Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          61bZ2vSJuosx6W1SWIzH5JRnhuuDdZa4X6zwLRVrJmM=
Subject key identifier:   15:C1:7C:38:76:2B:01:E9:C7:66:85:3B:0D:35:CE:F5:7F:21:DA:D0
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0C9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0C92
Signing time:             Mon 12 May 2025 18:03:20 +0000
Manifest this update:     Mon 12 May 2025 18:03:20 +0000
Manifest next update:     Mon 19 May 2025 18:03:20 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: ulWcizo4kZx8UkHylpUAXNcjaQeJUXGp0wgKS8n3Gsc=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3227 (0xc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: May 12 18:03:20 2025 GMT
            Not After : May 19 18:03:20 2025 GMT
        Subject: CN=682237e8-60ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:d3:c5:4e:39:be:05:ab:e4:48:07:96:dc:
                    c4:69:b5:e3:2b:8a:c1:ee:70:80:57:7a:d7:9b:3a:
                    78:23:7c:4a:ef:bb:7d:c5:8a:ab:c5:a1:d7:d4:2d:
                    d1:81:ad:43:f5:c2:c6:27:fb:fd:3c:42:82:8b:a9:
                    f5:4a:09:bb:ca:ac:81:86:86:63:28:4c:8f:0e:21:
                    85:fc:5d:08:a0:8d:90:61:6a:79:8d:80:81:1f:b6:
                    0f:e9:a5:8a:25:f7:60:12:95:4b:41:45:5f:d8:66:
                    80:b8:da:4c:b9:08:4c:f1:5d:07:95:b4:97:c3:5c:
                    51:60:f0:4b:a4:b8:00:ac:a1:9d:58:53:a3:1c:ce:
                    53:d0:85:bf:ed:bf:fb:32:83:ae:c8:e3:c2:93:8c:
                    5c:9d:bb:65:73:2a:c4:0a:a3:0c:47:a1:a3:76:fb:
                    3f:41:df:db:ed:c4:7c:86:4a:63:ae:f8:aa:bf:2a:
                    5b:a4:41:d1:ac:18:c9:e6:a8:ba:37:b1:2f:4b:30:
                    60:e4:61:6a:01:dd:8e:5c:66:c6:1c:c7:19:29:6b:
                    73:74:e1:b5:9a:a5:7f:a3:c1:9b:81:c4:68:f5:1b:
                    58:aa:b2:9c:f5:44:7b:36:f1:e2:33:1e:02:53:37:
                    ef:7e:02:b9:57:59:87:2b:5f:75:23:ee:b4:d4:dc:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:7C:38:76:2B:01:E9:C7:66:85:3B:0D:35:CE:F5:7F:21:DA:D0
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:4f:a4:79:bd:b7:f2:77:3e:30:d6:8c:bf:e1:46:1e:74:
         3c:d4:51:c5:a4:bf:81:b6:23:48:e1:e0:83:96:f7:d4:e2:25:
         ce:1c:e1:02:a8:c5:4f:7d:4f:4a:9c:bc:f8:1b:f9:c6:21:94:
         12:25:32:9e:02:46:29:71:10:78:70:dc:e4:0d:76:a9:38:68:
         c2:47:ac:85:23:d9:2f:02:f1:25:06:3e:a6:de:e0:4d:a3:42:
         3e:19:c5:a9:16:d8:d9:1c:b9:9d:a6:99:57:11:91:bb:29:bc:
         c9:01:12:e6:0a:6a:78:30:9f:c3:c7:37:ce:89:c3:3f:bc:e3:
         70:ef:12:ea:f3:61:50:3b:9c:dd:92:88:8c:ec:f9:65:8d:31:
         05:a2:8b:02:82:da:22:86:a7:d9:cb:4b:77:47:e8:2a:06:46:
         20:dd:98:f0:c5:90:31:4f:56:6a:43:de:b0:0a:92:9d:1a:61:
         ce:d9:64:5d:00:7e:ea:4e:26:26:59:d9:66:1d:24:f0:4f:08:
         b3:38:65:c3:f8:4b:c9:b9:90:82:9f:1e:31:36:ae:67:88:22:
         7a:d1:22:e3:e7:b3:04:04:20:3d:12:50:44:14:78:ac:bd:9c:
         6d:98:f3:50:26:4d:d2:f3:28:0a:0a:76:5f:c9:df:24:33:6e:
         eb:0f:8d:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD
RjQxN0M5M0YwHhcNMjUwNTEyMTgwMzIwWhcNMjUwNTE5MTgwMzIwWjAYMRYwFAYD
VQQDEw02ODIyMzdlOC02MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7jTxU45vgWr5EgHltzEabXjK4rB7nCAV3rXmzp4I3xK77t9xYqrxaHX1C3R
ga1D9cLGJ/v9PEKCi6n1Sgm7yqyBhoZjKEyPDiGF/F0IoI2QYWp5jYCBH7YP6aWK
JfdgEpVLQUVf2GaAuNpMuQhM8V0HlbSXw1xRYPBLpLgArKGdWFOjHM5T0IW/7b/7
MoOuyOPCk4xcnbtlcyrECqMMR6Gjdvs/Qd/b7cR8hkpjrviqvypbpEHRrBjJ5qi6
N7EvSzBg5GFqAd2OXGbGHMcZKWtzdOG1mqV/o8GbgcRo9RtYqrKc9UR7NvHiMx4C
UzfvfgK5V1mHK191I+601NwluwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXBfDh2
KwHpx2aFOw01zvV/IdrQMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz
RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V
QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhb0+keb238nc+MNaMv+FGHnQ81FHFpL+BtiNI4eCDlvfU4iXOHOEC
qMVPfU9KnLz4G/nGIZQSJTKeAkYpcRB4cNzkDXapOGjCR6yFI9kvAvElBj6m3uBN
o0I+GcWpFtjZHLmdpplXEZG7KbzJARLmCmp4MJ/DxzfOicM/vONw7xLq82FQO5zd
koiM7PlljTEFoosCgtoihqfZy0t3R+gqBkYg3ZjwxZAxT1ZqQ96wCpKdGmHO2WRd
AH7qTiYmWdlmHSTwTwizOGXD+EvJuZCCnx4xNq5niCJ60SLj57MEBCA9ElBEFHis
vZxtmPNQJk3S8ygKCnZfyd8kM27rD43w
-----END CERTIFICATE-----
Generated at Wed May 14 19:42:17 2025 by rpki-client