Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          uBb8JOw+FEhTAKC4drMKdTmbj5jcioDlMJVkZUErEh8=
Subject key identifier:   6A:24:C5:DF:3E:88:81:FF:10:35:04:7D:09:73:3B:62:F3:24:AF:F2
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          56
Signing time:             Sun 29 Jun 2025 06:13:26 +0000
Manifest this update:     Sun 29 Jun 2025 06:13:26 +0000
Manifest next update:     Sun 06 Jul 2025 06:13:26 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: oTjqty4IKbRNGq4Z2LnWE4PAnWdHdrGmrnVggoDTCCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 06:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Jun 29 06:13:26 2025 GMT
            Not After : Jul  6 06:13:26 2025 GMT
        Subject: CN=6860d986-0d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:bf:6c:ba:cf:08:8b:ee:28:0f:55:7a:00:
                    20:b3:a7:d8:c3:b8:4e:c1:b9:dc:a8:75:4c:85:5f:
                    23:a8:ce:52:c7:0e:5b:2c:22:34:41:1c:11:45:73:
                    9e:79:da:52:f8:c6:b7:e3:d0:1b:80:5d:0a:6b:06:
                    ab:84:30:08:18:85:74:db:35:e1:b4:3b:c4:81:2b:
                    20:a9:24:6b:ef:cf:dd:35:7e:4a:db:f1:73:e1:78:
                    f3:3a:a9:b1:8b:6a:c5:37:73:d2:c4:f9:fa:e1:d9:
                    db:6a:b6:e4:d7:1a:7b:f8:31:62:c6:23:ca:09:10:
                    5f:f4:6e:c2:cf:e1:4a:cb:9a:c2:3c:b8:e4:15:0f:
                    23:e0:ca:cd:dd:cb:16:db:b8:ce:b5:21:0c:8c:a0:
                    a0:40:b3:7c:da:8d:b2:18:48:d4:6c:f4:9e:02:9e:
                    43:41:b6:70:14:4d:16:a2:29:54:7e:f5:73:3f:f9:
                    f6:7b:77:52:46:c4:d9:c2:09:77:53:99:67:ab:ba:
                    52:5e:97:a6:b2:4f:a1:fd:2c:27:ec:1b:22:b8:ae:
                    63:2b:4f:6f:ac:03:d4:6a:67:c5:40:55:57:a6:c7:
                    2f:94:02:d5:08:ca:ee:03:4c:92:6e:09:3e:ff:7b:
                    91:93:50:a8:1d:09:9d:f2:a2:a4:17:18:68:f5:4c:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:C5:DF:3E:88:81:FF:10:35:04:7D:09:73:3B:62:F3:24:AF:F2
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:3f:2b:c7:48:3d:fb:e3:71:7d:22:bc:ad:51:6f:7f:ab:
         08:ca:b4:df:a0:0f:81:97:d6:21:32:e7:8b:7f:73:93:6f:b5:
         aa:3f:2b:42:a0:d3:22:a2:1f:05:6a:da:3d:e2:e4:9b:e5:88:
         8e:53:7f:74:0f:c4:ca:d1:14:d9:51:d8:f6:16:32:3e:0a:bf:
         e5:3f:2e:49:03:8f:d3:36:62:c0:e9:58:d6:35:85:77:8b:06:
         f7:4a:d5:3d:52:77:4d:40:f4:f9:6f:73:34:b7:3f:0f:0a:60:
         25:0f:93:76:73:78:98:95:44:77:2a:1b:93:64:93:82:e1:06:
         f3:cd:18:ad:8d:93:95:2a:f6:8a:28:c3:80:c4:5f:fa:7d:f4:
         d9:d8:6c:1e:b6:55:45:3d:17:1e:77:5c:4f:63:39:56:ce:25:
         6c:05:d4:07:7c:fb:4b:11:d1:99:13:5a:0e:a8:d1:25:0d:55:
         c7:37:f7:2a:7a:14:51:2e:0b:52:43:27:5e:8b:13:70:32:8c:
         c6:58:78:d5:12:88:36:1d:cd:22:6d:e1:73:d6:d8:de:c2:86:
         eb:68:07:49:32:71:98:08:90:90:93:56:21:4b:31:6c:e5:a4:
         7a:ec:85:4e:27:6e:30:f8:0d:c7:51:bb:66:3f:43:66:f0:fc:
         7a:48:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:59:25 2025 by rpki-client