Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File:                     JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier:          DbAUUpfB7989Ye+L0YrReT4sSS0r52dB3DjIIgNEi/o=
Subject key identifier:   02:F0:96:A7:18:9F:56:12:E5:09:2A:03:6F:D6:46:5A:47:D2:22:87
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer:       /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial:       27E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number:          27C8
Signing time:             Thu 08 May 2025 15:41:48 +0000
Manifest this update:     Thu 08 May 2025 15:41:48 +0000
Manifest next update:     Thu 15 May 2025 15:41:48 +0000
Files and hashes:         1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: RvjbzvBx2hxT0ccggb3g6Y9VnTQ7lKH7nsCHsC8+yYU=)
                          2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: zYzRPHKgSeX768eROJRNf9tX7Mow08v94Ny1/BRKK1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 15:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10213 (0x27e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
        Validity
            Not Before: May  8 15:41:48 2025 GMT
            Not After : May 15 15:41:48 2025 GMT
        Subject: CN=681cd0bc-2e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:c6:f8:01:84:70:cf:c2:da:8c:54:e1:86:
                    27:47:56:fc:3c:a8:ca:95:e7:50:c3:62:98:5c:d6:
                    f8:5e:74:ce:e7:90:f0:a1:cb:af:c8:b6:50:89:04:
                    5f:a5:a9:4b:45:ee:ef:7b:d7:d1:1e:ef:a5:6e:b2:
                    9d:93:29:da:5e:f2:b4:85:68:14:16:23:5e:f5:97:
                    b1:ab:c3:8b:06:83:ca:ce:2f:a3:73:0c:cc:e4:51:
                    a8:ed:f5:6b:ca:12:6b:a9:0c:ce:1b:2e:bf:27:71:
                    8d:62:a8:74:47:15:db:4d:d7:02:c5:85:f6:7e:15:
                    0b:09:11:21:9c:bc:21:3e:25:dd:1f:0e:4a:73:71:
                    74:47:13:d1:ad:0d:ef:bd:75:39:07:13:bb:8f:55:
                    54:e2:26:8c:8a:b2:ea:06:49:53:28:10:e5:fa:c2:
                    eb:6d:58:dd:42:d7:ea:70:34:ae:a4:7b:71:a3:7d:
                    6c:ef:a2:3f:b2:c8:f6:6b:5d:1e:55:3a:00:0e:e6:
                    eb:6e:43:8c:ad:b6:27:4a:35:10:44:d8:da:2c:1d:
                    d9:1d:da:73:d9:53:e1:22:c8:e8:5f:82:b0:f5:6c:
                    66:1a:a3:07:64:29:68:00:c3:15:c5:3e:37:e7:5a:
                    8c:97:d7:61:53:0c:f6:92:22:4e:0e:ee:c5:8f:82:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:96:A7:18:9F:56:12:E5:09:2A:03:6F:D6:46:5A:47:D2:22:87
            X509v3 Authority Key Identifier:
                keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:69:8a:69:90:07:df:47:4f:6f:64:d5:ba:0b:31:a6:3e:01:
         75:56:69:a3:07:f4:39:a2:0f:41:ef:26:2b:f4:a8:ad:07:9a:
         34:e1:21:a9:b9:98:9c:9a:a5:36:26:9f:7e:42:ff:7b:b5:58:
         24:5e:cd:b3:50:47:3f:0b:40:ff:e2:fb:0a:1a:ab:0c:32:89:
         c7:92:36:fa:d1:9c:f6:a6:1e:d7:bf:83:6b:24:14:72:e4:b4:
         0d:0a:2f:9b:e7:b5:db:bf:2b:c0:c4:5c:83:8d:08:c2:40:f6:
         3d:3c:27:53:20:36:cb:08:44:57:4e:60:72:49:28:5d:ca:10:
         c2:2f:db:09:64:30:42:3b:20:4b:16:84:78:00:ba:f9:85:9b:
         08:53:94:83:ab:a6:3b:dc:7a:97:94:b8:59:d4:c8:5f:bf:1f:
         89:dd:0f:8d:d6:99:1a:8d:25:21:8b:59:9f:b7:e8:0e:59:5d:
         1a:9c:16:5e:b6:76:7a:d5:71:a8:45:10:08:cd:df:ce:c1:36:
         f8:de:36:20:74:d9:ff:3a:8c:af:41:f2:aa:b5:92:f4:bc:fc:
         ad:b7:b3:1b:6c:e3:55:dd:c4:11:0e:8b:9b:e5:d3:95:27:a9:
         c2:11:79:af:07:19:da:8a:02:ff:52:7a:68:5f:8e:42:eb:b6:
         de:2b:e7:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC
NkIyREM5N0EwHhcNMjUwNTA4MTU0MTQ4WhcNMjUwNTE1MTU0MTQ4WjAYMRYwFAYD
VQQDEw02ODFjZDBiYy0yZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2MfG+AGEcM/C2oxU4YYnR1b8PKjKledQw2KYXNb4XnTO55DwocuvyLZQiQRf
palLRe7ve9fRHu+lbrKdkynaXvK0hWgUFiNe9Zexq8OLBoPKzi+jcwzM5FGo7fVr
yhJrqQzOGy6/J3GNYqh0RxXbTdcCxYX2fhULCREhnLwhPiXdHw5Kc3F0RxPRrQ3v
vXU5BxO7j1VU4iaMirLqBklTKBDl+sLrbVjdQtfqcDSupHtxo31s76I/ssj2a10e
VToADubrbkOMrbYnSjUQRNjaLB3ZHdpz2VPhIsjoX4Kw9WxmGqMHZCloAMMVxT43
51qMl9dhUwz2kiJODu7Fj4Kr2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALwlqcY
n1YS5QkqA2/WRlpH0iKHMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy
RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w
Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqaYppkAffR09vZNW6CzGmPgF1VmmjB/Q5og9B7yYr9KitB5o04SGp
uZicmqU2Jp9+Qv97tVgkXs2zUEc/C0D/4vsKGqsMMonHkjb60Zz2ph7Xv4NrJBRy
5LQNCi+b57XbvyvAxFyDjQjCQPY9PCdTIDbLCERXTmBySShdyhDCL9sJZDBCOyBL
FoR4ALr5hZsIU5SDq6Y73HqXlLhZ1Mhfvx+J3Q+N1pkajSUhi1mft+gOWV0anBZe
tnZ61XGoRRAIzd/OwTb43jYgdNn/OoyvQfKqtZL0vPytt7MbbONV3cQRDoub5dOV
J6nCEXmvBxnaigL/UnpoX45C67beK+ee
-----END CERTIFICATE-----
Generated at Sat May 10 02:23:49 2025 by rpki-client