Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
File:                     JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json)
Hash identifier:          gsqMktx9Xm1h9+fYtaPEJRjnhAx05zpuxPKGyEYgi3Q=
Subject key identifier:   8E:46:A8:81:76:E7:D9:29:83:EE:2A:C3:AD:BE:6F:18:08:64:35:29
Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
Certificate issuer:       /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
Manifest number:          01F5
Signing time:             Sat 23 Aug 2025 02:57:16 +0000
Manifest this update:     Sat 23 Aug 2025 02:57:15 +0000
Manifest next update:     Sat 30 Aug 2025 02:57:15 +0000
Files and hashes:         1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: rFn1N9KFkYqWogopF/QwF3fdhbsLw628Wgu1zPu+mXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
        Validity
            Not Before: Aug 23 02:57:15 2025 GMT
            Not After : Aug 30 02:57:15 2025 GMT
        Subject: CN=68a92e0b-2cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:c9:c6:ad:1c:0d:91:4f:d6:c1:34:cd:9b:
                    91:7c:f0:34:cd:e1:b1:87:eb:70:a7:a5:0b:73:45:
                    08:2c:89:e4:d9:1f:59:55:70:7c:50:1a:34:5c:03:
                    09:0b:f2:79:cb:0b:95:39:88:61:83:7a:b4:ed:42:
                    f1:64:a0:6d:4e:3c:7d:5b:62:80:22:a7:f5:2e:5f:
                    20:c4:52:e6:0a:a6:65:0f:f8:43:07:98:84:40:7d:
                    fb:de:cb:34:cd:86:ae:5a:67:1a:e8:09:29:c3:99:
                    d5:c8:3d:e2:32:1b:89:64:2a:01:76:2a:68:eb:98:
                    d9:5e:ae:b9:a7:b1:4c:91:34:ba:b5:3a:f4:2b:af:
                    0f:ea:83:f0:0a:30:07:da:03:d4:bd:5d:c5:3d:c1:
                    cb:9d:00:3b:67:0a:b8:f6:34:44:98:10:4c:4e:69:
                    a9:01:31:16:c3:de:d4:55:57:c9:14:17:0c:e2:08:
                    e7:b3:92:a7:3f:5c:b7:24:75:dd:68:ad:a3:f5:09:
                    fb:22:10:58:c2:fc:f9:8b:a2:93:ba:c7:2a:7b:d0:
                    a3:a6:01:5f:34:95:f2:25:6b:61:36:40:29:43:fe:
                    14:84:23:74:4d:04:0f:b8:aa:b8:78:28:d7:a3:b6:
                    fd:e9:4a:75:19:b4:4a:f5:30:1c:b9:45:e4:4f:de:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:46:A8:81:76:E7:D9:29:83:EE:2A:C3:AD:BE:6F:18:08:64:35:29
            X509v3 Authority Key Identifier:
                keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:73:f4:3f:aa:87:cb:cc:a1:f6:07:30:e2:dc:81:7b:16:
         be:8a:52:9f:86:fa:f4:d0:58:15:c3:74:a1:48:3f:c3:b7:31:
         a7:a0:3b:0c:99:17:2f:a2:29:22:dc:c6:a6:ce:e0:79:3c:00:
         88:11:2e:1b:91:27:2c:45:49:4e:79:6a:e5:f3:df:83:81:c0:
         24:2a:e8:56:2a:1f:b4:70:d2:63:55:01:87:b2:0e:8d:b2:33:
         cc:1a:93:4f:10:8f:70:6e:cc:05:91:b3:6a:44:e1:c3:d3:a9:
         d0:4a:fb:e5:b5:b2:72:89:fc:d9:3c:ac:03:db:0c:27:19:7a:
         38:c5:64:71:85:4d:93:d5:b2:0a:6b:2b:8c:66:23:a0:b6:e9:
         bb:40:7e:d9:e0:7c:23:5f:e7:40:64:dc:7e:14:ea:c1:fe:69:
         bb:f5:83:1c:65:62:39:e6:27:77:84:62:21:03:f1:de:7f:09:
         05:15:c4:a4:8d:0c:be:b6:6c:06:00:b1:cd:e0:0e:b0:b7:a7:
         ad:05:ee:35:75:0c:dc:f9:2f:8b:03:3c:7e:f7:a2:93:71:8f:
         72:a5:9b:b2:14:67:9f:21:20:04:a7:59:0a:1a:ff:96:19:c4:
         f4:40:ed:ea:d9:85:f0:bb:73:38:13:16:c1:f5:a7:ef:0c:00:
         ab:67:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:00 2025 by rpki-client