Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File:                     62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier:          TM86wDBir9GC56UzJb5kPrMUp6D7O2Acvpwu5WrrCwE=
Subject key identifier:   EE:B9:51:44:E7:99:94:DB:50:B6:50:E7:0A:C7:19:3F:2F:34:6C:F1
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer:       /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial:       073B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number:          072C
Signing time:             Fri 30 May 2025 22:01:47 +0000
Manifest this update:     Fri 30 May 2025 22:01:46 +0000
Manifest next update:     Fri 06 Jun 2025 22:01:46 +0000
Files and hashes:         1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: LHGV+1tsTXl1+1ZQ4otNhrjK0tvAbhILOxTfJxBHKPQ=)
                          2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: AMa7aYE2pQQRL34zPWU4u6hxNFQLAiVfzm0sTa2yekY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
                          rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
        Validity
            Not Before: May 30 22:01:46 2025 GMT
            Not After : Jun  6 22:01:46 2025 GMT
        Subject: CN=683a2aca-20d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:86:8d:a9:4b:1b:69:18:8c:69:f1:39:b4:
                    ef:34:d6:dc:8d:fb:7c:c5:a2:77:2f:ee:95:fc:74:
                    ac:b7:ea:3a:46:0a:ad:8c:4d:2c:79:e8:0a:28:d6:
                    c5:10:ce:c6:27:be:e3:60:40:3a:30:d8:42:c7:1f:
                    d0:8f:52:00:1c:19:b1:0f:df:f0:26:c7:ef:b4:07:
                    9a:5f:0b:7b:f8:4a:29:9b:36:71:87:26:6a:f8:e5:
                    fd:27:8c:93:b0:7f:9b:78:6b:38:49:3d:15:23:e6:
                    91:6b:e4:ae:30:ff:c9:05:41:c2:6d:66:0c:d3:68:
                    ba:e8:44:1e:2e:8f:fd:8f:41:ad:20:55:d8:75:7e:
                    ef:13:89:25:5f:35:67:1e:3c:ab:d1:64:a4:c9:a8:
                    f4:bf:0f:8a:97:ed:48:71:b2:44:3b:ed:36:31:69:
                    7d:ee:39:04:50:b3:f1:c5:86:27:6d:2f:65:75:3a:
                    e5:56:ab:07:22:90:05:a4:0e:c0:a3:0b:61:16:b2:
                    dc:0f:ae:59:da:be:0d:18:de:d9:f9:3b:cd:6e:23:
                    85:1f:0f:a2:22:c3:ef:55:90:4f:51:f7:aa:fc:ad:
                    43:c7:d2:42:2e:cf:69:3a:76:18:13:41:8e:91:4d:
                    6f:46:57:59:1d:ff:ea:8c:54:88:63:36:47:60:89:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:51:44:E7:99:94:DB:50:B6:50:E7:0A:C7:19:3F:2F:34:6C:F1
            X509v3 Authority Key Identifier:
                keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:aa:75:02:2b:95:54:d6:bb:c4:d2:b3:d1:7f:16:9f:6a:
         29:0b:b9:99:ad:aa:91:6d:8e:77:81:25:2e:4b:5d:a6:ea:f4:
         01:1e:04:3b:be:e1:05:69:d0:31:97:98:19:72:5f:75:71:fa:
         8e:3f:f1:8c:e7:27:a9:bd:3c:f0:4d:26:27:5c:fc:b7:e6:2f:
         e5:65:bf:5d:6b:4c:da:4e:9d:b7:4d:9a:7b:91:93:76:1a:9c:
         0e:e1:c1:40:15:c7:4d:75:d9:20:41:24:07:0b:ef:2c:55:69:
         68:3c:9e:82:9e:0d:31:d5:c2:b3:af:09:88:3d:10:10:2f:a1:
         ac:e3:ad:9e:ae:65:00:e0:17:48:64:64:9c:7f:65:6c:be:06:
         cd:7f:09:40:e4:fc:17:da:ae:6f:f5:19:1a:fe:20:4c:8d:d6:
         eb:6f:ad:0d:d4:b8:e0:be:46:58:1a:b7:8b:83:4d:8e:06:81:
         ee:57:bd:dd:09:f6:ea:a5:51:d2:d2:4a:00:f9:68:06:01:c5:
         72:1a:bf:e3:a7:ef:9d:98:7a:34:ca:44:55:63:53:37:df:be:
         a5:aa:b1:13:4d:26:ba:e7:66:ea:f7:89:3e:cc:b6:d1:2c:e5:
         63:78:8a:3d:e5:52:b7:ea:37:ae:79:12:87:18:38:a9:c1:75:
         40:df:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:42:06 2025 by rpki-client