Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          1OhGu9jmO1Tx2sgwIM021CTnn6z1sJWeEJKdjj1vL2o=
Subject key identifier:   9E:D0:2A:DB:25:5F:D9:91:97:76:5E:50:4F:50:08:83:9D:40:6B:46
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          6A
Signing time:             Thu 07 Aug 2025 07:33:04 +0000
Manifest this update:     Thu 07 Aug 2025 07:33:04 +0000
Manifest next update:     Thu 14 Aug 2025 07:33:04 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: XjjUxg98jl0nyEh6fLlK8uooy16oXMBUcxd0WZDfIes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Aug  7 07:33:04 2025 GMT
            Not After : Aug 14 07:33:04 2025 GMT
        Subject: CN=689456b0-d700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:75:cb:39:23:1d:bb:07:c7:81:20:4d:dd:
                    5b:95:68:6e:7c:08:cd:ac:13:76:48:e3:f5:a6:06:
                    46:17:cf:be:fe:af:ab:99:3b:7f:1e:51:3f:15:33:
                    3e:b2:97:b5:8c:bb:22:ef:99:1b:ea:31:1c:42:e9:
                    2a:e5:28:55:f8:df:80:63:ac:df:2b:53:c1:15:2f:
                    ee:82:d4:c9:4a:15:80:bb:18:c4:c9:53:17:db:02:
                    3b:ff:99:11:12:5a:da:c5:ff:e3:fc:db:4f:a5:2b:
                    fb:30:ed:57:ed:80:a6:bc:0b:4a:9f:5c:fa:6c:fe:
                    6f:8b:b4:52:cc:96:22:a1:ee:53:97:6c:3e:6d:1a:
                    9f:2d:5a:b4:16:a2:9a:45:4d:fc:74:19:23:3e:28:
                    f3:06:26:2f:31:81:6c:ce:de:69:ae:6e:14:39:74:
                    4b:08:2d:2d:fb:25:f6:6b:a6:77:d0:01:18:d7:90:
                    b8:d5:ae:8b:19:00:59:81:80:ee:3e:b1:aa:25:f9:
                    27:97:98:ec:ec:97:ca:18:de:15:cd:a9:b4:ed:79:
                    39:2f:05:a4:86:05:a6:ee:03:64:66:98:be:4b:b0:
                    be:4a:82:ba:a8:ff:8d:6e:5b:1c:66:79:b6:d2:60:
                    c7:28:ac:96:37:c8:09:ae:41:83:3d:af:99:06:2f:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D0:2A:DB:25:5F:D9:91:97:76:5E:50:4F:50:08:83:9D:40:6B:46
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:95:3c:f1:13:72:a4:a0:78:96:06:71:38:92:70:c7:11:
         d7:80:65:02:f5:1f:00:0d:2e:68:fd:0a:65:3e:52:70:8e:28:
         81:33:17:b8:9d:a8:eb:99:45:21:87:90:4f:47:e9:b3:df:cd:
         09:41:75:37:cd:7b:45:09:70:79:d0:f6:be:b2:d7:12:2c:e4:
         23:d6:fc:5e:9b:f3:1c:56:c9:52:78:60:4f:d4:29:27:0b:17:
         fe:2e:ec:10:b1:62:ac:cb:68:fc:3a:0f:e6:13:1c:ee:48:84:
         fe:df:f7:8e:a7:66:6d:d2:3f:7f:92:0b:ef:9f:78:da:d6:b0:
         a5:10:0e:18:d4:d8:94:bd:5d:7e:a4:55:73:1e:b1:f5:ed:c2:
         8d:b8:0e:09:ba:fb:05:9d:d6:0b:72:cd:9f:99:58:57:6e:4d:
         2b:ea:a0:32:0e:e2:a3:d7:9a:94:4f:3b:91:19:a0:5e:16:e0:
         8a:9f:3c:d1:c3:bc:a0:10:48:c2:7a:7c:f0:83:bb:09:fa:6d:
         e7:61:df:d4:12:6e:a5:3d:69:7f:3c:a2:b7:f2:52:7a:18:99:
         67:1b:0a:ad:64:04:da:de:a6:ed:fb:ff:da:7b:32:04:18:bd:
         33:dc:74:0e:58:dd:24:14:87:2e:b3:d1:75:5b:fe:9d:43:47:
         b3:d4:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:07 2025 by rpki-client