Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          c3Gkp3GJLYucpZnwUp4cfk8Fa9TF/3ApQ1UQX3BdF6M=
Subject key identifier:   B3:C9:30:AE:1F:D4:73:00:0F:84:C1:F3:55:53:E2:25:C8:B2:8E:3B
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          01ED
Signing time:             Tue 01 Jul 2025 02:57:49 +0000
Manifest this update:     Tue 01 Jul 2025 02:57:49 +0000
Manifest next update:     Tue 08 Jul 2025 02:57:49 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: ZKsi4mEfaQqceBUgsqqIBawV0E5HMoHwVquAL0FRMuA=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: +VcgRf6z1VT/qmLUhorkYqe7TBDudTQ2zcHHrZKRu3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: Jul  1 02:57:49 2025 GMT
            Not After : Jul  8 02:57:49 2025 GMT
        Subject: CN=68634ead-7751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:58:92:75:58:00:3d:9c:95:04:bf:0b:65:
                    b0:4c:9b:de:80:43:91:db:cf:76:79:77:63:73:34:
                    12:0d:a6:59:59:a3:a2:f6:3c:90:77:d6:ec:81:42:
                    4a:aa:a0:0d:f0:bc:b3:18:00:3b:f9:9d:7c:43:4d:
                    8e:e5:77:bd:b6:6d:f7:46:9f:03:5c:03:e4:39:68:
                    3e:23:f2:00:a1:f5:27:2f:51:8c:37:e2:a9:bc:88:
                    14:b5:f3:9b:cc:fd:1b:8d:85:a4:32:bc:5a:2a:55:
                    b9:82:38:2e:bf:11:fa:80:fc:7c:26:f3:dc:98:dc:
                    42:d1:cb:34:19:dd:f1:48:48:0d:8a:cd:8e:71:e8:
                    c2:97:dc:55:18:61:79:6a:a6:9a:b3:70:ff:2b:0c:
                    d6:68:76:e0:a6:f0:89:63:7b:79:f7:16:fc:4b:2a:
                    59:41:11:04:66:ef:02:97:88:2a:07:be:08:ba:bd:
                    da:2d:05:7d:ad:0d:3c:82:a0:e8:3f:a9:b8:29:7f:
                    1c:f0:cf:81:70:dd:ff:63:6c:c3:cf:59:bd:d1:b7:
                    0e:cf:7b:d7:03:48:71:4c:cf:9c:09:a8:82:4c:bf:
                    0c:0d:9b:c5:2e:8c:7a:4d:26:d0:a7:31:b6:63:8f:
                    fb:11:dd:ff:d4:53:0c:16:eb:6c:f5:0e:75:e9:d8:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:30:AE:1F:D4:73:00:0F:84:C1:F3:55:53:E2:25:C8:B2:8E:3B
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:ca:da:d2:e7:44:8f:07:5f:14:89:99:28:f2:af:b0:bb:
         be:4b:5a:2d:d5:7e:44:15:a7:a6:04:07:42:58:f2:dc:02:84:
         3b:54:ac:39:9a:98:f0:42:2b:c8:a6:3f:e0:ff:55:25:04:14:
         f6:89:34:cc:00:2f:fe:0e:1b:61:6a:84:d0:d1:ed:25:c8:7a:
         04:5c:5c:f3:8a:4c:c1:e4:18:13:df:ab:ca:4c:ba:4a:ba:cd:
         42:21:a6:75:4c:f3:e6:2d:bd:72:66:63:e5:06:c5:b0:c2:90:
         31:dd:12:d1:bb:c4:d5:07:9d:0e:cb:76:49:65:2f:c7:72:94:
         be:21:94:bb:3b:45:a4:e0:5d:67:eb:9f:a3:dc:f6:68:46:d0:
         96:a9:d1:ab:c8:fa:89:1f:40:e4:56:72:e9:9b:ab:01:3f:3f:
         f6:da:a8:a5:2a:eb:8a:d3:95:dd:57:50:ff:3c:a5:90:c3:62:
         d8:45:29:e5:3e:ba:8f:4c:3c:ca:63:73:0d:19:1b:88:f3:cc:
         79:cc:00:c7:9a:27:e7:8f:c9:84:56:9e:b1:15:4b:4b:87:d8:
         76:5e:9b:b0:9a:ec:15:00:0b:9c:07:76:ae:ef:69:43:14:4b:
         7d:b9:30:d1:76:b8:e7:f7:d3:54:ac:fc:4a:03:2b:ce:f4:92:
         24:9f:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:06:02 2025 by rpki-client