Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          mz4S8FZrdSHQ+C55vpETY7ZHeEFVgOGC004SR3vEye4=
Subject key identifier:   D2:91:45:0E:DA:BE:9F:C5:3F:4A:29:9C:43:37:31:23:BF:FF:AF:CC
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          021C
Signing time:             Sat 23 Aug 2025 02:12:45 +0000
Manifest this update:     Sat 23 Aug 2025 02:12:45 +0000
Manifest next update:     Sat 30 Aug 2025 02:12:45 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: J5GRLoTCUnG23N/ICCA6cUEfK9j+/Vdyz0ZwROirlCM=)
                          2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=)
                          3: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=)
                          4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Aug 23 02:12:45 2025 GMT
            Not After : Aug 30 02:12:45 2025 GMT
        Subject: CN=68a9239d-ff99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:75:9b:d3:d1:82:fd:85:bb:80:98:f8:04:
                    07:65:60:ef:c4:6a:a9:99:7f:2b:6d:79:75:59:73:
                    a4:76:e3:a8:60:c7:34:e7:45:c2:e7:08:58:7e:b6:
                    8c:d5:ad:db:91:8e:d3:dd:9e:68:a1:0a:b9:9d:5a:
                    48:91:25:88:1e:29:ec:7a:67:f0:b2:37:b1:01:5f:
                    1a:3d:95:51:5c:ad:4c:08:25:0f:a3:01:06:ee:cd:
                    28:f7:66:63:16:41:5f:0b:7f:21:2f:9c:74:f2:30:
                    55:c5:df:11:81:cf:a2:2b:46:f8:be:20:96:b5:57:
                    e7:75:99:45:e3:22:66:e1:7a:13:19:75:a9:48:c5:
                    fb:cc:91:75:3b:15:52:35:63:a9:cb:47:b8:48:f9:
                    01:2e:eb:38:b2:ec:f8:3d:9a:63:ab:4a:dc:8a:7f:
                    b8:77:e4:38:33:eb:40:8f:4e:aa:75:f3:3c:62:2e:
                    34:fb:a9:38:6c:ef:76:d0:18:f6:50:ec:c3:49:fb:
                    49:ee:10:59:f6:2c:3e:47:3a:8e:85:29:c3:68:d0:
                    39:8f:a8:3c:4e:7b:f3:b4:ef:fe:ea:01:a5:d2:78:
                    ab:46:81:b3:2a:22:b0:14:9b:52:15:55:b4:8e:8f:
                    4a:da:e3:f5:e5:b4:41:98:b3:cf:a0:b3:6c:5a:16:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:45:0E:DA:BE:9F:C5:3F:4A:29:9C:43:37:31:23:BF:FF:AF:CC
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:25:fe:46:cc:8c:ba:f1:4a:13:f9:c2:06:f0:c0:fb:ee:3b:
         08:65:2f:4c:e9:b7:1e:1d:0a:be:07:20:a7:95:f5:ec:dc:4b:
         c5:c8:2b:2e:a2:9e:34:d9:81:4f:b3:3c:1e:e2:16:03:c3:d1:
         bf:c2:d5:b7:76:68:5a:e8:18:98:43:52:1f:78:00:1e:24:e4:
         e3:d1:20:e6:7d:f3:bc:d9:fa:83:28:00:4f:82:a1:68:b4:ff:
         23:c1:5d:d8:56:16:9f:80:21:7e:85:ad:56:f7:cf:22:88:c8:
         3c:84:5e:72:23:5a:67:5b:ce:d3:9d:13:e5:ce:dc:1c:99:c7:
         c3:81:b6:1c:17:c5:ea:45:82:e7:f2:a7:8c:9d:cf:ac:25:92:
         85:9d:ab:4a:93:7a:d9:c2:44:c1:b7:d8:76:94:9e:20:28:db:
         4f:df:cd:20:48:aa:42:0d:d6:e1:c5:2f:25:00:1b:f2:a8:8e:
         27:6f:b6:4e:e1:72:6a:fb:f8:b7:b6:cf:ee:9b:83:b9:eb:9c:
         7e:7a:88:83:f1:53:a1:c2:bb:dd:67:9c:9a:b5:40:56:24:ed:
         be:1d:86:8c:84:82:27:13:99:9b:e3:72:49:47:5f:5e:4c:27:
         f7:a6:c2:b9:e1:4b:83:1f:cc:00:de:c8:4f:c6:74:3f:13:c9:
         e7:70:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:17 2025 by rpki-client