Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
File:                     RLu-zETJHgkDBfMc5g-37DrJU-c.mft (raw, json)
Hash identifier:          ec2TxWXt64FFe+o0uVvpB+PB876RjNA0bgAfBxrx5Zo=
Subject key identifier:   8F:81:75:EB:2C:CE:1F:8A:F5:10:2B:04:54:5C:D4:40:BC:BB:C9:04
Authority key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7
Certificate issuer:       /CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
Manifest number:          014A
Signing time:             Wed 23 Jul 2025 04:33:13 +0000
Manifest this update:     Wed 23 Jul 2025 04:33:12 +0000
Manifest next update:     Wed 30 Jul 2025 04:33:12 +0000
Files and hashes:         1: RLu-zETJHgkDBfMc5g-37DrJU-c.crl (hash: 2BsvQ+9rQ1mKwtJe5X7CpT4yOJ9Qf6rKxZCkOGhj1RE=)
                          2: 5E69790087C911EEBD25E611C4F9AE02.roa (hash: zSXGJmTsXKdiDtNgwopT6QPhOVb+YnFkKvCHFZMvhtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl
                          rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177D93, serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
        Validity
            Not Before: Jul 23 04:33:12 2025 GMT
            Not After : Jul 30 04:33:12 2025 GMT
        Subject: CN=68806608-efbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:d6:8f:d1:7f:3e:2e:4c:96:a2:83:a1:30:
                    90:d3:91:05:ba:bf:15:2b:db:5d:27:69:56:00:96:
                    84:56:df:46:e8:2c:f2:5f:3e:4c:5d:80:25:da:85:
                    69:b8:f8:a0:cc:a8:58:e3:d9:5e:f6:64:86:0b:19:
                    55:cb:d3:6a:13:47:fd:50:b2:6b:48:fe:80:9d:f5:
                    01:ef:36:2a:68:3f:14:d4:29:93:fb:2d:bf:a7:fc:
                    84:07:e0:54:a9:5a:2b:17:a3:5f:60:c4:27:f5:14:
                    70:04:73:c0:b5:2b:19:aa:5d:0e:f6:17:00:e6:8f:
                    41:c4:31:55:50:a9:78:92:ad:27:aa:ce:05:b8:d0:
                    02:6a:d3:85:bb:17:2d:7a:f7:2c:77:86:7f:01:e1:
                    a2:6e:4f:22:7d:79:8b:23:81:e7:05:78:1c:0b:a4:
                    b1:72:75:9e:6c:3b:dd:10:03:77:a3:61:ea:a8:42:
                    3d:65:c9:5d:89:23:4e:1c:55:3f:d8:ad:ec:48:91:
                    53:ce:60:8a:c3:81:ff:4e:16:a5:ae:a5:32:d4:d6:
                    c6:36:7b:32:18:f5:08:72:f7:51:ea:a8:72:e9:43:
                    65:3a:3b:db:73:be:6e:bb:70:b9:35:cf:5e:8e:ac:
                    32:30:03:f3:0c:cf:3b:08:65:2b:ea:26:10:e6:51:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:75:EB:2C:CE:1F:8A:F5:10:2B:04:54:5C:D4:40:BC:BB:C9:04
            X509v3 Authority Key Identifier:
                keyid:44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:da:c6:d6:fb:cf:5d:ca:2d:58:70:cb:a6:18:ab:21:44:
         92:c9:ef:85:5f:63:aa:33:be:93:99:09:ac:42:06:a0:bd:b2:
         33:07:59:72:71:15:5f:69:89:bd:68:0b:27:3f:fe:b9:9e:65:
         4c:ce:69:56:81:54:c2:fc:a7:f4:11:89:64:f3:51:c8:5b:50:
         9e:7f:23:46:14:c6:28:b8:0d:4d:f2:6a:89:ed:dd:74:2f:a2:
         4e:f8:c7:86:86:a9:c0:8d:ae:cc:27:f4:24:06:9a:ae:8d:96:
         5f:03:1d:89:37:d7:c9:ed:e3:82:69:51:a9:f5:81:78:d2:54:
         47:b6:7d:5f:a5:4b:f1:cd:02:19:45:f5:a1:fd:39:4d:46:e9:
         e4:77:19:0c:0f:53:cf:c4:a9:26:15:d8:f9:e5:ca:9d:e6:f2:
         f6:85:18:46:e4:e7:e9:54:68:18:dc:0e:1f:55:35:36:55:9b:
         af:68:8f:e1:be:a4:8e:57:4e:53:6b:a9:c0:bc:32:cb:05:3a:
         65:29:8f:3b:59:48:58:72:fc:0a:f9:7e:4a:ff:2a:bb:49:9d:
         a1:f9:b6:5e:99:77:60:9c:82:7a:02:ae:12:8c:5a:99:95:12:
         c2:22:a2:2f:a6:ca:ff:33:ec:a6:4a:e8:20:3b:1b:92:0e:55:
         20:6a:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:25 2025 by rpki-client