Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          HnkgDxioB/5cwYVugI1cd3c+hSXmjGB+3HYqHtzQ6OY=
Subject key identifier:   DF:1E:62:1F:B7:45:DC:C6:3C:52:DF:4D:66:69:83:F7:4A:84:DF:37
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          2A
Signing time:             Thu 03 Jul 2025 08:03:07 +0000
Manifest this update:     Thu 03 Jul 2025 08:03:06 +0000
Manifest next update:     Thu 10 Jul 2025 08:03:06 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: dh0c8VFilZ/rfDoc71097dF83NOUmDNy7/k4ay4VDvo=)
                          2: 6065D794238B11F0A6312687C4F9AE02.roa (hash: IEKHYh/ngtYZA0UCxVdmnCpzFo6yTGWKpCs27PXlBHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Jul  3 08:03:06 2025 GMT
            Not After : Jul 10 08:03:06 2025 GMT
        Subject: CN=6866393b-5227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:ee:75:b6:53:9d:33:ff:ab:07:cc:40:5a:
                    28:0e:56:f2:4a:bd:55:6f:53:6b:37:43:c3:5c:c2:
                    9d:aa:6e:97:bf:8e:e0:7f:22:15:49:5b:43:cf:0a:
                    1e:d6:7e:fe:b6:b4:60:e0:d5:e5:9f:18:53:a8:03:
                    fd:e6:d5:04:e8:0d:d1:f2:43:67:43:15:dc:a0:2d:
                    7e:d9:bd:77:38:42:b8:18:c9:72:23:6e:f2:4a:e0:
                    50:d1:3c:d0:b3:d4:19:97:5b:ab:a2:b4:29:c2:78:
                    57:72:4e:15:96:b6:f0:26:34:0b:ef:9c:16:31:46:
                    dd:cf:a7:fe:5f:af:cd:32:e1:21:6c:e8:08:e8:ba:
                    41:2f:11:8b:ee:e7:4d:e0:9e:2b:a4:29:8d:9c:ad:
                    43:82:4c:34:8d:dc:d4:a5:2b:e2:04:2a:22:c5:e0:
                    ad:51:89:91:20:4a:c8:28:26:6b:21:7a:bd:cc:ef:
                    9a:32:a0:3d:54:a9:b5:4c:de:24:76:ae:3f:5b:93:
                    c2:e0:5a:43:36:79:4c:6b:cf:09:84:d4:8d:14:4d:
                    ac:d3:df:ca:0c:5d:7a:6a:28:a5:b1:89:07:84:f8:
                    5d:3a:d5:0a:ff:46:77:6a:a9:12:23:ab:ee:ec:e7:
                    92:b8:1a:f2:d8:ee:4e:28:66:86:89:4b:8a:5a:26:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:62:1F:B7:45:DC:C6:3C:52:DF:4D:66:69:83:F7:4A:84:DF:37
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:2e:07:5b:53:23:77:5e:f9:be:70:99:3d:ec:fa:0d:49:
         33:de:49:3f:d4:51:fb:44:be:e9:6c:ea:5b:a8:cb:c3:5f:32:
         be:39:f4:6d:20:1f:15:d0:76:6e:03:92:ba:4b:82:d3:ce:a1:
         08:37:df:c2:90:bc:93:5a:5e:ab:96:b4:76:57:07:62:76:42:
         a7:84:d5:87:fe:3d:e1:b9:9c:65:3d:c8:27:ab:e3:5d:55:2c:
         09:da:09:ab:3d:ec:d3:44:d9:58:93:be:ea:54:0e:b7:56:bd:
         10:69:34:9d:86:62:91:ee:ab:ea:b2:42:80:3c:28:94:13:61:
         26:7f:65:bf:bb:13:e6:17:78:63:41:62:0d:3a:3a:4c:73:f4:
         3e:6a:38:c4:0c:45:ee:84:21:b7:b6:a0:16:f8:1a:4b:d2:e8:
         e6:a7:1f:bc:63:bd:a1:af:d7:a4:7b:69:08:1c:0d:35:7d:67:
         71:51:85:74:1e:41:fa:2c:37:7b:fb:f2:42:e2:f7:88:fb:4b:
         7a:55:e8:43:c2:66:94:73:b0:1d:9e:4d:d1:1c:2a:9c:bf:7b:
         ac:a5:1c:8e:7d:4c:ab:61:e7:3e:a6:13:24:05:61:b0:12:88:
         f2:0b:0e:23:08:d9:30:93:61:13:4d:d2:69:04:9c:fe:f8:ab:
         e7:be:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:40:04 2025 by rpki-client