Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          wsSMID3tWuUf4t+X4I5ClXNJ/CzbnARJVVPC+Netg7M=
Subject key identifier:   6C:DF:7C:1E:A3:2B:93:70:49:32:5C:8C:F3:03:EA:CF:C5:CB:D6:8A
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          62
Signing time:             Sat 31 May 2025 06:40:08 +0000
Manifest this update:     Sat 31 May 2025 06:40:07 +0000
Manifest next update:     Sat 07 Jun 2025 06:40:07 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: ybwOJW2Cuqh7X88YmVdg1HMnfQnDjWqlF3h+/JEAtSM=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: May 31 06:40:07 2025 GMT
            Not After : Jun  7 06:40:07 2025 GMT
        Subject: CN=683aa448-2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:38:45:50:88:d7:dc:16:f1:2d:cc:c1:1d:
                    d0:56:a4:7f:8b:fe:9f:b1:c9:67:39:54:8c:b9:22:
                    4d:46:00:89:2c:5a:58:ed:8d:0d:d3:59:6a:d2:bd:
                    9c:19:22:35:e9:43:30:0e:a8:8c:8e:ae:e2:24:07:
                    21:56:48:f7:b8:e2:df:91:87:8b:fb:cb:c8:98:ce:
                    94:f3:cc:ad:3e:fe:df:eb:4d:90:31:c6:73:14:52:
                    cb:a4:54:8b:fd:a4:70:84:ec:39:92:cb:c1:bc:14:
                    e6:31:f0:ad:6b:25:69:45:2d:c9:b5:10:f8:0e:b9:
                    a1:d4:67:3b:2b:81:d3:87:f3:58:6e:3b:06:d1:f9:
                    ad:09:bc:be:6b:95:90:1a:f3:2a:1d:ea:5d:d8:ee:
                    45:ac:68:1e:0b:55:9c:45:f3:ad:3a:0c:f2:77:aa:
                    7d:62:1d:ef:b6:d0:ae:c1:1d:63:21:c7:0d:8e:81:
                    2e:68:1c:06:d0:14:2e:18:0a:00:04:38:50:03:14:
                    fc:45:e8:df:a8:fa:12:92:49:5d:6c:ae:bc:93:b1:
                    f0:e5:00:6d:d0:c6:8c:ef:e3:bc:fd:b8:04:a0:d1:
                    76:9c:7b:39:c9:e8:aa:0d:cf:7b:d5:75:91:b6:fd:
                    94:5c:8e:3a:72:04:09:b2:90:da:1b:1e:e7:e7:32:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:7C:1E:A3:2B:93:70:49:32:5C:8C:F3:03:EA:CF:C5:CB:D6:8A
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:5f:37:cf:c8:d1:7f:2d:de:6f:cf:43:16:9d:9d:40:9d:
         a0:52:76:b5:d8:42:cd:f3:03:fb:ab:75:08:bb:19:fb:44:eb:
         8d:c0:b8:9a:08:b9:56:f4:40:2a:ff:4f:3b:4c:24:f0:28:35:
         75:40:ae:be:2a:6d:c9:eb:da:cb:4b:df:c1:63:5c:39:f0:fd:
         a5:63:81:92:ea:f5:56:98:35:43:3a:32:d1:5f:bc:1d:9d:bb:
         86:5d:f9:f4:b5:d3:de:c1:0b:02:bc:75:94:c2:f3:3a:0a:87:
         fc:04:b9:64:42:17:51:bc:90:fd:d5:e2:2a:32:85:62:ec:a0:
         47:6c:cf:9c:9d:c6:f9:3d:96:d2:82:19:46:f2:a2:6f:6b:b5:
         ca:9c:f9:24:a4:93:5b:05:6b:fc:cc:d7:dc:78:ca:82:96:86:
         43:83:3d:3b:98:58:b4:6f:8b:87:1f:21:b8:14:8e:ee:19:30:
         92:d6:53:3c:eb:83:7f:98:51:77:71:68:cb:a8:04:98:d9:02:
         b6:fe:49:c1:40:51:2a:18:6d:16:11:c9:82:36:aa:36:a0:03:
         1b:4e:9d:bb:08:09:09:20:5b:bc:4c:26:ff:e3:aa:c6:3f:a9:
         df:1e:80:70:ce:c7:7d:cc:20:50:3f:55:a2:21:67:8d:cd:d1:
         ad:dc:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:51:32 2025 by rpki-client