Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          XRtLQ5EdQtr2XEAK47PPhIoTvclpfjRcREcnsDJPsgI=
Subject key identifier:   F5:F7:79:2B:55:C8:5B:D2:9D:B5:1B:1F:95:89:FF:62:26:86:F1:8A
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          69
Signing time:             Thu 19 Jun 2025 06:21:16 +0000
Manifest this update:     Thu 19 Jun 2025 06:21:15 +0000
Manifest next update:     Thu 26 Jun 2025 06:21:15 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: hTqdJsAmjux7pD1hSDsyQ+BEppd9avH/rpPtLWAnfnA=)
                          2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=)
                          3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=)
                          4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 06:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Jun 19 06:21:15 2025 GMT
            Not After : Jun 26 06:21:15 2025 GMT
        Subject: CN=6853ac5b-5ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:b6:32:a5:73:35:90:95:c0:df:9f:32:8b:
                    a4:b1:41:53:e8:b6:5d:7a:72:3b:ca:f9:02:2f:0e:
                    60:fe:a5:8d:a4:67:63:4e:b8:a5:d9:a4:9a:94:13:
                    7f:6a:2f:88:cd:2f:f2:65:6d:31:5c:aa:36:fd:8e:
                    ea:87:0c:95:62:2b:2c:be:59:ee:16:0e:dd:f6:e9:
                    49:99:0f:67:a9:e7:91:0a:ad:0f:85:52:88:8c:f7:
                    85:86:68:44:4e:64:27:9e:9b:f3:7c:3f:d1:22:6e:
                    08:2d:c0:56:90:f7:d7:0f:b4:a8:e5:ba:a7:b7:a8:
                    dd:fb:2f:05:b5:8d:e5:c4:18:9a:fc:3a:0c:61:f8:
                    eb:88:56:26:9e:ac:98:fa:64:a1:00:6b:06:f3:93:
                    21:69:f5:0a:dc:76:32:4a:9f:b1:f5:f0:12:35:e6:
                    37:b1:64:12:d3:ff:5c:78:6d:e5:9c:69:d9:32:94:
                    98:11:ca:6b:02:97:e7:47:90:59:5f:fb:ea:fe:36:
                    4d:bb:b6:c9:b9:25:20:17:22:55:9b:64:b2:5d:59:
                    0e:a2:20:3d:d9:a9:3e:31:56:f2:25:c7:06:cb:71:
                    39:b3:24:32:b6:c7:b2:e7:81:a2:a9:15:1d:86:77:
                    66:82:ee:5e:f1:c6:42:d9:5e:4a:8c:c7:ec:9d:45:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:79:2B:55:C8:5B:D2:9D:B5:1B:1F:95:89:FF:62:26:86:F1:8A
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:48:30:39:6a:5b:30:c5:8d:53:03:1f:40:86:85:2a:9c:17:
         0d:d6:38:0b:e9:d6:62:02:4c:73:c7:f0:ea:4b:62:59:5c:7f:
         19:fd:a4:0d:b3:b8:53:ba:f0:ba:c2:dc:d2:36:f4:da:81:d2:
         3e:23:aa:01:ce:9c:93:f4:84:34:4e:73:f5:05:fe:12:fb:ce:
         f0:2b:08:43:8e:f3:c0:42:73:93:a1:e8:72:e5:a0:bf:cc:9e:
         be:31:2c:e7:0a:09:3e:ed:b3:2d:4f:07:d7:06:dc:54:d1:80:
         6d:6a:8b:e0:04:ab:93:52:36:be:f7:9f:67:29:2a:b0:04:93:
         6a:61:64:84:60:a2:cd:6d:0c:24:c9:be:c5:54:dc:a9:bd:eb:
         97:60:07:b0:5b:2f:f1:37:c7:06:8e:6c:58:d2:59:91:d6:91:
         c0:26:56:85:4c:d1:3a:8c:9d:f8:a8:68:d5:fb:a7:7a:9c:40:
         25:29:4d:b2:01:ea:64:f5:97:51:46:96:4f:46:ac:1f:ca:b3:
         5a:da:68:b3:fa:c1:a7:00:4f:27:20:85:e3:c3:e4:03:47:cb:
         2b:87:84:d4:d3:93:56:ed:73:03:09:ad:48:b9:bd:a8:d1:f8:
         cb:54:f5:fa:d1:60:f8:ab:1b:05:a4:bf:3b:43:c0:bc:2e:6e:
         5f:bd:98:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QjEyQTExMC8GA1UEBRMoMjcyMkM1QUJCRUU2M0I3NkI5REE5NjZDNzhENzNBNjY1
N0QyNDRFQjAeFw0yNTA2MTkwNjIxMTVaFw0yNTA2MjYwNjIxMTVaMBgxFjAUBgNV
BAMTDTY4NTNhYzViLTVkZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC56rYypXM1kJXA358yi6SxQVPotl16cjvK+QIvDmD+pY2kZ2NOuKXZpJqUE39q
L4jNL/JlbTFcqjb9juqHDJViKyy+We4WDt326UmZD2ep55EKrQ+FUoiM94WGaERO
ZCeem/N8P9EibggtwFaQ99cPtKjluqe3qN37LwW1jeXEGJr8Ogxh+OuIViaerJj6
ZKEAawbzkyFp9QrcdjJKn7H18BI15jexZBLT/1x4beWcadkylJgRymsCl+dHkFlf
++r+Nk27tsm5JSAXIlWbZLJdWQ6iID3ZqT4xVvIlxwbLcTmzJDK2x7LngaKpFR2G
d2aC7l7xxkLZXkqMx+ydRQ5nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9fd5K1XI
W9KdtRsflYn/YiaG8YowHwYDVR0jBBgwFoAUJyLFq77mO3a52pZseNc6ZlfSROsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0IxRDRBNTlDQUUz
RDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JP
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSnlMRnE3N21PM2E1MnBac2VOYzZabGZTUk9zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC
MTJBL0IxRDRBNTlDQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdtTzNh
NTJwWnNlTmM2WmxmU1JPcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAM9IMDlqWzDFjVMDH0CGhSqcFw3WOAvp1mICTHPH8OpLYllcfxn9pA2z
uFO68LrC3NI29NqB0j4jqgHOnJP0hDROc/UF/hL7zvArCEOO88BCc5Oh6HLloL/M
nr4xLOcKCT7tsy1PB9cG3FTRgG1qi+AEq5NSNr73n2cpKrAEk2phZIRgos1tDCTJ
vsVU3Km965dgB7BbL/E3xwaObFjSWZHWkcAmVoVM0TqMnfioaNX7p3qcQCUpTbIB
6mT1l1FGlk9GrB/Ks1raaLP6wacATycghePD5ANHyyuHhNTTk1btcwMJrUi5vajR
+MtU9frRYPirGwWkvztDwLwubl+9mMs=
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:20:43 2025 by rpki-client