Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          pUKE9ydgtLOJsxnI8sqBnbaEps1o92C+aVFJzrSJLTs=
Subject key identifier:   EF:4D:AA:A9:81:B3:92:14:9F:8E:E1:76:EB:80:45:15:A7:A9:07:83
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          69
Signing time:             Sat 23 Aug 2025 07:12:58 +0000
Manifest this update:     Sat 23 Aug 2025 07:12:58 +0000
Manifest next update:     Sat 30 Aug 2025 07:12:58 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: /iCddrKNnSGxiZnTksUpM2U+nDgeGmYhRdiwzL7uCPQ=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Aug 23 07:12:58 2025 GMT
            Not After : Aug 30 07:12:58 2025 GMT
        Subject: CN=68a969fa-c766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:45:ce:e4:f0:fc:17:63:79:66:3e:d4:3d:
                    42:1b:3f:9f:cc:f3:96:f8:52:d5:97:fc:a2:61:ee:
                    6a:10:8e:9f:2b:1f:f9:44:c3:f5:aa:e0:12:c0:b3:
                    05:2d:86:ce:5e:51:3c:a4:35:3d:22:7a:6e:24:c9:
                    4e:4c:d6:34:6c:e5:67:4f:bb:03:53:3b:b6:41:40:
                    4c:31:b0:f2:e7:25:ec:1e:fa:2e:8a:1e:e6:d6:aa:
                    c6:2d:e9:bb:94:12:8e:e3:84:80:b2:f7:f6:9d:86:
                    09:63:80:d8:ed:e8:4e:a3:67:b0:27:7e:16:9f:5c:
                    a7:f2:2f:c0:a9:ac:4c:04:f7:f5:dc:19:5c:d7:c8:
                    73:07:08:57:8a:5d:a3:e7:5a:45:54:1c:be:11:8e:
                    ec:11:45:21:ce:ed:82:cf:2d:6a:b7:05:b5:28:22:
                    65:e0:5a:47:72:1f:2c:2c:f7:e2:e8:86:13:a2:7f:
                    97:0d:ba:23:61:dd:f0:23:7b:22:8d:6c:80:3d:c7:
                    a9:75:ca:e6:36:7b:08:63:85:3d:5d:cf:a5:0a:84:
                    37:09:df:71:3e:08:f3:35:0b:5b:f3:b0:5c:61:f9:
                    3f:9a:de:f3:19:37:8f:df:3f:9d:d4:1c:a2:49:28:
                    20:12:d0:2c:bc:5e:87:af:a1:b7:75:2c:b1:a8:9f:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:AA:A9:81:B3:92:14:9F:8E:E1:76:EB:80:45:15:A7:A9:07:83
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:51:66:65:0c:4e:85:e2:4e:48:b2:ab:73:0a:fc:fb:f9:
         b5:6f:0b:e2:96:1e:59:89:3b:61:b9:b1:06:69:c3:27:f0:04:
         dd:3f:8e:8c:b4:a0:d2:2c:88:87:55:9d:fa:d6:ed:05:18:7a:
         11:08:06:4e:7a:ee:ab:0f:32:df:ed:7e:d0:6e:36:82:d1:50:
         67:cc:5a:c0:07:35:4c:6f:30:a4:7b:f9:4b:a3:37:51:63:38:
         0f:37:b6:d5:6c:dc:1e:1e:17:a3:13:5e:26:65:0f:79:32:31:
         35:44:7e:11:f1:84:41:b9:5a:d5:91:e1:bd:1c:92:b5:91:70:
         4b:14:a0:68:6a:3e:28:0b:e5:59:6f:c9:8d:86:08:eb:71:05:
         16:e4:b0:e1:03:28:02:7c:0a:45:84:7e:ee:9e:9f:3d:ee:e7:
         b0:2b:17:78:c6:ca:30:dd:f9:88:1d:31:55:0c:17:3b:a6:8c:
         62:2b:da:45:22:4d:8b:34:48:15:d2:45:ab:7c:af:e0:09:33:
         f3:2e:a6:07:37:d3:dd:95:cf:a4:e0:42:bc:d0:a2:28:89:44:
         8c:ca:94:10:09:e5:04:33:33:d7:79:19:bd:1d:9d:d7:e8:df:
         49:06:e6:74:92:0f:86:fa:29:77:75:37:ba:c9:27:f4:8d:6a:
         20:3d:b6:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NkM5MDExMC8GA1UEBRMoOEYyMkQxRjU2MkEwNTA3QjExMzU4RjA1M0RBNDJDODA1
MkQ0Qjk1NTAeFw0yNTA4MjMwNzEyNThaFw0yNTA4MzAwNzEyNThaMBgxFjAUBgNV
BAMTDTY4YTk2OWZhLWM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRhUXO5PD8F2N5Zj7UPUIbP5/M85b4UtWX/KJh7moQjp8rH/lEw/Wq4BLAswUt
hs5eUTykNT0iem4kyU5M1jRs5WdPuwNTO7ZBQEwxsPLnJewe+i6KHubWqsYt6buU
Eo7jhICy9/adhgljgNjt6E6jZ7AnfhafXKfyL8CprEwE9/XcGVzXyHMHCFeKXaPn
WkVUHL4RjuwRRSHO7YLPLWq3BbUoImXgWkdyHyws9+LohhOif5cNuiNh3fAjeyKN
bIA9x6l1yuY2ewhjhT1dz6UKhDcJ33E+CPM1C1vzsFxh+T+a3vMZN4/fP53UHKJJ
KCAS0Cy8Xoevobd1LLGonzkJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU702qqYGz
khSfjuF264BFFaepB4MwHwYDVR0jBBgwFoAUjyLR9WKgUHsRNY8FPaQsgFLUuVUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QzkwLzMxQjQ1RkVDRTIx
RDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhzUk5ZOEZQYVFzZ0ZMVXVW
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanlMUjlXS2dVSHNSTlk4RlBhUXNnRkxVdVZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
QzkwLzMxQjQ1RkVDRTIxRDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhz
Uk5ZOEZQYVFzZ0ZMVXVWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGwaUWZlDE6F4k5IsqtzCvz7+bVvC+KWHlmJO2G5sQZpwyfwBN0/joy0
oNIsiIdVnfrW7QUYehEIBk567qsPMt/tftBuNoLRUGfMWsAHNUxvMKR7+UujN1Fj
OA83ttVs3B4eF6MTXiZlD3kyMTVEfhHxhEG5WtWR4b0ckrWRcEsUoGhqPigL5Vlv
yY2GCOtxBRbksOEDKAJ8CkWEfu6enz3u57ArF3jGyjDd+YgdMVUMFzumjGIr2kUi
TYs0SBXSRat8r+AJM/Mupgc3092Vz6TgQrzQoiiJRIzKlBAJ5QQzM9d5Gb0dndfo
30kG5nSSD4b6KXd1N7rJJ/SNaiA9tk0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:46 2025 by rpki-client