28:5d:6d:69:1d:59:bb:62:77:23:
                    e3:98:1a:b6:ca:2e:13:18:88:fd:78:47:00:de:9b:
                    3c:fa:48:47:37:28:d1:4f:35:ad:ac:02:19:72:80:
                    4e:3d:8e:69:b4:c9:3c:7e:19:4f:f5:7d:c6:15:f5:
                    32:5d:d9:12:1a:be:32:f5:e4:2d:9e:ad:9b:49:6a:
                    12:08:9e:b0:49:f2:6e:d5:d0:8f:c2:66:92:b7:a0:
                    c3:e7:45:14:7f:32:d4:e0:1a:be:50:65:d5:18:b0:
                    2a:3f:4c:a8:e6:20:ad:b1:e9:17:84:65:02:51:5f:
                    55:fe:f6:2c:77:bc:62:97:88:f1:18:9a:69:73:4e:
                    3e:c7:8a:be:aa:4b:d8:3f:42:1f:c9:52:b3:50:4c:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:A7:40:DD:D1:F2:04:9E:41:46:84:CD:81:49:13:84:86:43:52
            X509v3 Authority Key Identifier:
                keyid:44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:cc:ac:0c:e4:08:e8:97:da:65:95:2c:f0:e0:5d:ee:72:
         75:1e:61:42:97:6c:b0:66:13:22:6a:04:19:3b:71:f3:f7:41:
         4c:da:83:54:0d:0b:e2:30:59:c5:60:73:e8:45:a8:84:6c:9d:
         34:b9:dc:3a:ce:78:9b:3d:07:2d:59:1d:32:99:cc:38:cf:b1:
         17:5e:b8:54:66:0f:42:18:0d:22:eb:4d:4d:1d:22:53:09:a6:
         2c:8e:89:c7:cb:77:ed:1a:e0:15:26:b6:05:a1:3b:39:3b:ed:
         06:3b:0d:e9:f9:f7:d5:87:54:ef:40:65:8c:ca:c1:3f:f7:da:
         23:f5:60:15:b7:98:17:a6:66:ab:33:ca:d3:95:1a:5b:43:b6:
         c4:7c:09:aa:41:1a:1a:8f:16:61:4e:b1:64:e4:b6:a6:9e:98:
         84:bc:f1:bf:14:2a:be:d8:88:43:1a:2a:8e:fb:ce:29:14:01:
         5c:af:b3:6f:6f:be:92:a7:b4:b6:7c:c9:ba:42:b3:04:43:81:
         71:22:ef:2c:2b:b2:52:4b:0e:00:6e:2a:44:28:d6:2f:77:cc:
         7b:dd:87:11:3c:f0:e3:25:d0:e6:8b:eb:51:75:ee:ed:9a:99:
         9f:ec:3b:40:93:6e:b5:f3:c0:c6:b0:bc:b7:ed:a6:43:3c:40:
         53:87:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:42 2025 by rpki-client