Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
File:                     jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json)
Hash identifier:          9Y1QTDKg6P+Xludhs/DJlWEk/AsUm4YhGSijuK27ddY=
Subject key identifier:   A9:8C:24:9B:7C:B9:BE:0F:B9:01:1D:10:4D:21:D8:BC:8D:B2:34:A9
Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19
Certificate issuer:       /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
Certificate serial:       0607
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
Manifest number:          0607
Signing time:             Fri 22 Aug 2025 23:00:35 +0000
Manifest this update:     Fri 22 Aug 2025 23:00:35 +0000
Manifest next update:     Fri 29 Aug 2025 23:00:35 +0000
Files and hashes:         1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: oyiMfdK/0jEItRBUwhyzKOBpZCARoLMmf/nIYXUzVTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
        Validity
            Not Before: Aug 22 23:00:35 2025 GMT
            Not After : Aug 29 23:00:35 2025 GMT
        Subject: CN=68a8f693-d559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:17:54:ee:2d:3f:43:22:e3:bf:e9:33:67:
                    82:bc:ad:6c:b8:c2:aa:d3:38:e1:48:19:74:86:75:
                    85:de:ff:d9:49:ad:73:47:82:29:78:a5:6a:02:8d:
                    e1:0a:2c:d2:4d:64:d1:1e:96:31:39:25:0d:14:0f:
                    b3:e3:d9:12:64:0e:8c:a7:ea:28:36:f4:74:f6:d0:
                    4f:5f:d6:ab:57:8f:0d:bf:3a:3e:33:3e:01:71:e8:
                    5c:9e:af:a4:b3:37:e6:67:72:f5:a9:4f:12:21:31:
                    2b:b6:65:91:4a:e7:ce:e2:85:e3:77:96:19:98:45:
                    23:fb:23:af:4c:4a:7e:6b:a1:c3:d7:ca:3b:7e:55:
                    05:d5:e7:46:58:a7:d4:4d:b7:fa:a6:59:21:2c:fe:
                    75:9c:58:2c:dc:c1:0f:71:e7:34:af:f7:92:97:e8:
                    4c:8e:5c:80:ac:d5:89:53:3b:91:51:85:75:2c:bb:
                    99:3c:39:8b:47:58:d2:22:b0:35:89:4d:7a:00:a7:
                    81:4b:6e:a8:1a:1a:93:56:72:f3:6b:2c:9d:92:df:
                    37:c6:4f:ea:91:82:98:c3:0f:d1:9d:ba:70:8d:06:
                    10:21:98:32:27:c1:53:a3:1e:6a:39:db:f5:94:7c:
                    e7:f1:01:c6:3e:4d:5d:8f:aa:7a:ac:90:f5:38:54:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:24:9B:7C:B9:BE:0F:B9:01:1D:10:4D:21:D8:BC:8D:B2:34:A9
            X509v3 Authority Key Identifier:
                keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5e:d7:94:c2:e9:ce:b9:ec:b3:46:8d:c0:68:09:ec:00:4d:
         b5:55:40:0c:a8:35:40:97:bf:27:65:60:09:f3:d7:0a:13:c0:
         34:0c:7a:3c:e4:48:ab:16:74:9a:ae:39:86:8e:40:24:ee:5a:
         2e:27:ce:80:7d:a1:87:eb:18:56:fc:56:f1:5a:71:16:73:de:
         a1:7c:8a:0f:4d:b6:cf:0b:8f:dd:36:6d:9b:8a:48:fa:d6:ab:
         d8:16:00:dd:95:02:d0:c0:63:3c:e3:72:67:fd:dc:5f:a2:9e:
         bd:c3:6a:c8:e6:f5:a4:18:0b:ab:f4:fa:ee:85:a2:6f:b8:0b:
         f9:8e:2f:c6:60:ed:6b:0b:74:1f:b7:49:b3:5a:25:2a:4c:17:
         80:71:2e:7a:49:ef:10:53:de:79:0e:8f:a9:38:ee:91:ff:f3:
         a0:08:ca:1d:8c:f6:31:81:1f:3c:1d:64:c8:b5:46:12:59:76:
         cc:3c:5d:1f:c3:d6:58:78:ef:c7:63:7e:79:60:e7:3e:7e:48:
         71:63:46:ad:55:b3:71:48:1a:33:5c:e7:4c:54:b9:65:c9:3d:
         23:f3:d6:e5:fe:b1:96:a5:26:86:5e:87:18:5a:d4:b8:eb:81:
         69:19:a4:c5:9e:0a:39:00:09:05:93:84:14:28:a0:5e:c5:28:
         c4:1b:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:30 2025 by rpki-client