Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          c90iQzbl7PWWQJ5+PzkIIo6fztQzr0S7tEwICsAC9qo=
Subject key identifier:   8A:20:03:B5:FD:1F:E0:66:C8:4C:CB:35:33:B7:03:F4:92:B9:9A:75
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0D76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0D6B
Signing time:             Fri 22 Aug 2025 18:05:29 +0000
Manifest this update:     Fri 22 Aug 2025 18:05:28 +0000
Manifest next update:     Fri 29 Aug 2025 18:05:28 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: IgmLhvnsGnGDqjKWLEGowh9jgNms9Vl08p9SEh5Z3jo=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: Aug 22 18:05:28 2025 GMT
            Not After : Aug 29 18:05:28 2025 GMT
        Subject: CN=68a8b168-a517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:ac:d0:9f:53:88:a9:6f:0a:b2:c6:e3:9b:
                    60:25:14:20:03:70:e3:e0:4e:f7:a3:55:60:72:5b:
                    a9:dd:8d:77:57:67:b3:04:67:57:dc:d0:6f:66:33:
                    2f:0f:d5:48:6f:be:9d:11:45:2b:0e:ac:9a:e4:d5:
                    ad:06:bb:bb:ec:7d:b7:77:e4:53:2b:eb:50:c5:83:
                    5c:cf:71:ca:ae:bc:bc:db:8f:32:26:59:6b:14:ac:
                    41:fa:4a:1c:5a:64:ca:8d:39:a9:83:6b:9e:b8:08:
                    4a:38:05:de:84:bb:35:16:ee:b1:d4:74:e9:05:63:
                    da:ab:ca:c9:ba:c6:a8:73:20:fe:76:3e:90:82:aa:
                    58:f0:ae:f3:ac:2d:1e:2a:5c:a1:fb:29:b0:e1:eb:
                    b7:08:28:c6:79:e8:2b:4a:71:49:7d:71:e9:e8:30:
                    1d:2a:1b:16:81:c7:9a:90:df:f7:85:da:ca:ee:68:
                    09:d2:df:c2:6f:cf:c2:8c:87:ab:85:78:fa:f2:17:
                    18:3f:6c:37:2c:3b:85:6c:2c:9c:f2:ca:79:55:84:
                    32:5f:87:81:49:47:55:6c:68:d9:c0:2a:61:38:48:
                    8e:32:9f:f1:b1:86:31:64:c3:55:c3:9f:50:59:a7:
                    94:a5:e4:1c:a2:17:18:b7:0e:39:df:e7:d1:6f:48:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:20:03:B5:FD:1F:E0:66:C8:4C:CB:35:33:B7:03:F4:92:B9:9A:75
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:74:a7:f6:93:ef:d1:a2:20:57:3c:5c:df:6f:ae:e6:86:
         43:47:70:2a:69:7c:7e:25:c6:96:cc:16:d9:3e:d4:98:a2:8d:
         6e:e4:ba:da:ce:5c:d2:ed:8b:51:54:6d:0c:41:23:9d:c5:b4:
         9e:77:24:b3:a9:70:d8:8d:ea:32:99:2f:a9:ea:86:0e:c9:4c:
         a3:bd:cc:85:e2:9e:11:b5:10:eb:8c:46:4c:f3:7b:6b:84:81:
         2f:20:b2:27:32:8b:b1:3e:ce:50:0e:d6:98:a3:e7:c6:fe:0b:
         00:ba:28:f3:0b:e2:61:fc:8f:1c:60:a1:69:57:68:b7:ab:8a:
         bf:1e:f6:db:86:4a:38:3e:43:0d:7a:8c:06:2f:f5:f1:68:a0:
         b0:f2:ff:6f:39:3e:2b:8b:72:18:22:6c:6d:8b:93:c3:e6:8c:
         a6:67:94:99:15:38:a9:8d:a5:d7:a1:82:01:4a:9b:9c:77:03:
         b8:5e:66:e8:7f:7e:7e:87:a3:d7:bd:a7:42:c4:92:89:84:2b:
         9d:b3:26:26:a3:e2:8a:01:f3:2e:50:6a:09:0c:9c:8d:03:14:
         66:d5:27:e5:08:b3:4c:fd:f6:7e:ac:74:7b:bc:19:5c:0a:65:
         7e:7b:8a:5f:17:0e:f7:d2:b5:53:a0:7c:8e:37:97:e8:02:a7:
         33:ce:b8:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE
QUJGMDNGRUIwHhcNMjUwODIyMTgwNTI4WhcNMjUwODI5MTgwNTI4WjAYMRYwFAYD
VQQDEw02OGE4YjE2OC1hNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHis0J9TiKlvCrLG45tgJRQgA3Dj4E73o1Vgclup3Y13V2ezBGdX3NBvZjMv
D9VIb76dEUUrDqya5NWtBru77H23d+RTK+tQxYNcz3HKrry8248yJllrFKxB+koc
WmTKjTmpg2ueuAhKOAXehLs1Fu6x1HTpBWPaq8rJusaocyD+dj6QgqpY8K7zrC0e
Klyh+ymw4eu3CCjGeegrSnFJfXHp6DAdKhsWgceakN/3hdrK7mgJ0t/Cb8/CjIer
hXj68hcYP2w3LDuFbCyc8sp5VYQyX4eBSUdVbGjZwCphOEiOMp/xsYYxZMNVw59Q
WaeUpeQcohcYtw453+fRb0hibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIogA7X9
H+BmyEzLNTO3A/SSuZp1MB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0
OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL
Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGXHSn9pPv0aIgVzxc32+u5oZDR3AqaXx+JcaWzBbZPtSYoo1u5Lra
zlzS7YtRVG0MQSOdxbSedySzqXDYjeoymS+p6oYOyUyjvcyF4p4RtRDrjEZM83tr
hIEvILInMouxPs5QDtaYo+fG/gsAuijzC+Jh/I8cYKFpV2i3q4q/Hvbbhko4PkMN
eowGL/XxaKCw8v9vOT4ri3IYImxti5PD5oymZ5SZFTipjaXXoYIBSpucdwO4Xmbo
f35+h6PXvadCxJKJhCudsyYmo+KKAfMuUGoJDJyNAxRm1SflCLNM/fZ+rHR7vBlc
CmV+e4pfFw730rVToHyON5foAqczzrhI
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:35:02 2025 by rpki-client