Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File:                     jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier:          Soyu5pyGPw791+gnl+fAOo15YPiI+0LfZYMcwFnDS98=
Subject key identifier:   34:BD:76:75:35:92:7D:AA:0E:44:CA:56:F7:E1:BD:92:7D:DA:91:33
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number:          013C
Signing time:             Sat 05 Jul 2025 04:43:08 +0000
Manifest this update:     Sat 05 Jul 2025 04:43:07 +0000
Manifest next update:     Sat 12 Jul 2025 04:43:07 +0000
Files and hashes:         1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: Dy2HLn9wC5XUmTMUrOhzT97CITubATHFAdSWwfmvonE=)
                          2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: hIfGEZpVGRuqTYaqcdzSTwoH6LvOfzrGbr0BYVenTJE=)
                          3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: xpU4YvMsifPhb0IGkIRTwpNd6P9gbkGB+l0mAvn3/+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
                          rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Jul  5 04:43:07 2025 GMT
            Not After : Jul 12 04:43:07 2025 GMT
        Subject: CN=6868ad5c-5164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:7a:76:71:13:8d:7d:a4:2f:a7:c8:5a:5d:
                    44:c3:b5:ba:63:01:1f:26:50:9e:5c:77:6f:40:59:
                    3f:0a:0f:7f:73:23:a0:1c:24:a9:28:80:b6:23:00:
                    9b:e8:5d:80:ae:65:b2:6a:07:48:1a:4d:a9:3b:c0:
                    80:ba:c1:ea:5d:45:a7:79:71:f5:ad:1d:89:75:d3:
                    66:db:9b:af:11:b1:9b:31:96:bc:39:36:4c:a9:11:
                    22:7e:69:a6:50:fc:63:fc:46:85:08:ce:67:a7:e9:
                    5c:f2:af:3b:72:5b:e3:19:ce:7f:7c:46:a6:06:7c:
                    d9:46:3c:a1:76:ef:db:3e:ab:1d:2b:3b:ae:5b:3e:
                    bb:cc:9f:55:ef:87:b3:13:d9:1e:e5:b0:9a:6b:61:
                    d0:65:1f:da:8a:ed:02:3b:3b:b4:26:3c:11:1a:68:
                    14:c5:d7:6b:16:e4:ba:01:a6:f1:5e:45:7a:65:7f:
                    ba:00:e4:d0:c4:31:43:4c:b5:b2:0b:82:f7:69:6f:
                    aa:f9:7f:b1:5c:eb:b2:98:36:be:0e:ce:98:c5:e8:
                    dc:2a:ed:2e:b2:3d:96:42:bf:e7:fa:ae:2d:ad:0d:
                    a7:5b:64:86:dd:61:08:50:55:5d:b0:4a:d5:01:bd:
                    4c:12:ff:5c:41:03:c5:ee:b3:c9:49:95:ba:79:31:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:76:75:35:92:7D:AA:0E:44:CA:56:F7:E1:BD:92:7D:DA:91:33
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:86:a9:d7:a6:92:24:20:ef:60:a5:93:ed:2d:02:e9:0c:e3:
         16:97:bc:2f:a8:4b:bd:f7:9c:4b:37:27:68:09:71:b6:48:b5:
         a5:94:76:07:5f:b5:85:7c:27:7a:7c:9b:42:0a:f9:fe:1b:e2:
         5c:08:0d:0e:3b:5a:71:b0:99:4f:6a:bc:77:e4:9b:ab:14:92:
         cf:37:10:c7:26:fe:45:78:8c:a7:a4:09:2b:1e:e3:0d:e1:fe:
         d7:9c:12:c1:b4:98:79:cb:b6:37:a5:88:78:52:e7:88:0d:bb:
         c3:99:78:0c:ff:8a:70:be:e2:4f:80:df:04:a4:89:db:72:cb:
         f7:1a:18:25:55:2d:05:60:91:19:cb:b8:42:54:e1:15:d4:20:
         21:d2:46:fa:9c:b8:31:b7:a4:4a:53:e5:33:2c:cc:e4:53:1e:
         ab:73:90:4a:57:bc:52:a2:d8:b8:82:6c:46:89:68:39:db:4a:
         4f:98:33:b2:55:c5:9a:13:5d:76:1d:4b:c1:57:9f:83:62:0e:
         f9:92:1e:a9:64:e0:94:5b:7a:29:6a:75:50:1c:1d:4f:71:44:
         1f:1a:65:84:54:4f:dd:b4:d2:6f:06:2b:bc:56:2d:f3:f0:63:
         98:e7:d4:5e:d2:9b:0e:16:94:83:9c:d7:b4:e3:49:d2:5f:65:
         98:f6:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 01:02:11 2025 by rpki-client