Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
File:                     jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json)
Hash identifier:          zum9Js+lk662yLjmCckSsUH3gGk8n9VslZAECCIEqgs=
Subject key identifier:   CC:B3:9E:0D:3E:05:FE:FA:8A:48:29:2D:DC:38:02:A6:5B:68:14:76
Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Certificate issuer:       /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
Manifest number:          063D
Signing time:             Sat 28 Jun 2025 22:19:21 +0000
Manifest this update:     Sat 28 Jun 2025 22:19:20 +0000
Manifest next update:     Sat 05 Jul 2025 22:19:20 +0000
Files and hashes:         1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: LcCIERFGcNoa2fUonKVryTYI/EDAOmhIrHvQeie85xY=)
                          2: F603D584E99611EDB0837738C4F9AE02.roa (hash: Okhu1FQgQA+Kf0eFI37SSlIwutQLAOMIG0YXzuCGyrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
                          rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 22:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
        Validity
            Not Before: Jun 28 22:19:20 2025 GMT
            Not After : Jul  5 22:19:20 2025 GMT
        Subject: CN=68606a68-18e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:65:61:18:8d:d6:88:94:c2:2e:5d:19:7f:
                    5e:f2:46:9f:6c:d1:35:a6:67:58:87:49:9a:15:cd:
                    85:d9:38:69:de:51:56:15:ee:23:85:31:a6:a0:f0:
                    a0:b5:c0:4d:82:37:90:67:3e:bb:84:6a:c1:c1:aa:
                    75:7b:f9:94:61:d7:be:62:07:48:63:9a:b3:81:fa:
                    89:be:77:ae:4f:8a:b3:94:60:40:ec:91:78:af:b5:
                    e7:c7:a3:3d:46:8b:1a:1e:74:98:ed:61:63:4a:e1:
                    f2:dc:ef:c3:4c:92:de:d5:c4:57:02:8f:5f:96:d0:
                    bf:bc:fe:ee:ab:5e:eb:e8:31:e1:d8:fd:e2:1d:13:
                    9f:b5:ac:60:d5:c7:76:5f:87:97:96:ac:69:2c:e5:
                    53:a3:0a:5f:34:69:04:1e:58:97:ef:c9:59:35:f6:
                    c4:93:04:ff:8f:3c:c0:c8:3a:44:94:5f:10:dd:88:
                    64:82:2d:08:a5:00:cb:57:03:53:1f:1f:23:90:18:
                    d6:fe:23:b5:1b:21:d9:a4:3a:7d:8a:d7:fd:91:35:
                    ad:a5:e0:82:53:22:e9:42:5f:a5:0d:9a:e6:3a:f3:
                    bc:8a:2b:e9:96:1d:a5:cf:6e:dd:eb:ec:2c:fa:05:
                    bf:2a:18:41:f4:30:98:a5:fb:79:8e:ec:e4:97:ea:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B3:9E:0D:3E:05:FE:FA:8A:48:29:2D:DC:38:02:A6:5B:68:14:76
            X509v3 Authority Key Identifier:
                keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:c7:4a:bf:76:2b:94:ac:49:08:98:c4:02:85:ae:d1:1b:
         c0:8f:fa:28:cf:7e:3f:c6:af:c7:e1:d3:2e:7a:91:20:45:90:
         9d:c4:e9:6d:c5:2f:b3:ee:57:fb:7a:47:39:88:cf:6f:9e:23:
         07:a3:35:63:51:66:ff:e7:35:42:34:c0:c9:3f:0a:d1:59:8d:
         9d:62:35:be:b2:bb:98:6f:a7:a0:4c:74:11:86:11:31:de:8a:
         de:5c:da:af:b2:c7:53:86:f0:e8:9d:d0:d4:4b:6d:bc:2c:a1:
         98:8b:d0:52:d6:b6:1d:60:38:8f:f6:45:f9:4a:4a:2e:97:d4:
         65:61:3f:88:78:3b:a0:7c:61:1d:e3:8f:d6:bf:ca:ec:30:7b:
         e2:d3:56:51:3b:12:8b:d3:da:47:09:9c:9f:16:74:e9:b8:1b:
         51:13:c4:80:2e:7d:fc:3b:e5:c6:0a:f6:e5:4c:39:e5:0a:a5:
         ed:b1:18:24:66:b6:de:8c:da:24:68:34:f1:c3:68:da:ff:bd:
         62:29:90:e6:28:9f:59:6c:f7:31:11:53:20:00:01:f5:85:6f:
         31:33:61:64:af:01:55:95:b1:f9:e4:98:39:93:cb:4d:f6:07:
         9f:d9:54:7f:de:27:45:09:8c:d6:bc:38:fe:ce:02:dd:c8:35:
         79:42:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:35 2025 by rpki-client