Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
File:                     jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json)
Hash identifier:          10QE2n8+R4yD3gxCesJUuTtR33Qr2IYrbH0ZPvaZyAE=
Subject key identifier:   F3:E3:D9:5C:56:0D:BF:5D:0C:B8:CC:A2:FE:26:9F:29:9C:23:64:E3
Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48
Certificate issuer:       /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
Manifest number:          01EC
Signing time:             Thu 03 Jul 2025 02:34:23 +0000
Manifest this update:     Thu 03 Jul 2025 02:34:22 +0000
Manifest next update:     Thu 10 Jul 2025 02:34:22 +0000
Files and hashes:         1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: hS9Q0w0swS3SasMWxMVe3x9xf13X/DssoEnDgvAXkg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
        Validity
            Not Before: Jul  3 02:34:22 2025 GMT
            Not After : Jul 10 02:34:22 2025 GMT
        Subject: CN=6865ec2f-e01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:ef:c7:25:80:07:69:7e:2d:2d:c7:88:72:
                    f0:e4:8f:62:95:ec:03:c9:80:4f:50:bc:48:a8:d1:
                    40:43:78:3c:bf:98:4f:ee:28:c2:f9:35:b4:3f:99:
                    0d:3c:5c:9e:f1:1a:f4:b5:66:5e:d6:76:d4:13:ee:
                    e6:16:06:3a:48:ea:16:dd:3c:c9:e5:67:69:8f:44:
                    a2:48:9d:3c:ad:d6:38:e2:52:99:0a:7b:4b:fe:3f:
                    5c:59:6b:a3:4c:08:06:eb:e2:bd:ff:4e:fd:bc:20:
                    aa:45:1c:7d:a8:d6:2e:e4:0c:e3:cb:35:b0:6e:af:
                    37:53:f8:91:4f:40:76:3a:5b:9a:a5:af:69:0f:fb:
                    a9:47:33:b6:7f:0d:bd:46:7f:d6:1e:6e:78:b5:8a:
                    24:01:70:38:bb:13:31:cf:81:84:15:41:3a:43:6b:
                    d0:b1:c0:ee:bc:16:ee:1a:3b:e9:d0:e3:ff:7c:2c:
                    a9:cc:b5:34:b8:d7:66:80:91:9c:58:f3:7a:1f:4c:
                    59:07:0d:33:61:ee:50:b6:ee:e8:b0:24:bb:70:6c:
                    cb:5d:6b:89:8f:b0:fc:3a:2f:3b:1d:a9:54:9b:8f:
                    78:c4:6c:1c:b7:d0:76:05:05:33:76:da:ce:36:12:
                    d8:9a:2e:27:56:a5:99:89:6d:b6:ea:10:a4:0e:23:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:D9:5C:56:0D:BF:5D:0C:B8:CC:A2:FE:26:9F:29:9C:23:64:E3
            X509v3 Authority Key Identifier:
                keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:ba:34:69:52:30:ce:63:27:a0:a7:bb:fc:c6:0d:5f:7d:
         ca:55:00:dd:63:7d:65:1d:20:07:ed:21:09:86:5a:73:1f:1d:
         8f:0e:0a:a9:c5:bf:1a:c3:a0:cf:6c:ae:6a:51:f8:b8:84:7d:
         fd:14:93:51:1a:19:97:6d:08:7d:f6:b1:31:76:4d:71:18:cb:
         e8:0b:92:e0:13:36:2b:aa:ff:c0:d0:08:ef:d8:86:9a:ad:28:
         9c:76:3e:4a:c5:44:46:85:54:aa:2e:80:1c:9b:d8:84:35:a8:
         40:fe:af:5c:e9:6a:dd:de:7b:ce:6e:62:0e:9d:d1:c7:2f:46:
         fd:76:04:d5:67:ae:47:7b:22:61:c6:b4:1a:ab:32:21:08:69:
         d7:7d:c7:0e:a6:e7:63:bb:f3:41:78:bb:4c:8f:da:c4:ce:20:
         71:42:48:ae:78:45:b2:ec:b2:11:36:3e:34:80:a9:5b:91:24:
         85:a1:3d:84:26:24:8e:b5:4f:6e:9b:e0:9b:44:85:76:b1:b2:
         02:9c:ca:8f:93:99:2f:20:fa:60:ab:55:b6:c2:65:ae:99:c5:
         eb:be:cc:b7:d1:26:1f:ec:ea:13:14:d0:7a:08:82:ac:e8:81:
         0a:0f:e5:27:22:21:f0:5a:4e:d1:e0:a6:83:12:84:25:a4:1f:
         fc:17:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:19 2025 by rpki-client