Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          E1Wli38Tv9oRKqCRYLsI9emaawqfqhJW1Ip3s0WcZ8g=
Subject key identifier:   FC:59:F9:9B:93:43:50:E4:4F:14:56:61:37:A1:CC:3F:4B:32:6B:1D
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0D48
Signing time:             Sat 14 Jun 2025 17:54:25 +0000
Manifest this update:     Sat 14 Jun 2025 17:54:25 +0000
Manifest next update:     Sat 21 Jun 2025 17:54:25 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: mdSXtnziMKXpubbF561GarQ8+MLYQlSvpmOJo9q3sd8=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: Jun 14 17:54:25 2025 GMT
            Not After : Jun 21 17:54:25 2025 GMT
        Subject: CN=684db751-7bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:db:25:71:16:db:52:71:94:9f:c2:25:fd:
                    d3:0f:e5:8d:66:7d:11:cb:4d:53:7e:3f:25:3a:3c:
                    0a:9e:59:e3:74:48:41:d2:f3:b1:85:cb:e4:f1:cd:
                    e1:65:5f:65:63:2a:28:00:bb:02:d6:7b:c6:7f:18:
                    dc:4a:89:50:a7:60:a7:68:0d:55:70:37:9c:6c:d0:
                    5a:61:1d:15:e9:89:bd:12:92:40:f3:e2:26:2d:4c:
                    8c:f3:30:e1:8b:ca:16:00:1a:28:6d:8d:74:9d:10:
                    d6:d9:02:a4:a8:2c:88:fe:5a:c5:7c:32:9e:9e:f1:
                    85:c6:1c:99:60:e8:d7:da:19:0c:e0:3b:12:f6:a5:
                    77:55:8a:78:00:50:7f:f2:80:be:be:57:54:dc:89:
                    c3:ce:d1:cd:18:4b:5d:6a:f1:be:57:ba:4c:28:29:
                    24:04:48:8b:f4:3b:fb:f1:b3:3a:ca:f2:b1:aa:1c:
                    e9:ab:b5:c7:c1:a1:b1:9a:48:38:bd:d5:16:53:e8:
                    35:49:68:a7:b4:ac:a7:3a:6e:86:41:e0:d2:42:ea:
                    e4:3a:6c:db:e0:1e:61:d5:78:00:44:7c:c4:90:46:
                    8f:1e:01:a2:53:0d:1a:79:57:3c:95:31:6a:7d:f2:
                    70:4a:de:c9:9e:b9:f5:92:a7:9f:1a:b8:56:47:73:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:59:F9:9B:93:43:50:E4:4F:14:56:61:37:A1:CC:3F:4B:32:6B:1D
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:b0:b7:5b:e0:4c:eb:8e:47:b8:2a:0e:a4:ef:f7:77:49:
         b3:1c:18:34:23:e7:69:7d:b2:4c:a5:ea:93:2b:a5:5d:1f:df:
         69:d9:5d:16:f8:77:5d:1b:6d:87:7c:70:cc:12:ea:5e:23:95:
         c4:84:e4:d8:ce:4e:db:55:71:0a:df:b7:5c:04:af:2b:dd:a8:
         3d:7d:83:20:ba:98:be:a4:bb:1c:84:ce:c9:8c:68:4f:fb:74:
         17:c4:ab:36:66:df:9d:9d:08:3a:56:a4:e0:63:06:ae:67:37:
         17:d5:7d:7a:d4:cb:99:22:84:37:e7:28:f4:bc:97:7b:09:6e:
         f9:fb:95:7d:53:65:42:1e:fa:32:1c:09:30:37:84:a1:38:e7:
         14:8a:1e:da:db:17:52:7b:81:94:19:f2:50:8b:b1:3f:2d:ad:
         57:16:52:4e:63:99:6c:44:90:48:cb:60:e1:6c:b8:61:73:ae:
         cc:f5:58:91:69:64:e8:1d:7f:94:09:8d:fc:a5:b8:83:77:f1:
         31:c6:3f:43:4a:48:b5:5b:8e:cb:d7:01:86:16:36:62:13:de:
         d7:9c:d3:bc:86:ba:64:5c:95:65:4d:16:35:bf:9e:d1:14:a9:
         98:8a:58:03:80:3a:1c:73:8e:9f:fb:06:2b:93:76:fb:1c:40:
         8b:bd:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:26 2025 by rpki-client