Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          BYG8IQEuwG2QTr7WyCFz+eDlHemKmb2FCrBQFqCgbE4=
Subject key identifier:   7E:9B:97:A0:B0:27:A1:47:5F:CB:65:06:39:7D:51:D4:2A:FC:6C:2E
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1F7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1F30
Signing time:             Mon 12 May 2025 16:00:22 +0000
Manifest this update:     Mon 12 May 2025 16:00:21 +0000
Manifest next update:     Mon 19 May 2025 16:00:21 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: Wxn4J4xQHYl0R5LrOh4zhj4jv99rOizhGakA2KuLgSU=)
                          2: 5B425102C0E911EF978F1385C4F9AE02.roa (hash: k1pIrPdvh6z0dp5En85XqdbWfUA4ZO6tHmuvy2durEk=)
                          3: 51242EA0157A11EEBF2E043CC4F9AE02.roa (hash: gdgPydJrUkK8DpVlQ4wmxtIpuGhoHfbxVdF/ULwigco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8059 (0x1f7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: May 12 16:00:21 2025 GMT
            Not After : May 19 16:00:21 2025 GMT
        Subject: CN=68221b15-f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:7b:a7:e0:62:52:78:c4:36:bc:d4:68:e6:
                    64:d1:cb:a7:a0:56:57:8b:97:7b:2d:d4:8b:b3:c3:
                    72:ae:7e:dd:8a:41:36:e6:fc:12:e4:e7:3f:ca:4c:
                    8e:b8:6d:07:92:ea:64:b2:7a:28:c7:c9:d9:e1:7e:
                    a5:82:b4:eb:cc:2f:91:b0:74:5c:77:d6:92:86:85:
                    7b:b4:6a:3b:87:3a:b4:7d:24:62:b8:19:b1:0a:bc:
                    c6:6f:f9:41:26:f0:89:9f:10:ba:2d:72:88:62:5e:
                    12:1d:13:95:d4:2e:85:6e:cd:1e:c5:d8:07:47:3f:
                    04:77:19:55:45:90:5b:2d:53:11:74:0a:15:1d:9f:
                    e1:d1:f8:b2:2c:f1:94:20:ac:dc:70:ab:cb:0c:26:
                    d4:c3:a8:2a:90:ae:75:b8:ea:0d:d1:e5:15:64:e4:
                    8a:e2:2a:f6:54:88:cb:ff:bf:83:2b:7e:77:ee:65:
                    9f:c8:85:21:af:f8:79:a8:a1:5f:84:15:8f:c8:e2:
                    be:16:42:c6:30:12:03:e5:55:ae:62:62:34:6d:be:
                    a4:07:77:98:bf:65:ad:0c:49:c4:f3:4c:a6:36:d0:
                    00:8a:3b:82:cd:8d:2b:6f:08:8d:cf:bd:be:60:b7:
                    1c:b2:96:3a:0a:14:1d:d4:76:54:cc:d0:64:1b:15:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:97:A0:B0:27:A1:47:5F:CB:65:06:39:7D:51:D4:2A:FC:6C:2E
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:2b:46:02:5a:c8:c7:2b:f4:6b:43:8c:03:28:5c:b5:5c:
         0f:92:a6:44:a9:23:85:81:1b:14:90:52:ac:9c:d7:8c:cc:f9:
         9e:72:c1:4e:a5:60:bd:13:61:61:47:84:98:79:12:a4:a5:07:
         c3:64:a6:f0:a4:90:a9:39:ad:3b:26:0b:2d:fc:2f:9f:e0:7f:
         f2:69:b9:85:1b:5f:46:80:cb:07:26:61:ec:a4:d8:60:79:95:
         13:70:6a:f8:eb:68:9c:aa:f7:6d:bc:67:c1:ff:8b:e4:d7:4d:
         e6:da:19:57:2b:35:96:64:09:37:99:f7:06:96:82:9b:88:07:
         3d:8c:41:f0:e5:fd:1d:60:bc:17:94:12:53:63:43:56:f1:53:
         af:49:b0:67:d8:bc:17:78:ec:07:d3:ed:06:63:2e:76:34:13:
         5a:a6:01:5b:94:f7:62:17:ff:96:42:4b:c8:25:00:28:0f:6b:
         50:dd:bb:d2:f7:1a:17:5e:41:83:8b:46:1e:51:33:d1:cf:a7:
         66:64:e9:82:b3:ff:e0:67:1d:3e:9f:de:84:5f:80:80:0b:e2:
         ba:9d:7d:00:30:79:bf:03:06:0c:44:38:ab:db:4c:95:e1:da:
         d7:d5:52:46:6b:ed:46:c2:d8:ae:a1:42:f2:43:83:84:fd:58:
         6a:50:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:51:31 2025 by rpki-client