Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          birppVz4GWbHX/INKK0trcjA9GGptGbO+JgE8+JYi1Y=
Subject key identifier:   58:67:36:49:ED:23:EF:22:2C:6B:CC:57:36:E1:04:6B:1F:58:E3:F2
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0CB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0CAC
Signing time:             Wed 02 Jul 2025 18:22:20 +0000
Manifest this update:     Wed 02 Jul 2025 18:22:19 +0000
Manifest next update:     Wed 09 Jul 2025 18:22:19 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: C5Ng1KgpPpsmjEwhuCHz4X2/Gh6OG3kmwQyBazgizhw=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Jul  2 18:22:19 2025 GMT
            Not After : Jul  9 18:22:19 2025 GMT
        Subject: CN=686578dc-7e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:c3:3e:0f:1f:54:3c:97:b0:fa:8b:da:64:
                    ff:da:f2:3a:76:01:1a:4f:2d:d6:9b:28:d8:e8:b4:
                    d5:ea:e4:2d:7e:76:78:53:a6:9e:c6:19:bd:3c:f4:
                    76:5a:75:59:57:86:10:8a:44:d1:4d:12:a4:fc:2e:
                    bc:e9:e9:c2:3f:d0:11:76:88:af:e2:56:7c:65:bb:
                    a1:26:df:2e:10:36:2d:c9:85:4a:24:92:70:5b:35:
                    cf:1b:f4:88:9b:1c:5c:1a:4a:a8:a7:12:cd:3a:02:
                    07:63:98:0c:e1:06:3b:3c:46:b1:08:55:ca:c0:72:
                    bd:3e:69:f5:27:4b:ae:1c:c1:40:ee:90:36:4c:60:
                    34:e6:64:6b:61:8e:ba:5a:34:77:1d:07:21:33:64:
                    b2:eb:57:3a:31:b3:db:8e:4f:bb:b6:fa:48:42:50:
                    df:53:5e:d2:95:f1:54:51:95:11:6b:86:30:81:e3:
                    c2:8e:86:28:e8:43:09:16:c6:ae:76:11:d9:79:ca:
                    4d:0b:e4:c7:26:6e:0e:1d:04:59:a3:2d:b8:d1:c4:
                    33:80:a1:a8:63:f7:63:6b:69:d6:07:d4:d3:65:56:
                    3f:60:01:17:40:08:ef:1f:10:c4:8d:b1:df:5e:0e:
                    f9:66:3d:72:e6:4c:bc:6f:85:91:39:dc:cc:e6:57:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:36:49:ED:23:EF:22:2C:6B:CC:57:36:E1:04:6B:1F:58:E3:F2
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:40:2f:ac:bd:4a:e1:a9:2f:d0:b1:ee:39:81:1a:bf:06:
         38:b9:d6:73:8a:38:f4:3b:ba:c1:47:1b:19:17:88:d6:bc:ab:
         c5:d0:6c:a7:1e:85:ee:93:60:19:21:54:3d:bb:8f:99:96:5b:
         96:dc:b9:f1:2b:98:56:78:be:62:d1:5c:71:ec:48:47:1c:a3:
         59:76:7e:b7:bb:2e:25:dd:76:aa:65:19:78:0e:a7:c7:29:ed:
         0a:9d:cd:48:9d:4f:77:d2:82:20:27:53:a5:0d:5c:5a:72:fd:
         1b:30:77:16:27:90:68:a4:13:19:85:5c:9f:6e:f7:cb:28:76:
         53:2e:bf:17:69:1a:68:51:05:34:32:fd:41:53:41:fb:4a:5f:
         0d:30:17:2f:ed:7e:1b:95:f8:e9:e4:1a:5e:76:27:a8:dc:70:
         74:5f:8d:55:42:d2:8a:e2:b5:e9:86:54:11:51:c4:ef:8a:cc:
         28:e7:2a:08:49:52:00:08:1d:51:e5:13:dc:c6:dd:ad:c7:ea:
         7a:c3:34:3b:43:12:c9:96:6c:6b:ec:65:81:56:6f:f7:7f:36:
         53:85:26:18:cd:e1:7d:85:c2:43:71:44:06:5c:95:6f:ca:3d:
         44:f3:cf:c6:93:c4:ba:9b:2a:9b:76:74:2e:7e:b3:d9:ec:00:
         ae:4e:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:07:54 2025 by rpki-client