Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
File:                     jC90p60r0PXvsQZOS5CYbXbMF4U.mft (raw, json)
Hash identifier:          ebtZb9IQ3rPYkBnh5WGji+yaoB6i7tJXbMAhfCjy3TI=
Subject key identifier:   8C:21:76:A8:63:1B:39:23:6C:3B:CE:E3:C6:FF:AE:C7:0D:F7:F5:91
Authority key identifier: 8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85
Certificate issuer:       /CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
Manifest number:          0666
Signing time:             Wed 02 Jul 2025 23:51:41 +0000
Manifest this update:     Wed 02 Jul 2025 23:51:41 +0000
Manifest next update:     Wed 09 Jul 2025 23:51:41 +0000
Files and hashes:         1: jC90p60r0PXvsQZOS5CYbXbMF4U.crl (hash: DPLDBoRMA6DLajuDbOZhwYhyK1snQNTdh8CO1t2AhEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21, serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785
        Validity
            Not Before: Jul  2 23:51:41 2025 GMT
            Not After : Jul  9 23:51:41 2025 GMT
        Subject: CN=6865c60d-465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:a8:7d:77:14:e3:66:7f:43:b8:a5:3b:a6:
                    20:1d:4f:6e:05:78:08:fa:86:c6:e6:66:7f:e7:b3:
                    0c:61:e9:b4:e9:80:2b:15:26:64:28:b6:a6:2e:83:
                    1b:90:8d:fe:0d:ed:43:9d:bf:c6:74:d8:fb:c3:5b:
                    ca:73:0b:08:43:75:1d:0a:82:c0:db:91:3a:57:f0:
                    e0:6d:d0:87:2b:9e:27:74:17:d3:6a:34:96:1e:09:
                    ab:52:86:4a:26:1e:c9:44:e3:7d:55:d8:6f:6c:3a:
                    66:0d:b7:ce:5d:92:ff:02:90:8a:c7:38:1b:aa:ed:
                    23:60:6b:00:08:76:e3:22:52:7e:cb:cc:d1:9d:06:
                    10:7e:53:49:be:58:9e:be:1e:75:c3:ce:5c:04:ae:
                    f2:fa:fd:7e:f0:9d:f9:40:fc:69:c9:3b:d1:08:2c:
                    bc:bd:d5:de:85:dc:ba:e3:94:f3:b3:29:c2:30:10:
                    5a:71:00:a6:a9:d9:d3:1d:76:02:ca:76:9f:50:05:
                    d4:7d:ff:45:fe:16:0b:6b:4d:aa:cc:ce:dd:2b:72:
                    5c:7c:7d:e8:03:5b:4a:0a:c9:86:44:73:d4:96:65:
                    1e:4a:e9:32:4a:31:ee:e9:f7:d4:f0:7e:88:3c:4e:
                    a1:5b:45:e1:51:e4:cb:8f:17:16:c1:0c:f1:12:90:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:21:76:A8:63:1B:39:23:6C:3B:CE:E3:C6:FF:AE:C7:0D:F7:F5:91
            X509v3 Authority Key Identifier:
                keyid:8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:f9:e4:ed:3f:21:26:7f:99:c5:b8:3a:0b:fb:65:45:16:
         82:00:b5:a4:3b:03:48:26:97:38:0d:2d:16:f2:33:ee:2f:69:
         53:13:c8:e7:13:44:38:4d:04:b3:66:31:74:f8:a3:57:6a:4f:
         00:56:b9:e0:be:d0:0f:f4:94:a8:83:66:f3:d6:8c:63:1d:b1:
         1f:55:7b:18:48:d2:21:0a:bf:47:c6:f8:ad:4d:44:6b:85:cb:
         f9:13:29:d8:78:6b:d5:be:aa:f8:db:bd:72:d8:44:51:8f:81:
         5c:4a:72:1a:3e:31:7f:d0:0f:65:47:48:3f:2d:fb:03:90:bb:
         7a:4a:e3:7b:eb:01:dd:e5:56:db:9b:ae:7b:d0:7f:89:43:ec:
         2e:66:43:9d:75:4f:48:d2:9d:72:a2:15:cc:28:ad:54:de:de:
         c8:46:e2:9b:2e:ce:19:30:10:74:e8:08:22:f4:f0:c2:7d:d0:
         22:ac:9d:1a:64:07:96:8d:d4:0a:36:6a:77:60:3d:df:72:94:
         82:00:76:07:ec:ea:14:60:0e:3b:e8:bc:a7:83:51:0c:b5:8f:
         3f:e7:46:9d:1b:29:ea:71:ca:54:67:cc:f4:a6:93:5f:a5:77:
         8f:3d:bc:a5:65:a3:0c:09:5c:e3:af:e2:53:36:9e:60:ef:06:
         53:4b:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:42:03 2025 by rpki-client