Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File:                     62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier:          48esOKfG3J2SdUO3oT+YByrLBJn2zPohbq6YPExB0PQ=
Subject key identifier:   EC:49:64:F2:56:C0:42:AA:6C:AD:CF:07:9E:6F:32:68:6F:AD:85:F6
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer:       /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial:       0754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number:          0745
Signing time:             Fri 18 Jul 2025 22:00:44 +0000
Manifest this update:     Fri 18 Jul 2025 22:00:44 +0000
Manifest next update:     Fri 25 Jul 2025 22:00:44 +0000
Files and hashes:         1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: 1Dcx8TrH69Bl7JLWTpce/I6rbZ7+SifTKhgiwIufDHI=)
                          2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: AMa7aYE2pQQRL34zPWU4u6hxNFQLAiVfzm0sTa2yekY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
                          rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
        Validity
            Not Before: Jul 18 22:00:44 2025 GMT
            Not After : Jul 25 22:00:44 2025 GMT
        Subject: CN=687ac40c-be06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:9d:83:ff:63:2a:27:5f:23:c9:15:1a:3f:
                    f9:7a:8a:19:87:a1:f5:96:b1:4e:d1:6e:8c:55:b6:
                    f8:2f:7a:93:dc:65:6c:98:34:6a:39:b5:62:d3:44:
                    78:74:90:66:d8:57:6b:09:67:06:9e:d3:5a:a7:48:
                    d4:38:20:64:ab:c6:06:67:11:fc:37:48:fe:51:12:
                    99:8a:92:71:1d:94:67:f6:6f:5d:c6:f2:61:53:b6:
                    f8:e3:0e:9f:d2:76:1f:0d:68:69:39:18:39:8e:d4:
                    b0:7e:4f:43:df:59:09:fd:55:fc:d5:ed:3c:72:72:
                    4b:8a:54:47:dd:3a:de:38:04:cc:8b:a0:a2:34:d0:
                    4c:d5:48:72:36:97:99:87:99:e4:92:22:ba:da:93:
                    4a:86:1f:c8:a5:8f:c4:67:7f:bb:75:26:0f:38:27:
                    fc:50:c2:8b:34:d9:b2:63:38:fe:28:9c:fc:26:81:
                    9a:f8:27:be:60:3c:6c:e6:5a:18:3c:52:59:92:c2:
                    4a:0f:12:bf:36:e8:d8:1e:79:bb:9f:df:ac:8b:b9:
                    b1:af:c7:57:68:50:ca:53:da:c0:af:94:b5:92:1b:
                    e8:38:f8:aa:70:0e:41:35:98:61:7b:8a:e1:bd:75:
                    8e:4f:78:21:bd:79:cc:dd:de:89:5e:c0:6c:df:ba:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:64:F2:56:C0:42:AA:6C:AD:CF:07:9E:6F:32:68:6F:AD:85:F6
            X509v3 Authority Key Identifier:
                keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:27:3a:b4:e6:7b:7d:92:3d:a0:03:96:1c:84:48:f0:e8:9a:
         cf:70:93:bf:f9:c7:51:4d:ff:d5:78:1d:03:a3:3b:5a:b9:7d:
         54:e1:9a:6b:80:96:09:3a:65:2a:9d:79:1c:37:e3:2b:a2:15:
         88:9a:dc:a8:c4:c7:34:77:19:ce:9b:e2:30:0c:c9:36:bb:aa:
         b6:89:39:b3:2e:5b:07:8e:53:d0:58:90:cc:d1:64:b0:4d:df:
         a0:4c:88:2c:b9:3c:7d:e6:dc:0f:e7:13:1e:64:47:d9:0e:03:
         e3:25:f0:28:be:3f:b3:20:02:7c:b6:db:2d:16:20:44:41:7e:
         de:2c:f2:84:c6:a9:7a:7f:6b:14:d1:6f:16:00:fd:e9:3f:78:
         e7:a2:21:08:78:ee:2f:31:f5:5a:cd:33:c2:4a:f1:d7:98:81:
         93:5f:d7:03:d2:1a:a3:07:65:94:f6:b5:de:6d:f9:cc:0c:13:
         bb:ba:d1:5d:c4:6b:6b:34:b5:74:64:6d:fe:79:66:d7:14:37:
         8e:3b:83:c5:52:d6:d3:56:db:dc:14:e3:84:93:d7:f6:17:7f:
         2f:41:2c:39:d2:78:a5:84:44:c1:08:03:9e:46:0e:71:5f:84:
         98:23:ab:df:f1:0b:67:ea:77:ee:4d:05:cc:75:3d:00:b3:f8:
         84:01:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:18:21 2025 by rpki-client