Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File:                     JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier:          R3wFXXhe36pFMSjjbxZIXWRDLg8ii2qSM49npAfN1k8=
Subject key identifier:   E0:04:9C:33:75:12:46:33:A5:BF:D0:93:5F:E3:41:AA:1D:50:0F:84
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer:       /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number:          038E
Signing time:             Sat 23 Aug 2025 01:03:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:44 +0000
Manifest next update:     Sat 30 Aug 2025 01:03:44 +0000
Files and hashes:         1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: B8APcR1HrN7RtvHwZ+BK3uuMivj84FHpssqcvmoToAc=)
                          2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
                          rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
        Validity
            Not Before: Aug 23 01:03:44 2025 GMT
            Not After : Aug 30 01:03:44 2025 GMT
        Subject: CN=68a91370-7895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:d9:0d:bb:82:3f:eb:f0:75:63:40:1b:15:
                    39:0b:50:66:89:11:dc:44:d1:44:2c:73:9e:c1:fd:
                    71:21:de:80:8e:cc:dc:2f:ff:42:0f:48:2e:62:21:
                    4c:4b:01:ed:12:cf:dc:a7:83:c6:56:d1:30:11:7a:
                    47:f9:57:e9:03:e4:86:41:3e:73:8a:c6:04:9b:74:
                    b8:a5:19:38:30:a5:f1:a3:49:7e:57:ed:8c:02:44:
                    7d:d6:dc:75:1b:73:b8:37:54:a4:ee:bd:dd:77:11:
                    a9:55:5c:5d:d0:d4:03:aa:55:8a:6e:36:98:5b:1c:
                    30:04:29:e2:ce:3d:34:d1:a0:e1:88:23:52:ac:36:
                    5a:b1:9f:ee:a5:a5:d0:fd:d6:ee:3c:80:35:a4:cb:
                    78:13:ec:0d:bf:87:95:34:d4:13:57:57:d5:a4:d3:
                    9d:f1:61:70:0c:a0:a9:fc:a6:0d:06:10:ce:4f:c3:
                    47:74:c1:8a:3d:bf:d6:40:25:d8:bb:1c:c7:c8:d2:
                    4b:fe:a6:73:a0:9f:ba:99:b7:38:48:8f:98:af:21:
                    3d:61:70:8c:e9:9f:6f:b5:be:01:89:f1:ea:24:42:
                    c5:ec:18:a3:78:bd:89:4e:90:da:ce:7b:cb:55:94:
                    76:ca:22:4c:1e:22:e0:9c:5f:08:da:07:52:12:f3:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:9C:33:75:12:46:33:A5:BF:D0:93:5F:E3:41:AA:1D:50:0F:84
            X509v3 Authority Key Identifier:
                keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6d:5d:3f:70:1c:5c:dd:79:e1:86:5c:48:a6:93:9d:d4:ae:
         86:b6:c9:44:37:9a:d0:93:a5:1e:dd:3b:41:17:f3:94:b1:01:
         6a:61:95:0e:e6:d0:0f:70:65:92:a4:6c:5b:0a:4f:67:78:cb:
         55:f7:5d:e2:86:b9:b7:a6:c7:89:8a:e4:79:f5:33:f2:46:d9:
         ce:3b:27:17:18:44:a0:41:5e:df:45:a6:9a:3d:d8:db:7a:da:
         24:8e:2d:a3:65:c4:ca:e1:5e:df:56:e0:b4:ed:c0:34:77:e9:
         77:e8:b8:89:80:f0:69:95:a2:ed:4b:ab:2f:94:87:b3:73:b5:
         dc:a2:30:84:ea:60:85:26:74:dd:a9:7c:7f:da:d1:d9:89:41:
         e0:0f:67:0d:70:94:b1:c7:66:bc:d7:8a:7a:c1:6a:f3:21:c4:
         9f:1c:94:32:04:34:f7:47:9e:29:2c:47:4f:a5:67:f6:a6:c1:
         9c:5b:2b:c9:55:70:46:50:05:d8:db:28:03:51:4f:8a:ea:cb:
         a8:21:f7:ee:35:25:15:af:1e:64:5a:ca:68:9d:b5:17:c5:33:
         92:61:04:3b:19:94:c6:8e:9c:f4:d2:ba:50:a2:6e:99:ab:e8:
         ac:e8:07:3b:e3:b0:87:67:cd:2c:2c:91:c5:4b:9e:35:18:15:
         d6:6a:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:00:41 2025 by rpki-client