Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File:                     Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier:          GdR4XFUv9qNF+9fX2UFp7N9B0+A/UxnlEQ3tNu3rn1s=
Subject key identifier:   93:3A:1E:AF:59:2E:A6:AB:A1:A6:0A:9A:78:4D:57:CF:4C:7A:85:E6
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer:       /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number:          0159
Signing time:             Wed 02 Jul 2025 21:53:51 +0000
Manifest this update:     Wed 02 Jul 2025 21:53:50 +0000
Manifest next update:     Wed 09 Jul 2025 21:53:50 +0000
Files and hashes:         1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: GbIeXJwjEr1D5F1NPrW7gf3zogPQe1UILXoGzWkJQO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
        Validity
            Not Before: Jul  2 21:53:50 2025 GMT
            Not After : Jul  9 21:53:50 2025 GMT
        Subject: CN=6865aa6e-3319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:1b:fd:b0:14:1b:51:6d:07:3d:79:d2:13:
                    53:f8:c1:21:7b:27:f1:ed:b2:08:49:3d:00:4f:f0:
                    7d:3a:41:97:6d:f3:0c:5d:2f:80:1d:71:43:b8:f2:
                    cf:69:f7:5e:54:e1:2e:59:64:cc:ae:76:e7:94:13:
                    89:72:a2:21:fb:86:d7:c4:9c:dc:9b:05:5c:6b:a3:
                    f4:a8:6d:82:b1:15:13:69:62:36:57:b3:52:73:0f:
                    24:f1:2e:6a:9a:10:4f:ef:a1:e0:5c:67:28:1f:7b:
                    b0:be:29:6e:77:43:c3:47:2d:20:1a:93:67:2f:c9:
                    7c:f1:9d:76:15:0c:db:7b:a6:e0:a0:c5:94:2d:d0:
                    61:80:36:f3:88:d3:a9:fe:f6:4d:b3:3c:92:e2:b3:
                    c4:41:f7:ce:f3:de:06:79:63:38:18:f6:06:be:7e:
                    a6:2c:19:b9:bf:2f:22:a6:b0:1c:3a:92:a4:d1:0e:
                    a1:87:68:e7:07:b6:f7:2f:0c:81:32:5d:cf:a2:c8:
                    74:27:58:ed:03:32:68:c9:9c:c2:55:01:6c:5c:d5:
                    4a:c2:16:fd:31:cd:0d:59:3c:50:c1:ad:1a:c1:3a:
                    8a:d9:2c:cb:ab:3f:3f:78:20:62:18:74:91:db:7d:
                    e2:17:a4:4f:af:f7:19:5d:ff:2d:65:b4:31:57:13:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:1E:AF:59:2E:A6:AB:A1:A6:0A:9A:78:4D:57:CF:4C:7A:85:E6
            X509v3 Authority Key Identifier:
                keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:74:f6:d6:92:a9:e0:f4:45:56:cf:1d:43:ad:ad:84:dc:
         d6:4c:ee:83:43:b5:58:df:2d:ab:5c:87:56:52:e1:84:9b:20:
         15:cf:6f:59:51:a3:73:43:e9:e6:e7:36:d9:54:fe:7f:ea:a0:
         3b:16:7a:b6:5b:4c:b3:ab:78:51:a6:52:b9:d5:a2:e8:7f:b9:
         5b:84:59:69:70:22:9c:7b:64:cf:19:a6:32:2a:d6:4f:ef:1f:
         64:bd:ab:af:33:52:54:10:bc:2e:60:e0:ce:91:87:45:e4:64:
         49:39:e4:07:45:92:a4:e6:dd:6d:77:d2:59:9d:ba:cd:7f:43:
         6a:9c:37:bc:cd:76:8d:42:8b:e3:0c:6d:01:c7:0b:55:62:ca:
         2d:74:f0:69:db:8d:42:74:3e:1c:e9:b8:3a:bb:4d:c4:87:a9:
         e6:e5:ba:fe:d9:f6:d2:1e:1a:01:9c:25:bf:2e:63:a7:9a:dd:
         4a:ac:60:32:1a:b3:50:18:10:c3:0c:ab:ab:db:07:2a:34:4a:
         46:e2:1d:c0:4e:44:e9:99:50:78:d9:2a:05:a4:fe:6b:dd:39:
         5b:28:d3:fa:c7:59:7f:71:f5:09:ff:73:6a:ff:27:7c:5c:eb:
         5a:9a:6a:30:b4:20:29:a6:75:d7:0f:a5:62:b0:c1:2d:89:0a:
         f9:46:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:59:35 2025 by rpki-client