Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File:                     JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier:          7sJdrmqJw1WVRBpxDb2NMXml0aYKFp5JM6qj7mf530s=
Subject key identifier:   48:ED:3A:8E:4E:2A:C3:61:78:70:76:FD:0B:20:67:27:28:93:A9:57
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer:       /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial:       0C9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number:          1081
Signing time:             Fri 22 Aug 2025 18:23:35 +0000
Manifest this update:     Fri 22 Aug 2025 18:23:34 +0000
Manifest next update:     Fri 29 Aug 2025 18:23:34 +0000
Files and hashes:         1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: 1qzYHJnjwj4SvNZbcECV5PhhSO606s0AubQXqMxfvUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3226 (0xc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
        Validity
            Not Before: Aug 22 18:23:34 2025 GMT
            Not After : Aug 29 18:23:34 2025 GMT
        Subject: CN=68a8b5a7-5a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:47:d9:e6:e2:ef:b4:a3:9e:91:37:62:da:
                    e7:b3:1c:76:3a:9f:d2:bd:58:f3:3f:9b:a6:7c:b6:
                    b7:62:7f:76:68:1b:d1:4d:95:67:0a:65:0f:4b:ed:
                    0d:07:01:f3:77:9d:a6:10:a8:b5:fb:0a:ce:1b:96:
                    89:b7:9c:82:92:d8:29:2e:ef:05:74:28:c2:34:63:
                    a0:80:f9:a3:c3:6a:26:ff:d9:16:aa:a8:47:b3:d2:
                    30:b6:50:18:6a:9e:9c:24:dd:76:8b:79:87:5f:7e:
                    d9:d9:1a:24:7b:31:b2:0b:38:cd:b3:53:da:d7:81:
                    38:d8:ee:71:b8:4e:04:4b:23:d6:3f:5e:07:75:5c:
                    f6:b5:b6:98:bb:58:c2:2e:ef:37:1c:63:f4:43:af:
                    f6:11:50:86:ef:87:cb:bb:05:4f:4e:32:e4:bc:19:
                    1f:2b:ea:59:4f:c9:bb:44:06:83:75:ef:7f:c8:dc:
                    a1:36:71:be:b2:de:4a:0e:4d:df:c1:49:5a:11:6f:
                    bb:8b:4f:98:a4:ce:ea:fb:b5:45:36:c1:c0:84:87:
                    6e:f7:06:6f:48:ff:eb:ad:4f:ca:da:ee:28:f5:bd:
                    e3:c3:17:11:9c:8d:40:5d:a2:78:d1:57:89:97:eb:
                    c0:bf:94:f5:21:ca:ed:8c:96:7d:9a:ab:b4:e4:78:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:3A:8E:4E:2A:C3:61:78:70:76:FD:0B:20:67:27:28:93:A9:57
            X509v3 Authority Key Identifier:
                keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:d7:58:5b:be:25:bd:ca:1c:9d:81:cf:bc:73:25:67:e9:
         09:61:60:3c:d4:24:29:23:bb:9a:43:16:6e:a8:f9:aa:b4:97:
         06:17:f9:7c:e9:db:e6:fe:0b:27:74:77:7f:ea:d8:9f:62:32:
         b2:b5:9d:3f:54:20:19:81:15:f9:7d:9d:a6:6d:72:39:e4:34:
         08:2c:ad:46:21:af:98:18:5a:fb:64:1e:7b:e6:27:65:38:68:
         8e:35:51:4e:75:dd:9e:dd:6a:6f:0c:b1:1a:d3:c1:53:fb:fa:
         07:c5:e1:ea:f1:ed:cb:69:91:f9:cb:fe:f2:5e:a4:96:33:8d:
         d6:4d:24:c9:ba:8a:52:f7:68:3e:8c:ed:65:3a:5a:2e:83:0c:
         7f:0d:54:29:c7:a2:55:bb:ca:17:97:05:11:54:88:32:1d:cd:
         25:34:e3:c5:1c:3c:ee:83:25:8c:68:12:7d:61:66:d5:26:65:
         73:27:76:0d:d4:22:eb:96:31:6d:c1:80:54:94:15:e5:5d:4e:
         2a:29:60:46:95:73:61:0c:2a:af:ec:d5:16:02:eb:a2:ac:f0:
         de:41:68:70:be:60:a9:b1:d2:c5:d4:db:df:e8:1c:91:5b:9d:
         9f:b7:e4:0c:8f:09:d7:62:0d:1e:45:9a:79:0f:2f:9c:69:c6:
         93:00:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:53:47 2025 by rpki-client