Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
File:                     jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json)
Hash identifier:          1mdvsaPrEnGM7pNijt/C9GOQ3Djv9L3xMBrTqLQsyoE=
Subject key identifier:   39:E8:AF:75:9C:CB:CB:B8:48:B6:54:72:28:7A:D3:6D:00:19:B6:D8
Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B
Certificate issuer:       /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
Certificate serial:       0B22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
Manifest number:          0B14
Signing time:             Mon 30 Jun 2025 19:28:19 +0000
Manifest this update:     Mon 30 Jun 2025 19:28:18 +0000
Manifest next update:     Mon 07 Jul 2025 19:28:18 +0000
Files and hashes:         1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: 3siX6rxDN1XxO5ftT6MK3PhlPyhLagPuciYZkjwBFEU=)
                          2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl
                          rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 19:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2850 (0xb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
        Validity
            Not Before: Jun 30 19:28:18 2025 GMT
            Not After : Jul  7 19:28:18 2025 GMT
        Subject: CN=6862e553-305e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:0e:45:69:e6:9a:bb:bc:86:9c:fb:1a:0e:
                    e7:23:a4:e8:eb:8b:7c:b2:af:2c:b2:5b:cb:31:58:
                    6d:e4:c5:cc:f7:7f:74:23:a5:9e:68:ef:96:31:20:
                    d3:c3:fb:04:91:fc:63:9a:81:5d:45:13:94:07:13:
                    b8:33:60:75:a0:96:3a:75:19:46:5d:cf:82:8d:c9:
                    e6:60:a0:21:53:8a:7b:f3:06:ce:d0:28:95:31:19:
                    39:03:8f:58:da:b8:dc:95:85:65:cc:3a:df:b0:6e:
                    f1:42:a5:4d:e5:8d:a1:01:71:c8:a4:22:20:11:18:
                    af:87:35:2d:32:77:18:f6:11:f6:e0:bf:5e:23:98:
                    c3:c2:d8:46:56:e2:ec:a5:c6:34:a2:0c:e7:aa:a2:
                    f1:8f:ee:81:2a:a3:02:48:b2:8f:c4:33:7d:2b:cf:
                    21:41:c7:db:f7:e6:3d:7f:2c:ae:2a:db:24:4e:b5:
                    9f:76:c0:5b:53:53:3c:52:71:dd:6e:33:20:6f:a6:
                    4e:75:2d:b0:17:d6:a3:f6:d3:a9:4e:d3:4d:73:0d:
                    1e:94:ef:4f:d9:e9:72:02:e2:07:46:c4:96:62:19:
                    a9:3b:3e:84:af:40:79:2e:6e:99:d7:8f:f5:c6:b1:
                    7f:c1:aa:6b:2e:29:43:40:61:3e:24:04:45:e6:3d:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:AF:75:9C:CB:CB:B8:48:B6:54:72:28:7A:D3:6D:00:19:B6:D8
            X509v3 Authority Key Identifier:
                keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:98:81:55:6d:21:39:34:a7:ff:be:95:15:a1:92:8b:1d:41:
         84:6f:4c:36:81:38:02:46:67:c8:07:7c:7d:90:fe:56:73:e0:
         bd:22:1b:ec:ca:52:0e:f0:7a:d1:7a:c6:15:73:f6:50:5e:37:
         6f:a8:07:aa:d8:a9:1e:b6:10:39:ce:bf:5f:39:c3:52:fd:c0:
         5b:5e:a8:21:ee:67:4c:c2:af:cc:ba:a7:1e:a0:28:6f:c8:34:
         b7:57:18:31:60:de:59:7d:77:b9:86:12:07:9f:f7:c0:5c:0a:
         eb:b5:38:29:fa:f3:48:a1:cc:05:38:20:32:04:6a:d5:7f:fe:
         3a:a3:22:49:05:5c:8d:2b:25:80:5c:55:83:cd:d7:c9:90:65:
         68:85:f1:86:4c:ea:53:65:66:88:de:44:a9:91:9f:ac:f5:b4:
         44:4b:fa:d4:64:47:21:b8:99:6a:bc:fb:64:dc:28:54:cd:34:
         e5:08:f7:90:3f:3d:a0:7e:1b:ec:61:4c:9e:81:51:bc:ad:d1:
         ad:9e:f1:26:f8:fc:0e:61:64:a9:5a:92:b2:71:66:2b:e2:84:
         77:0a:6c:ba:81:82:e8:bf:63:1f:20:0f:1c:67:91:90:b2:c5:
         38:b8:41:68:5d:52:8e:db:ba:4d:53:5b:4c:af:27:b0:28:92:
         03:38:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:54:26 2025 by rpki-client