Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          amAYTxZV6UTJTxcNY9/em1OylFg3Wx9TF4wjNQS+SsY=
Subject key identifier:   6D:5D:D8:E6:D9:4A:C1:75:B9:E1:78:E2:59:B0:FA:4C:DE:83:24:EE
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       047F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          0471
Signing time:             Tue 01 Jul 2025 00:38:36 +0000
Manifest this update:     Tue 01 Jul 2025 00:38:36 +0000
Manifest next update:     Tue 08 Jul 2025 00:38:36 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: YkSSS8v9NPH5X4y+JnFdqX0j7DLH47G5+V2RJkYRHIs=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=)
                          3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=)
                          4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 00:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: Jul  1 00:38:36 2025 GMT
            Not After : Jul  8 00:38:36 2025 GMT
        Subject: CN=68632e0c-bc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:6d:94:24:f2:9e:c0:f9:42:78:cf:22:77:
                    70:74:d3:5d:71:39:26:f3:ec:d2:f3:26:b8:d9:97:
                    01:66:e6:05:e7:31:c0:a1:d5:c2:3b:df:e4:ac:74:
                    94:56:03:2b:a6:c1:1f:3f:b3:85:1c:0d:38:87:c6:
                    ca:1b:60:a0:51:8e:9f:10:49:23:ed:5e:26:80:c5:
                    58:b0:f3:8e:91:8a:2b:66:2e:b5:96:fa:6e:8a:b5:
                    42:eb:a4:a4:c3:1c:d0:d5:56:61:22:e5:05:9b:ee:
                    70:26:75:55:14:be:8b:d0:2c:22:26:7f:5c:e4:cf:
                    ea:82:50:86:3a:d0:12:8f:0f:73:28:71:13:2b:0d:
                    9a:9b:27:4f:61:aa:d1:ae:3c:40:7b:78:91:f1:03:
                    c6:a6:55:27:5c:cd:ce:99:12:32:1d:03:11:6f:87:
                    b7:a9:f5:8b:f0:23:54:2b:61:29:4a:ca:e6:13:f9:
                    44:80:e3:03:11:14:c0:23:51:96:39:ae:63:e0:4a:
                    b5:94:e9:55:f7:ad:d4:74:eb:67:aa:05:25:1e:14:
                    47:0f:9a:c3:6f:7e:f2:6d:3d:09:75:d0:fa:8d:12:
                    b1:b1:4b:f9:22:f7:11:31:44:27:90:43:07:ae:e0:
                    49:69:11:fe:88:9e:ad:82:07:35:fe:b8:55:0e:d3:
                    fb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:D8:E6:D9:4A:C1:75:B9:E1:78:E2:59:B0:FA:4C:DE:83:24:EE
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:18:e3:de:e8:2e:5e:ac:62:b9:08:a7:a6:30:66:b3:0c:fd:
         58:57:ed:fe:ad:90:a6:c3:01:99:44:ee:07:1c:39:fd:da:46:
         2f:94:ac:85:c6:f5:67:0a:57:49:18:bf:76:ca:69:7f:d6:81:
         5d:b7:62:b1:6a:26:a9:d1:4f:b3:6b:f2:ee:92:8d:16:db:23:
         e1:3d:f6:53:64:43:96:92:1b:92:ea:fd:93:df:fe:0d:e1:5f:
         74:fc:72:ca:05:42:1c:cb:62:fd:70:4b:97:1b:a8:7a:74:25:
         26:cc:ba:2f:e8:ed:64:5f:84:3a:8d:6c:32:fc:6a:56:03:97:
         f3:63:bd:62:2e:a2:2b:2d:eb:cd:2b:02:13:d2:20:be:1d:b5:
         17:e7:bd:58:3f:90:9a:86:40:3a:d2:df:49:cf:58:8f:f8:03:
         98:77:da:18:cf:c5:29:85:95:68:11:45:94:37:8a:56:eb:c5:
         93:e6:73:8b:97:e0:6f:ee:3d:ea:e4:39:46:74:66:69:6f:c8:
         05:ce:37:f7:c3:5a:66:9b:4b:a6:37:b5:d3:68:da:26:a7:d4:
         8e:28:b7:b4:bb:6b:b5:32:c1:cb:4d:78:a1:f3:8c:af:67:bd:
         05:42:fc:58:dc:5e:19:36:25:9b:b5:e5:96:ce:9f:15:8f:86:
         9a:bc:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:23 2025 by rpki-client