Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File:                     lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier:          S5iLK+Zd9em5AC23seAG2lH3L3ZIkV2OITbT/t1r5Xw=
Subject key identifier:   B8:1C:9C:EF:65:37:D3:A6:AD:58:2C:E6:97:32:58:2E:EA:9F:43:62
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer:       /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number:          0189
Signing time:             Fri 13 Jun 2025 03:11:01 +0000
Manifest this update:     Fri 13 Jun 2025 03:11:00 +0000
Manifest next update:     Fri 20 Jun 2025 03:11:00 +0000
Files and hashes:         1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: gKe5LHmGNaEDIdgaIsw6UM619s0FRJk3WQBb9MX8DaA=)
                          2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
        Validity
            Not Before: Jun 13 03:11:00 2025 GMT
            Not After : Jun 20 03:11:00 2025 GMT
        Subject: CN=684b96c4-99c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:22:ce:6f:6d:c5:e9:1c:2b:c7:ef:28:ca:
                    cb:33:46:89:c7:9d:7b:4b:89:f8:86:fd:65:e1:c2:
                    c3:1d:6c:8d:16:bd:a3:21:13:7e:f9:c7:a0:eb:1e:
                    b9:f5:89:32:87:28:a6:f7:af:bf:1a:3c:85:f0:45:
                    53:bb:ad:9f:37:ed:57:2b:de:19:85:7c:08:16:ad:
                    0c:d9:72:e2:9e:f1:b4:58:a1:bd:57:bd:b0:bc:cf:
                    84:2d:ed:44:24:c5:65:d6:f1:a9:63:7d:c7:fa:5c:
                    fe:3c:90:f3:08:9d:14:e5:98:24:6a:9b:5f:8b:15:
                    e1:ca:d2:bd:73:8c:ca:b8:81:5e:f1:a1:88:a2:3e:
                    82:93:e8:3c:8d:5b:07:b5:b2:6f:64:fb:40:21:83:
                    ba:fe:4a:46:6a:13:83:6a:e5:38:95:93:f5:5b:8e:
                    69:be:79:85:82:a7:de:3d:40:9e:c6:59:c7:0d:3a:
                    18:3e:2c:c4:09:e9:c0:74:d5:5b:f6:eb:b1:56:e1:
                    12:cd:8f:ab:da:e0:8d:c5:4f:36:32:da:ed:04:d1:
                    f6:39:32:d7:77:8a:db:7c:24:d0:99:28:d0:4d:31:
                    a9:b8:79:b7:56:08:4e:26:cb:02:61:c9:ca:92:15:
                    10:bc:12:2f:30:2c:fc:a1:84:fa:9a:38:7f:68:04:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:9C:EF:65:37:D3:A6:AD:58:2C:E6:97:32:58:2E:EA:9F:43:62
            X509v3 Authority Key Identifier:
                keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:b6:9c:5b:2b:e5:77:6d:c9:21:12:87:7a:ed:f9:56:26:
         cc:7a:8c:2c:12:74:5c:1d:a3:b8:bc:19:34:b4:bf:91:26:4a:
         38:0f:c3:01:3a:66:bb:f4:5c:6a:c4:ea:fc:75:d1:15:f8:4a:
         6b:78:a4:c7:12:dd:7f:09:c4:ae:a5:c7:68:23:f6:ec:a2:c5:
         39:86:26:82:79:61:14:d9:e9:6d:3f:ec:f6:fd:a2:e7:4f:fb:
         73:54:8a:22:b7:e2:c1:91:19:e7:33:85:64:78:9c:4c:88:66:
         4a:81:7b:1b:28:93:1d:6a:ad:1b:68:bf:0c:f1:af:54:f3:53:
         ae:e1:ed:68:d7:be:a2:32:ac:20:34:20:60:33:bf:19:11:b1:
         c3:38:34:36:35:61:64:f0:e0:bd:6f:31:28:58:7c:12:1a:f8:
         40:41:bb:98:2c:14:ac:a2:2c:27:94:ce:4f:79:02:a7:06:b1:
         65:30:77:5c:05:a6:15:22:00:65:c3:08:89:e2:1b:26:71:8b:
         1b:83:ab:aa:e1:cb:bf:21:90:23:f5:9f:49:f1:1e:5b:9d:25:
         18:b5:17:10:f2:3c:9b:46:e8:86:f4:1b:c1:49:17:b6:eb:c9:
         ec:aa:a1:3c:11:3f:e8:ea:76:8c:16:d6:89:67:ea:11:f2:9d:
         3e:e9:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:01:37 2025 by rpki-client