Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          XUbY3uTiMvejDm7zVcXtBekAzmAPT46nohq7Sa0zCFg=
Subject key identifier:   68:0E:E5:FC:DC:CE:A0:67:21:D2:69:94:89:C8:51:7E:07:A2:79:29
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          0622
Signing time:             Mon 30 Jun 2025 23:08:51 +0000
Manifest this update:     Mon 30 Jun 2025 23:08:50 +0000
Manifest next update:     Mon 07 Jul 2025 23:08:50 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: D4xjrHDA/zH27mBrVybDoePSYsVD0r97YYoWxsqB2+k=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Jun 30 23:08:50 2025 GMT
            Not After : Jul  7 23:08:50 2025 GMT
        Subject: CN=68631903-9daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:9e:99:bf:7d:a2:83:65:37:48:ef:77:95:
                    02:51:db:73:91:5a:24:40:0b:0b:e1:a1:a1:cc:da:
                    be:e0:9e:f2:f9:ce:fd:0e:e9:31:ca:71:dc:36:d7:
                    9a:00:24:bf:20:26:85:8a:31:3a:45:19:82:d0:83:
                    1e:39:46:25:79:75:3e:0c:c5:bf:97:bb:45:2b:df:
                    9f:23:02:3e:fd:c8:db:1f:0e:91:b0:8a:bb:00:4e:
                    41:af:bd:60:be:01:bd:28:d1:61:80:fb:8e:e1:7c:
                    04:42:95:15:46:21:a5:fe:25:04:65:56:59:ba:ad:
                    b7:e9:f6:b2:c6:3d:1d:70:62:05:90:5d:ef:d4:a4:
                    66:40:70:bc:a1:9b:ef:fb:23:3f:06:60:a1:8c:3c:
                    f9:27:06:c9:af:b2:fb:b1:3d:44:ae:df:de:83:97:
                    80:76:01:23:f0:04:59:03:7b:f1:c1:f7:82:c3:6d:
                    58:2b:f1:ce:09:51:3f:eb:0d:5e:fe:01:7e:1d:a0:
                    94:9b:74:96:e6:c5:fe:c3:58:c5:61:95:0e:5c:0f:
                    f5:f2:be:c1:c6:61:f3:c4:68:14:f6:cc:21:94:d5:
                    cf:34:8f:cd:e4:97:c7:d5:fd:01:a4:2a:92:ba:0e:
                    fd:e8:ad:6f:dd:8e:93:31:75:23:10:a4:12:83:13:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:E5:FC:DC:CE:A0:67:21:D2:69:94:89:C8:51:7E:07:A2:79:29
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:12:5c:94:7e:d5:cd:5d:ee:95:41:67:6d:f7:d0:fb:44:92:
         50:ea:5f:43:5d:e5:32:7a:c3:06:72:71:74:3d:8d:86:26:0c:
         05:88:24:0d:a2:91:39:84:99:03:92:42:ef:0e:57:a7:3d:47:
         7e:76:de:45:3e:3d:4d:fb:18:6c:c3:8b:20:1d:51:82:86:6b:
         ee:98:55:c0:05:e3:77:86:c1:7c:ae:25:9e:60:86:6a:5e:14:
         25:3c:14:de:40:4c:c9:56:1b:6a:2c:6a:bc:f3:9e:75:2b:f8:
         7b:5b:50:ad:59:74:96:58:68:6c:70:7c:a2:37:75:fc:5b:c7:
         79:35:9b:40:d9:e0:24:21:f6:c4:0b:2f:7e:b6:b9:83:95:09:
         cf:f5:b6:3c:4f:69:ef:69:51:9e:88:7f:08:93:ff:68:f1:4d:
         ee:85:dd:02:cf:8d:f6:b5:e9:20:34:65:30:4f:da:d9:7f:a1:
         02:33:db:3c:39:14:8e:4e:5e:1d:59:92:ec:54:26:24:6b:35:
         5e:66:86:16:2c:5b:ac:70:42:9e:80:93:8d:43:56:8b:55:41:
         8f:6f:9d:09:63:14:dd:17:ad:63:83:5f:4e:a6:84:db:bf:c5:
         2e:07:20:70:99:6e:63:ef:b9:9c:d1:fb:05:b8:56:07:7a:16:
         1b:de:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:25:20 2025 by rpki-client