Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          wiKF1RPPb0d6TXTTRxqCMLsCdr7mIdysMQc2S1GNoiA=
Subject key identifier:   11:7E:1E:54:83:F6:23:13:72:FC:46:D3:B9:00:FB:D5:0A:E0:84:E4
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       34CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          34AC
Signing time:             Sat 14 Jun 2025 15:15:41 +0000
Manifest this update:     Sat 14 Jun 2025 15:15:41 +0000
Manifest next update:     Sat 21 Jun 2025 15:15:41 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: Iyu7d8IXc06cPvfpPc5vGU+KVi9BHd6VbI9PZKXg3Fk=)
                          2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: rwJT2YdcBWIo+AYt6oaAo4E5fXWOqiy9ZBXvVvPoImY=)
                          3: 9554034062CB11EEA41B6D2EC4F9AE02.roa (hash: x5SsZ9fPo44FXXa4cVncXx0ome2Tsxvse4Uv1sTSAKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13515 (0x34cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Jun 14 15:15:41 2025 GMT
            Not After : Jun 21 15:15:41 2025 GMT
        Subject: CN=684d921d-0d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:d3:68:bf:81:be:5f:ae:1d:be:d9:4c:17:
                    ac:a6:9f:47:d6:08:0d:11:24:fa:fd:7b:2d:0d:f9:
                    63:f5:dc:91:35:b6:70:74:79:87:4b:4f:c8:8f:e5:
                    6d:ea:11:1d:99:e8:e4:97:85:55:cb:2f:92:25:61:
                    46:c7:36:74:c1:67:09:d8:f8:76:45:17:f5:fb:f7:
                    ae:f7:4c:5f:1b:14:4c:41:4e:5f:2f:a7:67:6f:36:
                    7d:cb:31:aa:60:61:c1:57:a9:cd:26:cb:67:3f:b6:
                    a8:87:eb:5d:42:28:e0:e9:0d:d3:07:2d:7a:24:51:
                    c3:1e:e1:d4:b7:d3:79:07:fc:6b:a3:4d:ed:b9:c1:
                    fc:74:22:ae:80:7a:6f:1e:e4:b7:e4:e0:f6:d1:e6:
                    c0:30:9b:5a:31:38:85:44:79:d9:77:fb:48:d1:1f:
                    b0:b1:bf:fb:88:a7:59:04:13:20:f6:b5:02:54:a5:
                    99:03:ca:1b:e8:8d:80:1a:25:62:af:19:a2:83:8c:
                    be:2f:19:a6:d9:fe:09:db:a8:7e:c8:48:0a:f9:8e:
                    77:16:0e:f1:2c:e0:f1:7d:99:19:17:58:90:ec:8b:
                    31:2c:9c:d0:c1:fa:33:4c:da:af:25:0f:05:d2:92:
                    b2:d4:5a:a5:11:e1:f1:fa:58:fc:05:cc:3b:dd:6f:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:1E:54:83:F6:23:13:72:FC:46:D3:B9:00:FB:D5:0A:E0:84:E4
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:11:12:cd:f0:2d:8b:41:77:e6:54:2b:44:14:d9:b3:e9:f3:
         c6:4d:1e:36:6a:39:9c:6e:de:b6:65:e8:0d:d4:db:0e:38:d0:
         39:4c:f2:48:2c:6d:7e:1e:22:7c:47:de:d7:5b:ca:d3:97:c0:
         60:40:5f:06:82:93:7e:18:90:3c:dc:ab:3d:65:e5:59:c5:f8:
         97:b8:b4:e2:14:02:46:55:89:cc:f8:3d:c1:fb:77:c4:52:b5:
         86:68:f4:7e:11:c5:f1:33:7c:77:87:e5:93:a9:ad:02:83:3f:
         14:47:0d:2c:0b:21:52:95:68:14:18:e0:54:a4:ea:cb:92:53:
         5f:b5:8b:3a:13:d0:00:89:c1:8a:d9:ff:09:67:58:9e:d1:62:
         83:78:8f:79:e3:91:2f:b0:e7:9f:60:e4:56:42:12:9c:d2:18:
         3d:75:f7:f3:a0:73:7b:69:88:27:7d:16:96:fd:35:d4:b5:9f:
         50:b3:6d:ad:9d:3e:05:df:6d:b0:9a:f0:47:5d:6a:68:bc:ae:
         32:79:a9:8e:fc:87:cf:b4:be:82:98:89:63:69:de:5a:71:5d:
         18:35:3b:d3:9d:5f:15:70:5e:50:d6:01:f9:65:c0:bc:8c:0a:
         8b:c4:f3:02:52:b6:d4:3a:de:ce:e4:58:93:99:cc:a2:13:75:
         70:f9:3f:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG
NTVFNjAzNUYwHhcNMjUwNjE0MTUxNTQxWhcNMjUwNjIxMTUxNTQxWjAYMRYwFAYD
VQQDEw02ODRkOTIxZC0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2LTaL+Bvl+uHb7ZTBespp9H1ggNEST6/XstDflj9dyRNbZwdHmHS0/Ij+Vt
6hEdmejkl4VVyy+SJWFGxzZ0wWcJ2Ph2RRf1+/eu90xfGxRMQU5fL6dnbzZ9yzGq
YGHBV6nNJstnP7aoh+tdQijg6Q3TBy16JFHDHuHUt9N5B/xro03tucH8dCKugHpv
HuS35OD20ebAMJtaMTiFRHnZd/tI0R+wsb/7iKdZBBMg9rUCVKWZA8ob6I2AGiVi
rxmig4y+Lxmm2f4J26h+yEgK+Y53Fg7xLODxfZkZF1iQ7IsxLJzQwfozTNqvJQ8F
0pKy1FqlEeHx+lj8Bcw73W9CEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF+HlSD
9iMTcvxG07kA+9UK4ITkMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE
QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk
eTB1d2FGaDVlWm4xWG1BMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSERLN8C2LQXfmVCtEFNmz6fPGTR42ajmcbt62ZegN1NsOONA5TPJI
LG1+HiJ8R97XW8rTl8BgQF8GgpN+GJA83Ks9ZeVZxfiXuLTiFAJGVYnM+D3B+3fE
UrWGaPR+EcXxM3x3h+WTqa0Cgz8URw0sCyFSlWgUGOBUpOrLklNftYs6E9AAicGK
2f8JZ1ie0WKDeI9545EvsOefYORWQhKc0hg9dffzoHN7aYgnfRaW/TXUtZ9Qs22t
nT4F322wmvBHXWpovK4yeamO/IfPtL6CmIljad5acV0YNTvTnV8VcF5Q1gH5ZcC8
jAqLxPMCUrbUOt7O5FiTmcyiE3Vw+T+Z
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:39:15 2025 by rpki-client