Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File:                     J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier:          gsRGJ4QcSOCn8wqRSMQ25up4LiA2T/sufZlgdxj6w1E=
Subject key identifier:   65:A4:0C:02:2D:AD:B3:D3:D2:30:4D:C2:E8:0F:12:D6:D2:B0:85:C7
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       0345
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number:          033E
Signing time:             Tue 01 Jul 2025 01:39:04 +0000
Manifest this update:     Tue 01 Jul 2025 01:39:03 +0000
Manifest next update:     Tue 08 Jul 2025 01:39:03 +0000
Files and hashes:         1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: GsZU+QWNgj8yTlVrb76S6XSK9ncD3DKStGTw+LXkTaE=)
                          2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: 7tRXe0RCYJtYetkPzXHwKI+UWg4HugV8cA+U6bVnlYk=)
                          3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: Yllv7GduXNWOYIX1rMtXNPRv/0417UqdoQWVHJFRoH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Jul  1 01:39:03 2025 GMT
            Not After : Jul  8 01:39:03 2025 GMT
        Subject: CN=68633c38-7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:27:66:1a:6d:f8:7f:fc:8b:5d:65:dc:f4:
                    6f:b0:9f:5d:aa:48:34:63:43:94:05:27:94:50:91:
                    0f:f8:c5:4f:0d:7c:5b:78:24:fc:ea:0b:3d:81:46:
                    73:5e:dc:f9:e7:35:93:64:44:17:15:24:99:83:66:
                    93:96:18:87:3d:76:a8:92:d3:c1:fb:c8:53:6a:9d:
                    b3:8a:79:5b:b0:e1:48:82:1a:97:7c:2c:50:b2:2b:
                    df:39:36:db:fa:5e:5f:16:c4:a0:18:b1:a4:31:2a:
                    3e:40:06:1a:9b:c0:c4:38:d5:bc:c4:92:a9:b8:e2:
                    7d:e3:1f:73:84:21:47:cd:40:64:d6:46:fc:83:21:
                    da:81:fd:05:cf:b2:88:8a:ed:51:94:10:dd:45:2c:
                    12:f2:51:b0:2a:62:ba:48:f4:56:af:1c:8f:71:03:
                    96:83:e4:b9:47:fe:cd:27:d6:80:1b:fd:ab:a8:89:
                    53:17:31:77:df:a9:d9:67:e6:e7:11:c7:90:b6:3c:
                    a5:27:69:5d:ac:81:5d:f9:eb:f9:26:de:02:df:26:
                    20:b9:cd:3c:64:dc:9b:81:38:ff:6f:7c:b0:40:49:
                    d9:79:61:68:f1:b5:fd:e0:14:e5:7c:2d:3f:3d:08:
                    96:b5:b6:66:2e:99:24:fa:5f:8b:d9:7e:a5:27:70:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:0C:02:2D:AD:B3:D3:D2:30:4D:C2:E8:0F:12:D6:D2:B0:85:C7
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:8f:0c:23:23:73:42:67:a5:cb:8f:e9:e4:c3:c5:ac:ca:
         1e:c3:ce:77:0b:63:6c:d5:87:89:1d:74:38:e7:2b:5d:07:22:
         36:c4:8e:cb:2b:b8:a8:7d:bc:af:b3:e3:6a:65:66:fb:10:da:
         27:3b:e4:fc:14:9e:b8:c6:58:6f:60:9e:8d:8f:a6:d3:f1:94:
         b1:0f:24:78:9e:8c:fe:3b:55:ba:ce:3e:a6:d6:5f:99:6d:f0:
         5c:7c:df:d9:89:ca:5f:25:e7:b3:1e:c6:ad:fa:8d:e5:74:44:
         a0:6c:ae:2b:e6:f1:cd:8f:2e:5c:09:d4:3a:92:a0:0b:51:54:
         4c:9b:cb:31:dc:19:0d:eb:72:a9:e9:c9:c1:f5:d8:02:24:0c:
         e0:a5:33:6f:bc:0e:90:27:90:3e:ee:a0:ca:a2:10:68:50:61:
         8d:55:a2:b1:94:5e:e9:85:4b:54:e2:d5:9f:b3:63:4f:09:c7:
         40:1f:de:30:fa:c5:2b:5f:a5:19:a0:22:6b:f3:db:09:fd:de:
         35:55:d2:17:ca:e4:13:d4:96:ed:66:d7:30:6d:09:ae:be:34:
         9e:a8:b3:8c:e5:0e:63:b1:55:8b:f2:b5:7f:3f:38:85:53:0a:
         4a:cf:f1:11:f3:ac:1b:f0:06:e4:73:55:27:cc:aa:bc:43:da:
         0d:cd:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:19:35 2025 by rpki-client