Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
File:                     J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft (raw, json)
Hash identifier:          ETL55okmMOlpp74PKs6MYRMoHP5UDZYf69gOvDT+MUY=
Subject key identifier:   BF:10:93:17:98:65:11:FF:F0:37:84:C3:E0:AC:A4:64:6C:6D:5D:3C
Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07
Certificate issuer:       /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
Manifest number:          37
Signing time:             Sat 23 Aug 2025 07:47:49 +0000
Manifest this update:     Sat 23 Aug 2025 07:47:49 +0000
Manifest next update:     Sat 30 Aug 2025 07:47:49 +0000
Files and hashes:         1: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl (hash: 1cSvD+moi382SLWldShLC6LamGeaiIpGoFlfjvvVTmE=)
                          2: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (hash: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl
                          rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
        Validity
            Not Before: Aug 23 07:47:49 2025 GMT
            Not After : Aug 30 07:47:49 2025 GMT
        Subject: CN=68a97225-7cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:3d:be:76:54:cc:b2:6f:30:92:65:87:03:
                    fe:ea:f3:2f:eb:03:da:26:8b:83:73:45:3c:45:03:
                    a4:b9:75:f5:f7:8a:19:f6:0c:0e:ea:e3:03:11:f1:
                    2c:4b:98:01:7f:52:bc:bd:e5:e1:ab:7e:99:17:35:
                    36:13:3c:ac:4b:b8:52:95:9d:e8:43:17:92:7d:51:
                    87:4d:dd:67:79:62:b5:23:ad:44:5c:bf:1c:93:5d:
                    ed:24:f3:52:3a:25:76:64:f7:e0:09:1b:76:db:cd:
                    a0:8d:bb:0b:a7:b8:f7:9b:5c:7a:4a:eb:3e:4a:67:
                    e6:d0:0d:f1:b9:48:2b:71:e2:6f:db:dc:a0:21:9a:
                    ef:50:78:60:9a:b1:68:5e:86:b2:ce:e8:3d:49:0d:
                    f0:d2:f9:b0:3b:1a:13:cd:43:a8:03:b3:2f:7f:a8:
                    57:53:ae:9e:b2:e9:6a:54:78:50:c7:df:19:03:3c:
                    3a:f9:fd:b8:80:46:5f:95:e7:69:91:4f:f8:0c:c2:
                    58:b7:51:43:57:37:7a:f6:18:c9:bd:b2:73:9d:ae:
                    78:ce:80:c8:4a:1c:e6:3c:cd:a9:ab:7b:71:29:9b:
                    24:c7:b6:4b:52:1d:59:13:13:a8:06:9e:27:1e:60:
                    ec:d7:28:80:82:26:bf:70:45:ab:65:72:28:1a:c9:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:93:17:98:65:11:FF:F0:37:84:C3:E0:AC:A4:64:6C:6D:5D:3C
            X509v3 Authority Key Identifier:
                keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:95:8b:3d:16:19:31:f2:fa:2a:f9:41:3e:01:e1:5c:f8:2c:
         ad:97:13:62:43:fa:0b:e3:9c:2f:ae:c4:c7:e8:11:f1:3b:61:
         0e:f6:b1:e7:0d:35:21:1e:38:ce:59:43:73:4e:87:6e:10:52:
         e6:d6:cd:fd:97:a5:22:1a:4a:9d:77:ad:37:59:bd:8a:00:b0:
         ec:9d:7c:8a:85:97:49:d8:2a:b0:89:0f:03:2a:cc:b8:a9:8a:
         b2:55:9d:6d:e6:2b:00:93:06:83:4c:d1:59:c2:7a:9a:c5:6c:
         27:e3:af:62:c1:2d:bb:bb:17:1e:90:5e:a6:27:e1:95:e1:28:
         3c:4e:6e:ea:87:ec:1d:46:ab:f8:ec:a7:ad:93:00:04:6d:06:
         a1:8b:18:05:4b:7a:32:8b:93:23:b8:5a:9c:18:09:5c:47:29:
         73:22:ee:3c:ee:ab:15:2e:9f:76:ce:5c:df:0f:e2:0e:65:c3:
         55:92:c8:e4:e8:62:b9:6e:de:e9:b2:4f:ce:02:c3:40:fd:1f:
         2e:31:a6:dd:ff:b6:a2:fa:f1:8d:21:25:42:d2:91:4f:70:ac:
         51:33:fc:3a:6a:a6:2c:78:d9:fd:f5:6a:94:12:c9:5d:d9:ee:
         92:92:00:6c:8a:90:6f:a1:78:df:a3:cf:68:22:b7:7f:3c:b7:
         10:bb:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:33 2025 by rpki-client