Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          SsZC6GkupJxDZvBIVdVOEOSX6AjuG+hIis2SDccPt78=
Subject key identifier:   0E:19:8D:AD:63:D2:09:64:41:FF:4D:DC:B0:C1:05:95:63:52:65:8F
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       14B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          14A9
Signing time:             Fri 22 Aug 2025 16:59:57 +0000
Manifest this update:     Fri 22 Aug 2025 16:59:57 +0000
Manifest next update:     Fri 29 Aug 2025 16:59:57 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: yxTizfx+Ud+Rj/xrCRt9nOvPa+z19btq11MgSqgRpFE=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5299 (0x14b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: Aug 22 16:59:57 2025 GMT
            Not After : Aug 29 16:59:57 2025 GMT
        Subject: CN=68a8a20d-61eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:17:39:e9:8f:8d:78:34:cf:df:d2:f7:8c:
                    d5:bf:54:5e:40:46:6e:9c:7c:1a:55:7b:e0:2e:ff:
                    cc:a8:b6:28:d2:54:27:f5:28:c0:5d:39:2c:87:56:
                    0d:f9:5b:16:36:56:5f:20:b2:d2:e4:4e:de:5b:e1:
                    1b:0f:49:f2:fa:c2:6a:d6:e3:1c:5a:8f:f8:c2:c5:
                    29:6f:98:59:03:95:91:96:1b:61:47:02:49:be:10:
                    27:1f:51:2f:c2:fc:5f:48:6b:cd:1e:c8:e8:8e:b9:
                    e4:70:16:e1:ac:bf:0c:68:72:5c:a9:15:a0:dd:38:
                    e7:eb:35:f1:b8:53:b0:b7:36:96:ce:d3:67:dc:1d:
                    6b:ba:c6:50:90:9e:66:19:d0:01:ec:03:75:8e:75:
                    54:dc:2f:6e:05:c0:d7:b9:b5:eb:53:95:96:2b:44:
                    ca:be:ff:fe:22:b0:3a:84:92:25:b1:8e:a7:c7:5f:
                    df:c6:4e:54:7b:89:e6:dc:37:fa:17:70:7d:2d:b9:
                    81:ca:46:61:13:76:d8:81:88:10:f3:e7:47:2e:3e:
                    f6:c1:c2:d1:21:5e:1f:06:94:e9:37:02:af:83:b7:
                    2b:f5:96:0d:cd:a9:2c:9e:c6:e4:e5:a8:f3:4d:12:
                    38:f6:49:cc:94:e3:10:dd:03:64:c1:6e:04:43:21:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:8D:AD:63:D2:09:64:41:FF:4D:DC:B0:C1:05:95:63:52:65:8F
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:f9:d7:0d:1a:45:0a:cb:ff:f5:50:90:bf:60:72:63:b7:
         78:13:ff:93:be:ec:4b:2f:34:b4:3b:2e:98:67:55:de:f1:16:
         1d:84:e1:0d:e7:b6:28:dd:6e:16:5a:5b:0e:13:ca:23:cf:e6:
         35:fb:6b:48:a1:0a:8e:34:c4:3d:e7:17:5d:ab:49:58:8d:8f:
         66:fb:96:8f:9b:d6:f0:37:07:db:75:8b:1c:29:b2:df:af:d9:
         6b:84:af:f2:56:e3:ae:e1:2b:10:e1:28:8c:a2:d6:08:f9:7a:
         78:af:24:05:23:a6:bc:22:3d:de:47:73:0e:71:f9:2f:d1:ac:
         fb:99:c2:bf:c5:e7:4b:13:2b:29:72:8d:0b:a0:6c:ef:7e:78:
         a8:07:f5:21:d2:32:f0:73:a6:d8:3a:22:1d:52:f7:7c:72:1d:
         d2:c0:11:e1:a9:0a:89:39:38:79:fc:c6:31:b5:ea:bf:9f:c7:
         6f:2d:60:05:e9:d8:a2:45:fc:03:31:f7:61:d4:2b:3d:d4:39:
         f7:b9:82:43:3f:03:8b:38:1b:89:2a:1c:04:8e:2b:4f:ad:be:
         6a:e3:80:65:91:24:59:d8:15:23:c3:7a:58:a4:96:a3:ac:2a:
         71:ac:5d:cc:2c:0a:74:5e:44:ff:8b:de:cb:f8:95:ee:e3:43:
         0a:32:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:15 2025 by rpki-client