Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          c8BwkKlU2LD4Z/Cfs/YGwE/hwbx9zY1IDqX00vdPQrw=
Subject key identifier:   D4:3A:CD:D4:58:40:0E:6C:EB:BE:26:8B:DA:57:1F:4B:58:1D:08:5A
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          70
Signing time:             Thu 03 Jul 2025 07:07:40 +0000
Manifest this update:     Thu 03 Jul 2025 07:07:40 +0000
Manifest next update:     Thu 10 Jul 2025 07:07:40 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: 8Tflm3zp+orkL1KnigGHoZYdP4FkmLgo5/7uWB6wqPI=)
                          2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=)
                          3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=)
                          4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Jul  3 07:07:40 2025 GMT
            Not After : Jul 10 07:07:40 2025 GMT
        Subject: CN=68662c3c-bff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:1f:52:93:d6:6f:a2:1f:e9:09:e9:1c:bd:
                    d3:35:8f:2f:80:f5:f4:42:2e:d9:c6:dd:c6:a6:bd:
                    2c:b6:af:f5:7f:3f:bd:f7:ba:6c:8f:5f:c6:f4:43:
                    e8:c3:4b:b2:fc:04:3a:24:9d:42:4a:d4:b5:65:d6:
                    35:b1:70:f2:3d:2e:b4:a1:e5:26:6d:c5:e7:42:68:
                    bc:4d:68:67:b2:96:1b:5f:99:4c:db:80:c2:83:75:
                    44:0d:af:a5:50:af:4c:47:17:ce:91:4d:12:59:ec:
                    52:cb:bf:db:7a:86:fd:0f:1d:4f:3d:b4:0d:ca:99:
                    ea:86:67:dd:ce:47:7b:a5:44:0a:02:39:fb:89:5f:
                    ab:e6:ff:24:5d:8a:24:a3:74:91:d5:aa:82:38:61:
                    83:18:8a:b2:d9:6f:65:2f:7d:53:58:26:a0:3e:ac:
                    05:db:01:3d:d3:90:69:b8:84:da:ba:95:35:c3:d9:
                    9e:c4:18:d4:f2:c6:1e:3f:f8:1e:20:0b:c2:f7:71:
                    c7:a5:76:8d:e7:88:e7:d2:d9:3d:dd:39:47:b3:d3:
                    26:b4:88:5b:f5:0a:91:fb:88:05:1d:da:af:30:f6:
                    65:79:ea:f8:0e:29:e6:7c:f3:b4:5f:22:30:11:fb:
                    4f:ff:93:8f:20:63:fa:e4:bb:3c:93:67:fd:57:2e:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:CD:D4:58:40:0E:6C:EB:BE:26:8B:DA:57:1F:4B:58:1D:08:5A
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:38:28:19:23:d5:29:d0:84:73:d7:17:1b:ce:78:8f:18:e1:
         bb:fe:73:42:9f:9c:96:9d:01:a9:57:6b:69:04:09:56:2f:97:
         b3:54:69:54:27:85:63:30:9e:85:20:3d:59:7c:31:e1:eb:98:
         7d:e4:06:77:fc:2c:6f:f4:76:49:24:2d:1b:06:ea:b8:ae:1f:
         49:43:96:8e:1f:66:6c:2f:d9:cf:a8:f2:ed:d1:51:89:84:8a:
         83:80:3b:86:52:00:30:7c:31:14:39:81:4f:23:de:93:62:6a:
         29:50:6d:a5:2e:0f:bb:c0:ab:a6:bc:04:3b:8b:d8:32:90:99:
         bc:f3:6c:24:26:67:54:27:93:fe:c7:86:af:c1:38:aa:d3:94:
         8d:16:5f:e9:b0:2e:71:e6:2b:bb:6e:cc:af:78:74:22:eb:38:
         5c:43:36:c7:13:cf:c3:7c:ab:7b:47:9c:5c:03:83:15:4c:a6:
         33:b8:5d:3a:d5:5d:70:94:0a:c3:37:68:d3:62:7a:a4:ba:21:
         83:d3:db:82:4b:cf:6d:ef:95:81:22:bd:9f:a3:1b:56:6f:12:
         b6:a4:00:2f:f6:28:d2:94:b5:5f:03:de:7c:ce:2a:5a:a0:7a:
         4a:14:d9:e1:e6:ae:69:74:a0:e4:d4:c9:3b:02:7e:31:5b:21:
         7d:92:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:45:48 2025 by rpki-client