Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          6ZL6hzQIj6kFdWbEeKgpQBnaacC5OUzky8/aQXmLO14=
Subject key identifier:   A1:E1:2B:65:DB:96:06:99:06:8E:75:E0:09:D9:8A:EF:DE:62:A9:39
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          4E
Signing time:             Tue 01 Jul 2025 08:04:36 +0000
Manifest this update:     Tue 01 Jul 2025 08:04:36 +0000
Manifest next update:     Tue 08 Jul 2025 08:04:36 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: VpwfFtzWahKS8XrLa5vpoarD4NxGnHBdOG6MTl19oeo=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Jul  1 08:04:36 2025 GMT
            Not After : Jul  8 08:04:36 2025 GMT
        Subject: CN=68639694-6cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:28:11:af:7c:35:bd:1f:23:24:2c:cc:67:
                    30:97:67:bd:7b:eb:59:a8:fc:6b:1b:7f:fc:c1:99:
                    ff:0f:83:9f:db:46:3e:95:31:ba:65:ea:e3:b4:e8:
                    0b:c2:c4:3d:3a:9c:f3:e1:e7:30:0f:49:ba:5b:2f:
                    f0:13:9e:ba:4b:b5:d3:1e:23:b8:e5:bb:f9:7d:3c:
                    1a:f4:da:1c:74:96:de:5c:1a:d9:02:a7:17:f8:70:
                    32:1a:e9:f1:ca:c8:00:b8:30:0c:b3:de:0b:f6:de:
                    ff:50:e2:b9:dd:4d:34:4a:c3:39:2b:19:8b:5c:14:
                    2f:aa:12:03:f1:b1:30:b3:c3:e9:62:97:a0:a1:e1:
                    3d:de:4e:0c:29:25:dd:cd:72:32:2a:ab:cd:b3:da:
                    f8:6c:f9:50:84:05:24:49:de:f4:aa:57:e0:97:5e:
                    28:04:ab:ce:d2:05:e6:fc:84:de:f6:d9:1e:e5:f4:
                    59:ce:ed:b1:d8:47:8a:14:27:7f:0f:32:ac:46:c6:
                    5b:1a:d8:d3:78:8d:01:c3:de:1a:39:7f:90:21:1c:
                    5d:a3:ce:fb:95:a1:98:11:cc:e2:0f:fb:13:f7:4b:
                    29:e9:7b:be:67:ea:81:62:b5:ce:6b:7d:ef:5c:58:
                    d7:6e:57:d9:4d:10:3d:68:90:bd:24:fe:b5:26:f6:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:2B:65:DB:96:06:99:06:8E:75:E0:09:D9:8A:EF:DE:62:A9:39
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:e5:ba:dd:c7:75:eb:1b:af:8f:e5:84:0d:26:0b:14:c8:
         4f:66:d2:b1:aa:ed:1c:e1:07:f8:1a:c3:a5:95:e1:63:1d:56:
         ae:3d:6d:e3:ea:40:74:73:63:22:38:f0:9a:07:14:52:16:b6:
         ff:ec:52:e9:64:fe:d5:ec:a0:01:23:df:31:37:9f:57:a9:e6:
         07:16:da:3d:df:61:ad:eb:dd:d9:e3:d3:c7:c3:59:ab:1c:49:
         8b:39:8e:88:99:de:3b:43:3c:ec:ad:84:9f:48:d9:cb:91:ae:
         e9:a5:de:b4:fc:75:49:92:11:4b:20:ed:c3:e5:00:4c:d7:67:
         68:f4:65:db:13:93:a2:7e:3f:cf:01:01:0c:f7:80:89:9e:01:
         00:eb:32:ca:1d:6e:07:3f:b4:b1:44:f7:e0:30:1b:2d:69:2f:
         a0:e7:a9:43:e1:11:2a:a1:39:30:5f:3f:98:dc:0f:b9:d1:38:
         f3:38:84:0a:53:ad:a2:07:89:90:19:54:88:f2:2d:44:fa:44:
         3d:48:89:ec:38:61:0b:5c:36:fa:54:ed:28:45:b4:58:df:46:
         ee:b7:0c:71:ec:9e:47:9f:54:c1:40:72:66:0a:29:7e:5d:70:
         8e:d4:cc:4e:d1:e8:e2:2e:97:b7:ea:24:7b:ca:c8:f4:81:ea:
         ed:74:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:04:36 2025 by rpki-client