Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
File:                     JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json)
Hash identifier:          9QE8vTTaA+LQ0x0bA/g8cZ/MAaKUFMFOGEULFGMkYLw=
Subject key identifier:   3F:FE:C1:57:FC:13:4B:E8:B1:3D:DB:DE:DB:8A:42:C5:72:79:F4:58
Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Certificate issuer:       /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
Manifest number:          04A4
Signing time:             Thu 03 Jul 2025 00:17:22 +0000
Manifest this update:     Thu 03 Jul 2025 00:17:22 +0000
Manifest next update:     Thu 10 Jul 2025 00:17:21 +0000
Files and hashes:         1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: Kf1CMZj9S96HCKB+iCaetq1PyIKAiBKtew+s9y8uxRw=)
                          2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
                          rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
        Validity
            Not Before: Jul  3 00:17:22 2025 GMT
            Not After : Jul 10 00:17:21 2025 GMT
        Subject: CN=6865cc12-d9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:56:25:52:96:38:df:fc:c5:99:2e:a1:c4:
                    b2:4e:c4:da:be:e3:7e:9e:a7:6b:c4:c7:9e:95:74:
                    5d:e1:48:fa:7f:83:89:21:32:39:00:b5:2c:09:5d:
                    56:79:e2:22:7b:8c:62:91:a3:5e:08:a6:59:5a:44:
                    3f:2c:26:6d:15:04:9f:38:d8:b8:99:92:a8:96:f3:
                    e5:3f:f6:24:9a:5d:e4:87:23:17:c1:fc:8d:b0:d0:
                    9c:f3:c3:57:01:2a:b6:f3:6f:a4:f1:50:67:97:3d:
                    55:ee:06:d2:d6:01:d2:56:6d:d6:57:67:a2:e9:34:
                    e3:14:ca:0b:8e:89:a5:4b:06:e0:1c:79:eb:0a:d4:
                    55:3f:07:55:e9:b3:04:93:82:83:03:6b:19:e8:ac:
                    44:e0:56:b3:f2:3c:4a:98:ba:33:a0:40:37:bc:f0:
                    81:26:a8:c7:6a:db:d8:33:86:08:7b:2f:a0:5f:11:
                    59:4c:c0:3a:be:6c:11:a0:56:3f:de:36:64:ef:77:
                    a9:47:5d:2e:5f:68:5a:95:3e:fc:74:b9:46:65:e4:
                    4f:e5:86:6e:47:77:fe:67:18:6f:0b:3b:ef:49:84:
                    03:ca:2c:52:13:e9:4b:ad:10:5c:de:7b:93:1e:d2:
                    2d:a7:a7:f0:8a:cc:2c:f9:9f:67:0c:13:5b:32:3b:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:C1:57:FC:13:4B:E8:B1:3D:DB:DE:DB:8A:42:C5:72:79:F4:58
            X509v3 Authority Key Identifier:
                keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:9b:83:96:41:dd:53:00:c8:13:eb:55:f4:3e:d2:45:33:
         97:6a:da:cc:e2:e5:9e:ba:f3:fe:60:07:85:68:0f:5d:7d:dc:
         96:0c:35:fc:d5:b6:0d:b1:4e:65:d7:49:0e:a7:6e:b6:9e:bf:
         81:cf:8d:73:e8:f3:2b:5b:19:9c:bc:02:b8:70:92:20:50:db:
         e2:67:81:c3:37:d5:b4:80:c9:7d:ba:f6:0b:2c:79:25:11:85:
         df:dc:04:02:83:59:b9:6f:dd:22:99:9a:07:b8:d1:5c:51:2e:
         c3:69:a0:bb:75:88:ac:b9:8a:47:45:e9:f0:21:6b:1c:f0:5f:
         87:d9:4c:23:c2:37:d7:af:f6:27:42:f4:08:07:ec:c7:33:11:
         72:28:3c:bd:43:f2:60:8e:73:61:53:74:8a:50:1e:c8:3d:cc:
         4d:2f:03:05:f2:c8:58:9a:d6:87:bd:7b:e0:8f:86:55:2e:61:
         9d:b2:0c:c8:a8:4e:f2:f0:e0:00:d3:72:51:75:e3:75:3b:1e:
         7f:7c:b9:47:0d:c4:d0:da:d3:b9:8d:3a:29:7d:d0:67:9d:65:
         cd:03:46:7d:66:81:eb:ca:2a:ca:91:bd:13:18:7c:8e:0c:78:
         65:20:e2:3f:01:15:0b:6f:ca:27:ce:d0:a5:80:f4:f0:93:b8:
         68:c6:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:57:51 2025 by rpki-client