Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          4QF0W+W64Pa7kWm4035T02Ja9ECnzmFuy8xCF+K5IJo=
Subject key identifier:   B8:38:A3:40:AE:82:E0:AE:40:5C:7C:33:89:1D:F4:96:BB:B5:13:B2
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          064C
Signing time:             Fri 22 Aug 2025 22:51:41 +0000
Manifest this update:     Fri 22 Aug 2025 22:51:40 +0000
Manifest next update:     Fri 29 Aug 2025 22:51:40 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: cr3kniz/8JQ9UuFAkfW5/fkrR0ltoGVvB+PUy7ONHgU=)
                          2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: R1Y6eiOJRngWNoMb/hZgB+WoPatpFv2M5OZIAKAIm84=)
                          3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: HVmlfUboreM+5lOMQKNuZ66xB592Xa6SyHAFupxeouM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Aug 22 22:51:40 2025 GMT
            Not After : Aug 29 22:51:40 2025 GMT
        Subject: CN=68a8f47d-3391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:6a:90:23:16:f9:00:a9:d3:1b:a0:3b:a1:
                    bf:62:a8:38:98:c8:d8:72:20:60:83:ca:aa:da:9b:
                    8b:74:ae:43:f3:ab:25:4d:62:45:98:ad:36:4b:c7:
                    4e:8b:af:8c:72:ae:1b:d1:ab:ad:e8:01:25:04:df:
                    63:b0:b6:ec:e9:91:17:3d:fa:34:92:35:47:20:e7:
                    49:b9:1e:f1:15:90:6e:5f:53:83:6f:12:c6:42:3f:
                    65:12:22:96:54:bf:d5:c5:46:03:cc:c7:0b:d9:2d:
                    8a:a1:fc:b4:cf:13:95:49:59:ac:1b:ea:cd:1b:9e:
                    f9:4d:92:1b:ba:31:3b:0e:e6:b9:09:2e:83:b8:87:
                    35:94:b0:97:bd:71:db:bc:08:05:0c:62:6a:57:32:
                    d9:77:ad:87:e7:e8:67:70:7f:cd:15:e1:1e:ac:e9:
                    10:ee:c1:0b:a0:03:c1:17:e4:cb:25:e2:86:32:bb:
                    b1:ef:f1:69:c2:4f:1d:43:6b:b0:05:4d:4a:a7:f3:
                    dc:dd:51:39:46:54:b9:7f:2c:ba:32:81:c6:e0:b2:
                    44:a5:96:4a:c9:e5:d6:7c:cf:2b:e5:cb:db:cd:51:
                    37:5d:96:8e:f6:22:73:66:49:48:af:61:90:c4:84:
                    b1:b6:f6:84:e5:4d:56:d9:d1:53:4e:ac:5a:ba:ba:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:A3:40:AE:82:E0:AE:40:5C:7C:33:89:1D:F4:96:BB:B5:13:B2
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:f8:0a:1b:1a:51:bb:dc:90:f7:8f:49:34:55:a7:7d:ca:
         b2:60:67:66:87:81:1a:a8:d5:bd:5e:9d:4f:a4:01:c6:c1:e0:
         b7:ce:11:4d:3e:39:a9:6e:49:e3:f0:56:f9:f5:90:18:1f:36:
         fe:72:41:35:ba:98:7a:ea:e6:21:a3:a6:57:f4:b3:ad:e3:6b:
         a6:94:d0:a1:44:2d:e2:02:ca:dd:0c:34:2d:53:33:81:e9:1a:
         d0:31:01:d4:29:31:d4:ad:ce:87:6a:59:99:92:cf:34:6a:31:
         4d:c1:97:87:cd:3c:64:0a:23:0e:85:48:7d:52:b9:ab:1b:af:
         2f:ba:86:bc:d4:63:b9:2b:0e:49:e9:95:fb:79:23:0c:e9:e3:
         b9:5a:70:1d:d6:c6:4d:95:4b:aa:3b:4b:23:cb:5f:ec:19:6b:
         3f:53:3a:ff:63:65:de:f2:b7:ae:b2:ee:8b:db:ae:06:e9:df:
         70:4d:5c:71:d1:d5:ab:9f:21:98:6a:4d:17:40:f4:a8:06:f0:
         8e:3d:aa:41:c4:bd:bf:15:7c:6f:c2:af:ab:2b:1e:45:a6:74:
         68:2e:e5:bf:73:b3:b3:24:67:e2:72:62:2f:f6:a6:ed:39:b1:
         4f:db:8d:f4:2b:f8:5b:c1:66:55:d2:54:7c:af:82:6a:93:53:
         c2:b9:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:51 2025 by rpki-client