Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          4VtMdY961gmNuCyFo898Eh+hrrtV4QIc5WLZatINmeM=
Subject key identifier:   57:AC:EA:3C:21:DF:79:A3:4D:59:9C:51:96:D3:AA:19:AB:DE:8B:97
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          47
Signing time:             Tue 17 Jun 2025 06:16:50 +0000
Manifest this update:     Tue 17 Jun 2025 06:16:49 +0000
Manifest next update:     Tue 24 Jun 2025 06:16:49 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: ppJr3qitp9TlFW+r+6itE/ncxOvcoRAGGHWcHUPknQY=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 06:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Jun 17 06:16:49 2025 GMT
            Not After : Jun 24 06:16:49 2025 GMT
        Subject: CN=68510851-d5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:68:70:d1:74:fa:2e:e5:2b:60:5b:10:ad:
                    05:16:e6:9f:06:2b:2f:21:31:73:ca:93:33:33:35:
                    f9:20:d9:e9:71:fb:fa:15:fa:8b:f9:4d:89:1b:aa:
                    bb:2a:42:c0:1c:19:f6:34:a6:46:75:fa:8f:f6:c9:
                    4a:3f:22:91:64:4f:9f:6b:44:67:d6:b0:5c:0e:8f:
                    d5:b6:2a:b6:25:ef:22:20:6e:a5:b0:3d:8a:d8:f2:
                    dd:8f:83:de:ea:32:63:a3:6d:32:f2:b9:91:29:05:
                    ba:01:ec:5f:cb:4c:78:65:82:88:32:2d:37:34:12:
                    79:b4:72:a3:c5:53:3f:86:05:4e:f9:55:76:00:07:
                    1a:ee:ac:ad:4e:52:93:34:98:72:7b:46:d5:71:49:
                    f7:6b:d0:da:17:fb:86:c5:30:1a:53:af:79:54:dc:
                    11:73:73:0e:51:2c:32:1f:4c:af:67:0a:20:97:6c:
                    b9:0f:0d:33:c5:eb:e0:58:51:5e:59:09:cd:1b:54:
                    bf:09:f2:9e:86:6f:2c:38:38:b9:83:e8:be:8a:55:
                    d0:67:ee:40:9e:61:7d:99:a8:36:d2:29:58:e7:9a:
                    e1:77:9c:13:6b:f5:4a:ef:1e:3a:18:f0:f7:ad:e6:
                    e1:68:17:63:73:fc:7d:2f:9c:25:19:de:69:05:74:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:EA:3C:21:DF:79:A3:4D:59:9C:51:96:D3:AA:19:AB:DE:8B:97
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e5:62:e1:e3:1f:84:42:8d:b3:37:52:0d:eb:10:1c:e5:9e:
         16:f0:07:68:3a:bf:75:2b:c1:47:c8:f5:58:5e:1b:06:74:68:
         eb:27:f4:2c:23:d9:1e:48:04:c5:ca:bf:ef:4e:f4:d9:7b:95:
         39:22:50:96:03:db:39:73:b8:91:c2:08:3a:86:a7:83:c9:aa:
         c0:d8:79:76:d3:02:bf:75:92:1d:92:a5:0b:a9:87:73:52:51:
         ad:f7:b3:83:7c:58:87:9b:b0:d2:fd:fd:30:c9:28:52:af:ab:
         f4:cd:ba:44:84:01:9a:46:5c:cf:38:fa:7e:87:58:0c:00:5a:
         1b:be:af:92:c9:c7:33:93:80:c4:62:75:0b:44:d6:82:76:ea:
         46:a9:b4:a9:7e:7b:9e:d8:56:74:90:21:5e:6d:17:62:5e:24:
         6b:b3:d9:eb:3b:a9:a3:82:7d:f3:8c:e6:f5:f4:20:bb:41:78:
         fe:cd:69:ad:17:77:37:f4:c9:65:8f:bd:1e:89:cb:fb:92:b0:
         e3:44:58:80:b0:5b:42:07:1d:82:60:bf:fe:95:1f:f4:b6:9b:
         03:79:60:ef:87:fa:7e:98:4a:03:f3:28:5d:a6:63:ba:d5:9e:
         23:e5:93:c0:66:5e:e9:5a:a9:11:11:1e:c3:a4:c0:2f:15:f3:
         5f:21:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:46:47 2025 by rpki-client