Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File:                     JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier:          8s0fAuGP9r5RQAPoUWgxArmPO8F4ITokM2aUM6eya8I=
Subject key identifier:   5F:A8:20:F8:E5:F1:44:ED:94:C6:23:25:A4:C2:D6:FF:50:5B:DB:09
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer:       /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number:          AC
Signing time:             Tue 01 Jul 2025 06:46:57 +0000
Manifest this update:     Tue 01 Jul 2025 06:46:56 +0000
Manifest next update:     Tue 08 Jul 2025 06:46:56 +0000
Files and hashes:         1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: iwmh1X3k/RwciPbqHB20YRRilTGdTH2KAknN1fMHZ3E=)
                          2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
        Validity
            Not Before: Jul  1 06:46:56 2025 GMT
            Not After : Jul  8 06:46:56 2025 GMT
        Subject: CN=68638460-3579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:a0:eb:46:3e:2d:d1:41:d7:9f:4c:c5:32:
                    a8:ff:42:40:b4:a6:39:57:db:bb:ad:37:2e:4c:d8:
                    c5:d4:67:fe:9e:40:89:2d:1d:85:7d:66:46:09:04:
                    87:41:82:45:f6:a6:81:14:64:07:b4:22:d5:b8:54:
                    13:11:13:7b:75:1b:70:f3:91:55:0f:a5:15:98:0b:
                    d0:2f:c9:32:57:0e:15:0d:d3:09:5d:94:69:ce:85:
                    ed:c2:56:85:0a:48:d7:a1:0d:4d:cb:15:b4:93:0c:
                    f7:5b:cd:28:e3:ed:2f:61:2e:d1:d7:bd:de:81:f6:
                    c0:d5:99:06:f2:b7:f3:e9:1c:67:99:78:ac:25:b5:
                    bd:37:8c:06:bc:04:d3:63:9d:a6:2b:bb:4c:f6:c5:
                    4d:ae:39:62:f7:a2:b3:17:07:8f:55:c9:97:62:34:
                    46:c0:3b:1f:c0:d6:64:1b:98:77:69:1a:c0:e1:f1:
                    9c:d6:6c:3c:47:fa:7e:15:73:f4:8e:42:3b:62:a9:
                    02:d8:10:d4:42:2e:c8:23:20:90:d2:10:27:83:d5:
                    c8:e3:f1:4d:8e:be:e4:11:62:6a:03:e0:05:0b:43:
                    7b:e7:a7:1b:b0:e5:b6:64:e6:b6:4e:81:47:95:66:
                    36:95:4d:8a:65:1e:42:ba:00:22:56:95:91:0c:9a:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A8:20:F8:E5:F1:44:ED:94:C6:23:25:A4:C2:D6:FF:50:5B:DB:09
            X509v3 Authority Key Identifier:
                keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:bd:74:a4:ad:ab:6b:68:83:3c:74:b7:91:71:df:f8:c9:
         ca:7b:d2:55:38:98:a0:f8:2c:51:2b:28:b6:2c:28:69:e5:79:
         44:9d:5d:9a:4e:d1:f9:5c:7f:f1:23:d0:6a:d2:7a:bd:94:c3:
         06:80:52:e2:14:79:77:f3:3a:47:54:3a:8f:3d:32:a8:3d:65:
         d0:11:75:f9:17:10:e9:28:57:af:08:a5:dc:07:67:e7:72:10:
         c2:08:22:7e:98:94:00:20:57:bd:71:fe:6c:0f:0d:cb:e1:20:
         a0:bc:89:dd:73:7f:0c:99:89:1d:08:ad:2c:74:44:42:93:46:
         7b:ad:d6:30:d9:94:44:7f:5c:f4:3d:7d:8f:d2:a0:d8:fb:6c:
         36:70:22:47:ab:3d:5b:c0:be:8c:00:b0:eb:97:5c:d3:51:45:
         01:21:6f:69:df:f3:3e:6a:f7:e0:72:5d:a9:2f:76:84:11:85:
         81:7a:34:60:eb:b6:03:8b:9f:aa:2f:4b:df:8a:ea:39:a7:04:
         cb:d7:35:94:3d:07:66:78:57:e0:22:30:66:8d:f6:b0:a3:7b:
         13:cd:a0:4f:81:e1:cf:3f:55:42:a4:9b:9d:2a:e8:3f:3b:03:
         6c:2e:69:54:8c:d1:3a:bc:51:3c:c5:18:24:ca:85:ab:50:31:
         8f:1e:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:16:17 2025 by rpki-client