Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          qP5pUT+dc/TtjzdvpOXJNF7+x4u5LQnb8WPhWeJ6hE0=
Subject key identifier:   32:E5:91:AA:AC:DA:26:15:26:93:47:53:31:7F:A7:E5:13:C8:05:D0
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       34D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          34C0
Signing time:             Fri 22 Aug 2025 14:37:14 +0000
Manifest this update:     Fri 22 Aug 2025 14:37:14 +0000
Manifest next update:     Fri 29 Aug 2025 14:37:14 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: Yu5HNJx1qUL2uSHyz0Ubny5ckfSTPipglh4gNWgmoEg=)
                          2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13525 (0x34d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Aug 22 14:37:14 2025 GMT
            Not After : Aug 29 14:37:14 2025 GMT
        Subject: CN=68a8809a-d299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:74:d7:44:24:96:76:d9:7b:30:8e:cd:c3:
                    ea:d7:52:c7:a6:84:03:35:22:32:f5:5c:bb:19:07:
                    87:1c:10:5f:c3:fc:98:1d:c1:3f:48:56:18:d8:10:
                    10:82:8b:41:2e:7d:47:fc:f1:bc:8e:ec:50:fe:71:
                    fe:03:4e:ac:fe:23:1c:44:60:73:8f:38:c8:54:94:
                    6e:7e:06:10:e4:f4:bd:54:9c:cd:9c:a8:73:94:97:
                    28:6e:22:d8:66:eb:68:55:d2:e0:aa:85:ec:10:e9:
                    db:3e:00:df:15:95:1e:09:3f:78:f5:9c:9b:53:06:
                    7b:e0:3f:ac:76:b9:f1:af:c5:e7:da:e8:ff:e6:c5:
                    dd:7f:bf:26:1f:97:06:a7:ae:b1:e2:b8:fd:29:e1:
                    5f:e8:db:aa:92:56:2b:cd:84:bc:c7:64:52:bb:df:
                    9b:ef:2e:19:87:a6:01:78:57:99:01:ad:2f:d1:c3:
                    e7:72:1d:3c:7f:d7:3a:1e:fe:49:49:65:7a:92:b1:
                    2e:ac:f5:90:1c:59:69:55:66:b2:c1:a5:f0:b9:e5:
                    74:81:a7:60:3c:1d:70:96:a5:59:ce:86:21:89:11:
                    99:73:73:5b:23:25:4e:f7:80:87:5d:13:59:12:57:
                    23:48:47:bb:9f:a8:82:9f:d5:85:6f:ab:1b:6c:a8:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:91:AA:AC:DA:26:15:26:93:47:53:31:7F:A7:E5:13:C8:05:D0
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:a4:f1:a0:42:59:4c:70:83:e1:0a:f0:33:9c:84:54:e4:
         6c:6a:41:f9:d2:3c:39:fa:76:04:5d:be:fe:e4:a0:0d:4b:77:
         21:bf:49:c7:36:1a:57:ed:f9:8c:1a:74:6f:d3:f7:5e:34:90:
         2c:12:2d:bc:43:cc:5e:70:fe:97:5a:a7:37:a6:22:3c:d3:26:
         34:87:f5:53:50:0d:88:d8:aa:1a:9d:04:b2:d0:51:9c:0a:ce:
         58:c2:e5:63:13:91:fd:8b:ba:53:c9:f0:d3:a7:64:1e:7f:12:
         7b:1f:21:68:4d:f1:90:08:97:ce:d6:50:ad:40:55:0d:8f:35:
         02:33:64:92:35:66:f0:ed:e2:aa:0c:b9:25:ab:32:e0:8a:de:
         88:b1:8c:63:e7:5e:4d:5f:18:e1:34:88:cd:aa:db:55:5a:4f:
         ce:9a:98:e3:ed:b0:1d:7e:5a:96:03:e3:aa:39:b0:7a:ba:03:
         29:23:7f:54:51:2d:e4:aa:99:01:46:da:f1:49:51:20:87:98:
         9d:ff:43:47:96:ce:03:b1:31:0b:2a:eb:0a:e7:6d:81:14:e1:
         67:47:60:49:10:ae:71:19:73:e0:97:56:52:56:ff:a9:1a:f8:
         dd:ff:97:e3:95:dd:e6:59:61:20:0f:79:5a:65:54:ae:46:26:
         fb:b6:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:05 2025 by rpki-client