Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          05mSJcPi4J3t7Zu0p/8CFC3tVFODrT5MDarV0og1pVo=
Subject key identifier:   62:43:B3:0E:12:56:2C:DF:39:A6:0E:96:43:AA:0E:DA:93:A6:9F:40
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          70
Signing time:             Wed 11 Jun 2025 06:13:50 +0000
Manifest this update:     Wed 11 Jun 2025 06:13:49 +0000
Manifest next update:     Wed 18 Jun 2025 06:13:49 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 6iptv93nr8f2iToy3qoTAxZe642Oo0NpkwHq+NmLXuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 06:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Jun 11 06:13:49 2025 GMT
            Not After : Jun 18 06:13:49 2025 GMT
        Subject: CN=68491e9d-75a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:80:cd:e8:ea:c9:11:01:17:7a:f1:14:f5:
                    0d:c2:80:a9:9a:86:29:79:6a:50:2c:39:af:ba:dc:
                    6e:dd:3f:ec:81:6f:16:76:4e:17:8d:02:97:91:9d:
                    61:22:a8:3d:a3:d3:80:03:3f:53:ae:4a:da:c1:95:
                    79:f2:95:f9:82:57:6a:34:23:c1:de:e0:10:0b:02:
                    7c:91:ee:60:1b:3f:ef:d3:9a:d0:21:05:d2:1f:b2:
                    57:06:c4:0a:8d:b0:e8:a9:ca:d9:aa:03:a7:63:61:
                    12:b3:0b:0f:93:d0:51:34:2b:bf:6d:58:18:50:6e:
                    7a:c1:5d:69:b1:47:1e:cd:3c:b8:4a:52:a5:8c:73:
                    18:bc:92:0c:d0:03:02:09:04:36:75:5b:f0:10:f1:
                    9a:43:fe:b9:1d:31:bd:61:ae:4d:51:1a:51:0b:75:
                    59:05:c4:b7:2e:c1:5a:26:4f:67:9f:61:0c:f3:92:
                    14:82:6e:be:f7:01:41:fe:1b:05:03:22:05:30:21:
                    00:69:bc:fd:7f:a4:70:58:6f:f2:29:eb:f9:ee:d4:
                    d6:c2:7c:fc:6d:b3:ff:56:fd:d4:1b:c5:1f:27:2b:
                    0d:43:f3:60:99:f9:cd:32:20:61:b1:fe:f5:2f:25:
                    7d:21:43:06:9c:89:5b:0d:78:30:4b:e1:d8:7d:36:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:B3:0E:12:56:2C:DF:39:A6:0E:96:43:AA:0E:DA:93:A6:9F:40
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:b9:51:bd:65:15:2f:d8:2b:00:b4:c1:e8:39:2a:11:9e:
         1b:4a:0e:bb:03:1c:bf:6f:63:de:5e:c2:7f:c1:ad:37:c0:92:
         a3:c3:7f:92:9e:8b:33:dc:9e:c9:85:36:10:ce:f9:2c:4d:1b:
         09:53:39:73:df:13:45:1c:4e:b8:48:76:ef:06:c4:a4:78:09:
         d1:f6:f1:c1:bd:83:d3:2e:d7:8a:47:0c:06:94:e2:9a:57:4f:
         37:ea:e7:92:78:2c:3d:9e:4d:a7:45:12:05:65:35:37:91:71:
         42:a8:31:ef:80:f1:6d:1b:f8:26:4b:76:f9:f4:58:76:ce:0b:
         54:ce:da:f2:54:3f:3b:b0:26:cf:98:86:96:92:d2:dd:55:82:
         bd:6f:a4:8a:06:9b:d6:b7:12:a7:e8:66:07:2e:0e:42:72:df:
         1e:ea:74:fb:f2:ae:b1:c4:de:60:76:86:c0:48:68:e9:2b:37:
         38:dd:90:83:06:91:8d:60:26:61:37:5a:54:de:17:2a:b8:51:
         d9:61:d4:13:a3:7a:4d:e5:64:83:f1:e4:ed:76:65:19:52:bf:
         8c:47:c4:ed:dd:6d:93:71:aa:ea:80:af:2e:87:0d:5a:33:25:
         14:c2:9f:90:27:59:0b:6a:4d:78:1a:c6:df:13:1c:d5:f3:b0:
         5b:75:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:45:45 2025 by rpki-client