Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
File:                     _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json)
Hash identifier:          6IyYGR+rMLngbvkBj6BT14vutk/+X+Lpy/sgc2yg3jM=
Subject key identifier:   2C:31:A1:9D:79:74:8A:19:F1:86:D0:D2:2A:C3:8E:91:43:76:A0:99
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Certificate issuer:       /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial:       0634
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
Manifest number:          062B
Signing time:             Fri 30 May 2025 22:57:29 +0000
Manifest this update:     Fri 30 May 2025 22:57:28 +0000
Manifest next update:     Fri 06 Jun 2025 22:57:28 +0000
Files and hashes:         1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: fUHOt55RRwOop69Npm4KLIPoqNqaUspe8vORWj6V9yo=)
                          2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
        Validity
            Not Before: May 30 22:57:28 2025 GMT
            Not After : Jun  6 22:57:28 2025 GMT
        Subject: CN=683a37d9-2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:d1:67:ac:23:2d:13:ad:82:c8:3b:c2:80:
                    cc:de:d0:6d:f5:b4:68:d6:49:3c:64:ba:72:2c:7f:
                    ef:50:12:ff:90:44:49:29:a1:fa:c4:10:04:8c:61:
                    ff:23:c5:26:78:28:91:c3:03:0f:57:2d:1d:88:fa:
                    ea:72:7c:31:7f:e6:4f:f9:db:b7:48:ab:e0:f7:10:
                    1b:d6:97:72:34:f1:81:f4:da:f0:77:21:ce:51:88:
                    aa:5b:5f:04:db:4d:c4:60:d3:36:b3:a4:dc:20:dd:
                    48:5d:bf:af:92:d8:95:8c:80:86:06:76:56:b1:b6:
                    61:21:02:ea:b0:44:8e:2e:d0:18:b8:76:a5:99:fd:
                    97:b6:7e:33:13:9d:ee:29:d2:1a:d2:33:12:ba:05:
                    1e:f8:13:68:09:03:91:3d:5f:e7:0f:ea:f9:83:56:
                    5d:e4:03:2d:06:05:8c:f3:57:9a:50:60:c9:16:04:
                    5b:6d:46:dd:a8:84:8d:da:ec:a2:c9:9d:0b:7f:1f:
                    9f:b9:82:84:73:a8:d7:81:65:c7:fc:6e:4d:cc:9d:
                    d3:78:93:9c:4e:3b:f5:51:af:86:c2:fa:fe:26:42:
                    cd:b3:13:b2:41:bd:db:f1:9a:c7:5a:c4:b7:bb:a4:
                    d6:31:d0:db:bb:d0:cf:66:a4:30:68:d2:d9:eb:c0:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:31:A1:9D:79:74:8A:19:F1:86:D0:D2:2A:C3:8E:91:43:76:A0:99
            X509v3 Authority Key Identifier:
                keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:06:63:0b:a2:f0:70:59:d8:bf:ca:8e:de:81:83:61:31:33:
         56:a7:37:7c:c0:a2:47:44:5d:36:e5:bc:42:db:90:8c:b6:a7:
         d3:c2:f5:50:fb:d3:40:b3:95:b9:77:ab:1d:58:f8:9b:e7:38:
         2c:9f:24:99:dd:42:97:6e:06:bf:50:3a:c2:82:ad:8b:3f:dc:
         1d:c7:ff:48:81:c1:88:6c:7f:76:7a:58:94:cf:b9:76:0a:dc:
         5a:85:dd:9d:ce:d3:8d:c8:5d:72:ab:64:ed:3b:7c:45:7b:c1:
         52:f9:00:f1:a7:53:79:fa:03:94:4d:06:f3:7a:04:a9:ce:1e:
         ff:62:66:50:92:30:ab:2b:8d:5f:9b:6c:37:f6:a8:cb:e8:3c:
         eb:43:27:ed:76:31:c2:f4:40:c2:d2:a2:9d:f8:07:9e:49:7d:
         85:2f:fb:d6:90:7c:d1:45:3a:0b:48:ff:c4:c0:4f:4b:dd:b8:
         49:52:19:c0:ed:a4:f6:47:46:04:48:a3:5e:9f:1e:9d:98:3b:
         b3:cd:0e:2c:10:46:93:b9:23:0d:0c:bd:32:fa:84:f5:1f:84:
         3b:99:23:eb:7c:7d:15:00:9e:3a:b2:a5:f1:43:9e:03:09:05:
         be:ca:e8:82:88:e7:29:83:7f:76:37:7f:07:76:ba:75:34:ac:
         9c:17:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:31:52 2025 by rpki-client