Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File:                     JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier:          AgF9HIotb1GtLGFAhA3oyz1BMO+QwLr3GpPEKFKXo0M=
Subject key identifier:   68:37:E3:B8:D0:F0:33:B1:00:45:22:1C:B0:27:D3:72:31:35:3B:A6
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer:       /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial:       0C79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number:          0C70
Signing time:             Wed 02 Jul 2025 18:29:45 +0000
Manifest this update:     Wed 02 Jul 2025 18:29:44 +0000
Manifest next update:     Wed 09 Jul 2025 18:29:44 +0000
Files and hashes:         1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: Knwwrug78A0CyH4cVTxQ8Ib6U9hsOeN1koTwyHZmJXY=)
                          2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3193 (0xc79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
        Validity
            Not Before: Jul  2 18:29:44 2025 GMT
            Not After : Jul  9 18:29:44 2025 GMT
        Subject: CN=68657a99-2d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:10:5b:9d:d7:d0:83:82:38:37:21:ba:53:
                    38:f2:97:e7:33:4a:83:3b:be:71:b6:6c:ed:8e:37:
                    6e:f5:b6:e5:a1:82:84:53:fa:64:a8:70:40:98:52:
                    f9:33:4d:17:aa:9c:79:64:cb:97:28:46:d7:4a:ee:
                    f9:7e:c7:12:19:2a:2c:82:90:87:89:e8:d2:54:c8:
                    9e:fc:1e:2c:da:9a:6b:ec:5a:a9:ec:12:5a:db:ff:
                    c4:2d:95:ec:01:63:25:9b:7c:cc:b0:a5:b8:d1:1a:
                    b6:04:59:de:ce:ee:94:9f:87:56:77:61:a5:ef:a6:
                    f2:3c:56:a5:a8:78:8f:4a:5e:05:d6:b3:09:b5:99:
                    76:70:dc:a0:59:c8:8c:e5:7b:94:ae:63:06:fb:64:
                    0c:c7:f3:ee:ff:3c:1a:ce:07:c0:bc:1d:36:77:73:
                    ae:3d:81:cb:74:d5:11:4a:12:72:63:03:9c:b4:6b:
                    db:00:7d:18:cf:76:29:78:6a:b9:bc:c3:d6:45:19:
                    b6:7c:54:6b:0d:12:db:3f:07:1e:69:f9:52:6e:5e:
                    e0:1d:40:ec:a9:74:31:5c:fa:43:e7:58:2d:4c:fb:
                    52:34:6f:3b:2f:ad:9e:21:bd:47:e1:85:e3:29:b1:
                    bf:e9:2e:f2:da:1b:bc:f1:9a:e1:f2:51:1f:b7:87:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:E3:B8:D0:F0:33:B1:00:45:22:1C:B0:27:D3:72:31:35:3B:A6
            X509v3 Authority Key Identifier:
                keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:63:da:6f:2d:06:07:e8:a5:3b:8e:42:45:57:00:63:96:
         f9:b9:ce:36:07:41:ce:3a:ce:01:09:3c:66:be:ed:a6:50:3b:
         ab:a4:7b:e8:78:d0:8e:8c:82:33:ed:e0:06:eb:bd:22:f5:f2:
         fb:32:3a:b7:1b:fb:88:00:5f:c6:51:23:86:b8:45:47:9f:31:
         8d:09:a0:63:b6:db:25:af:f8:0d:73:53:d2:07:f6:f8:3d:50:
         4d:59:f3:9f:79:80:c4:7a:08:7d:78:d5:9f:30:5f:9d:ed:a0:
         cf:6a:1b:5f:5f:1f:5b:c8:bf:b0:ed:7c:c1:ec:9d:b3:a7:a9:
         1a:f5:53:f4:9b:26:95:ef:7d:0a:e7:05:7e:b1:68:a5:f4:33:
         2f:d2:3d:6a:b4:9f:20:08:ab:d5:47:3d:98:7a:0c:5e:eb:2a:
         8b:0f:42:3d:c4:71:d5:19:01:50:07:c7:a6:f8:52:cb:77:f8:
         81:70:08:21:2f:5d:f6:53:c3:ee:4f:0d:e1:00:0a:67:76:48:
         40:47:e4:e5:a9:69:de:07:05:19:c7:69:29:a5:d0:b7:94:41:
         fd:ab:a2:54:62:d9:a8:3b:94:3f:03:5b:55:88:ae:f2:5a:d0:
         76:93:52:0b:4d:7f:31:a9:05:62:a1:2e:56:64:00:c0:5f:85:
         e4:a6:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:02:27 2025 by rpki-client