Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json)
Hash identifier:          tzIKN0hJ1VJ6c8LNDbQ0nqLxxApgAhrE7cHGqwNiJMM=
Subject key identifier:   09:3B:D7:75:7D:B4:11:43:34:36:5D:9A:7A:8A:62:E3:3E:45:01:68
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
Manifest number:          70
Signing time:             Thu 03 Jul 2025 07:07:08 +0000
Manifest this update:     Thu 03 Jul 2025 07:07:07 +0000
Manifest next update:     Thu 10 Jul 2025 07:07:07 +0000
Files and hashes:         1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: VXsDxoqOfDZo/T/uo2C/vgIZjC1gtPGpfq+eluWs0ps=)
                          2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Jul  3 07:07:07 2025 GMT
            Not After : Jul 10 07:07:07 2025 GMT
        Subject: CN=68662c1c-6cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:4a:1b:21:52:97:05:41:75:4f:a5:5c:23:
                    2d:61:aa:b3:8b:8b:cf:e8:97:9c:84:9b:3b:9d:d3:
                    75:de:dd:2e:e2:8a:d9:30:5b:cc:db:2f:f4:94:b1:
                    ae:a4:d5:a6:36:b9:b2:56:62:ad:74:b2:c9:ad:16:
                    23:1b:8e:91:d4:31:d3:4d:ff:8d:b2:0e:4c:1f:55:
                    54:38:bc:b9:95:17:1e:85:3b:5d:c1:8c:f6:ec:99:
                    54:25:eb:c6:3b:6b:13:82:e4:c6:9b:b1:8d:72:45:
                    14:19:d6:3c:10:78:6e:db:17:ed:b1:69:bd:01:46:
                    fc:7b:13:9c:ed:12:be:5f:59:37:44:50:dc:ad:a0:
                    66:b0:ff:26:9e:09:9c:34:a1:0e:3a:70:e9:ac:3b:
                    14:2d:bb:ed:9e:56:8f:dc:ec:8c:e1:b8:b4:6c:f7:
                    40:17:17:34:51:eb:73:e3:86:81:36:6e:7c:42:dc:
                    ad:20:08:87:ff:9d:de:3c:96:30:c7:9a:27:fc:3a:
                    9a:74:07:5b:b0:11:66:a7:3d:0b:96:3a:30:cd:a0:
                    15:aa:5e:27:af:57:74:96:ce:d4:3a:15:0b:e4:ef:
                    45:df:89:9d:61:df:8a:bc:54:1f:3c:a5:ad:9b:7e:
                    f2:5c:29:8e:f9:ae:7e:dd:17:22:6a:7b:be:70:08:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3B:D7:75:7D:B4:11:43:34:36:5D:9A:7A:8A:62:E3:3E:45:01:68
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:02:8e:b0:c0:e8:a5:b2:52:3b:11:bb:1c:78:aa:62:f3:dd:
         61:6f:c8:80:d0:33:d7:ce:ea:e9:c6:24:25:ae:f0:b6:2c:27:
         0a:c3:72:15:e1:9a:3a:8d:74:0a:82:1c:46:4c:d2:4f:a2:c1:
         47:79:ac:21:a3:43:85:a8:f6:e9:f5:ee:4a:96:81:0e:60:2b:
         f4:71:e8:77:c9:7b:19:c9:61:42:ae:0f:a7:76:44:26:66:37:
         0f:2b:11:72:36:50:50:fc:48:1a:40:b5:6e:20:6f:4a:92:18:
         85:ef:38:62:75:c4:68:90:bc:15:2e:ee:99:a4:8f:4c:17:d8:
         2b:5e:ce:20:75:a0:62:c8:56:30:fa:b3:09:99:b7:b7:00:a9:
         43:3e:63:05:82:bb:71:d5:5b:94:6d:fc:70:2d:a0:44:68:21:
         09:53:12:66:18:f1:4e:12:f5:2c:85:e6:42:44:7a:fb:d0:18:
         50:7e:50:be:80:58:ff:bd:38:08:f8:d7:7a:19:b2:7a:6c:1f:
         29:dc:5d:7d:3a:a4:f6:47:41:d6:8d:ba:9a:09:e3:51:6f:c5:
         65:41:07:9e:7f:14:6f:ef:03:d7:e9:12:d8:89:aa:e8:38:ba:
         4a:4b:54:bc:7b:3b:a6:48:4c:a2:fa:13:ff:68:2a:74:63:70:
         79:59:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:23 2025 by rpki-client