Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          gwWJvfgX8NblWPfshjrPVx4y6rEqRBuAthvDSWP/bjc=
Subject key identifier:   CD:D1:AB:99:E7:57:D0:75:E6:C6:FF:93:6B:E0:B3:CA:70:52:9D:37
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0163
Signing time:             Tue 01 Jul 2025 04:30:23 +0000
Manifest this update:     Tue 01 Jul 2025 04:30:22 +0000
Manifest next update:     Tue 08 Jul 2025 04:30:22 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: BncB+C6veYeE4uL0qSuQNbwhnO0HcEepFBT/I3ZINLM=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Jul  1 04:30:22 2025 GMT
            Not After : Jul  8 04:30:22 2025 GMT
        Subject: CN=6863645f-7f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:9c:f1:8c:7d:4d:ee:d0:75:90:06:bc:60:
                    08:f4:3f:06:8c:b3:55:7e:34:0f:dd:10:ff:15:fd:
                    dc:ce:47:8a:52:b1:38:a4:f1:04:27:58:11:a3:38:
                    59:43:7f:61:2e:a4:c3:98:93:e8:2a:09:80:3b:87:
                    d3:3b:af:fb:ca:46:a5:e8:a4:06:d9:e8:b8:fd:d0:
                    c5:44:86:cb:e5:69:ae:0e:58:47:ce:5c:24:8c:12:
                    92:50:ce:da:4a:aa:76:a4:c5:c8:c7:82:be:d0:e7:
                    1f:3f:09:9d:13:19:74:48:66:f5:7b:10:c7:51:55:
                    c7:22:11:10:62:ab:0f:78:e3:4e:66:84:be:9b:c3:
                    80:b9:7f:bd:8d:f1:2d:22:96:1f:de:dc:2b:b5:f7:
                    9d:8d:7b:25:13:c3:9f:66:da:7c:98:14:10:62:d3:
                    75:08:12:62:f6:44:61:c2:ec:3b:0a:77:cd:5c:51:
                    e2:71:18:63:88:95:96:b1:8d:c6:a8:79:10:af:18:
                    d1:bd:7c:c3:96:b9:52:e0:ea:a5:2f:68:88:e8:57:
                    8e:32:fb:74:47:11:b0:3a:4a:9a:69:8e:a1:f3:1e:
                    75:27:3a:e4:5e:9d:cc:8b:af:4d:3d:b0:75:69:26:
                    35:84:03:5f:2e:74:ba:35:14:88:99:2e:47:2f:17:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:AB:99:E7:57:D0:75:E6:C6:FF:93:6B:E0:B3:CA:70:52:9D:37
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:f6:86:9b:a7:71:31:bd:81:b8:6f:45:00:eb:e6:18:65:
         36:56:bc:a4:31:13:93:e4:41:73:e0:d5:24:ae:14:7c:8d:7d:
         07:80:ba:5b:c9:f9:61:ab:5b:74:bb:80:10:27:02:4a:c0:d7:
         62:63:bd:99:01:1c:a4:30:23:64:dc:1f:62:46:66:2d:c7:71:
         c0:98:44:8a:87:fd:d0:da:2b:63:d5:1f:3b:c1:ca:71:3e:5e:
         c5:38:1f:bc:03:99:d9:58:61:6c:70:64:7d:77:02:ba:0f:6f:
         7c:3f:86:33:da:ff:61:6b:f0:0a:f7:05:ed:ee:07:32:1f:5c:
         7b:81:51:18:68:46:56:4a:7f:c1:06:09:5d:6c:96:8b:d5:33:
         12:2e:10:bc:e2:d6:4d:2e:4b:2d:25:25:e5:0d:60:ad:d8:32:
         99:80:b1:ed:f8:80:0f:39:42:df:05:1b:24:26:84:ab:c6:7a:
         69:bb:ac:92:9d:be:43:0f:8f:d7:88:ed:11:cd:cb:9d:eb:77:
         6e:08:e7:da:f2:b6:a5:4e:83:1e:f9:9e:23:c2:25:22:ac:3e:
         55:af:be:23:bb:3f:fa:d2:45:e8:19:c1:55:3b:67:89:da:96:
         93:cb:8c:f5:c1:b1:17:6a:c1:69:f7:70:60:5c:7d:07:f6:88:
         36:8f:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:10:36 2025 by rpki-client