Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File:                     JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier:          PR9vz/tGmQQ1uIGtpr8yVkPmogVCd437bYH0pYVZXOE=
Subject key identifier:   E6:DB:8C:26:36:8D:01:3B:08:B9:1A:DC:DA:D3:5E:4F:D0:D8:8B:58
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer:       /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial:       0C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number:          1077
Signing time:             Tue 12 Aug 2025 18:27:46 +0000
Manifest this update:     Tue 12 Aug 2025 18:27:45 +0000
Manifest next update:     Tue 19 Aug 2025 18:27:45 +0000
Files and hashes:         1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: ni8To7LzuEjVi9svkA9x7RXfy9jUAxQmLJZgFZqcGCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 18:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
        Validity
            Not Before: Aug 12 18:27:45 2025 GMT
            Not After : Aug 19 18:27:45 2025 GMT
        Subject: CN=689b87a1-e746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:69:24:a0:de:43:97:d2:d4:e5:34:51:ca:
                    12:53:4d:e8:13:5b:6c:0d:69:eb:30:e7:99:d6:cd:
                    f3:89:6c:58:e6:4c:31:6b:2c:41:a4:6a:3d:ef:c6:
                    a2:d0:aa:b1:43:fc:33:dd:dd:90:f5:2f:40:c4:4d:
                    50:e0:78:8d:4e:22:a9:2b:6d:8c:0e:68:a7:96:40:
                    e8:0b:22:7f:06:83:47:f6:c1:3b:f3:a9:dd:a2:e8:
                    e8:70:ef:75:73:7f:c9:57:80:32:ba:5f:b4:99:da:
                    5c:36:29:75:fd:81:7a:ed:87:26:f3:94:a2:bf:ea:
                    88:8d:fd:2f:7a:00:60:54:ca:9e:6d:7f:00:ad:1b:
                    f4:99:95:99:db:5c:44:e2:c2:c1:1c:f7:1f:75:95:
                    b7:5f:d8:3b:e8:be:f9:72:b2:84:c3:1c:ef:3d:3b:
                    e8:76:89:05:0d:20:d4:ab:fc:4a:47:a1:ab:58:d5:
                    1a:19:56:c4:e2:fd:40:a0:ab:6a:a5:67:35:3d:9f:
                    cf:72:95:af:df:35:42:50:50:06:3c:78:62:cc:c9:
                    fe:df:0d:7a:6b:44:11:6a:c9:f6:5a:ba:70:71:9c:
                    d2:e4:7f:f2:fd:4f:7a:c2:66:6e:7a:4d:09:fb:64:
                    c5:89:89:46:25:dd:04:3a:3e:4a:30:60:00:34:d6:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DB:8C:26:36:8D:01:3B:08:B9:1A:DC:DA:D3:5E:4F:D0:D8:8B:58
            X509v3 Authority Key Identifier:
                keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:88:ee:e8:6e:89:7a:9c:27:96:ec:97:b0:5b:08:d3:e1:31:
         c8:6e:ba:38:a8:6b:1f:0a:02:2b:ac:94:04:85:52:55:54:1d:
         79:7c:36:bc:7c:24:50:bf:76:6c:6b:e3:1e:7d:7f:dd:36:f0:
         ca:05:38:88:11:a0:e6:07:04:40:38:d0:2b:ae:5a:da:33:14:
         56:4a:c2:98:60:f8:6a:dc:9c:c5:e5:64:75:ed:a9:dc:27:f2:
         e9:f5:cf:1c:80:e4:b3:a0:4e:46:69:2a:ee:af:b7:6b:e6:bd:
         5d:be:d7:9a:0f:7a:93:5c:3e:bb:00:8e:e9:c5:bf:72:39:c9:
         30:5c:d7:ec:b8:33:39:f7:c5:37:05:71:3a:12:57:d1:62:82:
         cf:dc:50:ea:20:89:89:4a:14:c2:73:49:0e:75:77:4f:54:fd:
         b4:f0:59:25:80:62:e7:5d:7c:5b:13:4d:88:bd:2c:97:aa:a9:
         3c:c4:a3:2d:87:cd:e9:aa:29:f3:ba:2a:1f:95:fa:cc:8b:aa:
         8a:f6:06:bd:7a:c9:05:b3:e7:8a:a9:01:4f:4a:84:98:78:9d:
         7a:10:8d:97:d0:fb:ce:64:c2:6c:a8:88:c3:e7:14:13:3b:8f:
         27:f6:6e:66:43:de:b2:b8:b8:0f:3f:ca:77:03:ac:e5:3e:12:
         40:69:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:59:10 2025 by rpki-client