Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
File:                     JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json)
Hash identifier:          4TQPR8rMX3/AMc5Qh76IzW7fnf8FU3cZbx4R+a8rzro=
Subject key identifier:   52:F4:84:2A:06:AD:F7:75:4F:19:72:99:60:03:CA:98:BC:71:80:CF
Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
Certificate issuer:       /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
Manifest number:          031E
Signing time:             Fri 25 Apr 2025 00:56:50 +0000
Manifest this update:     Fri 25 Apr 2025 00:56:49 +0000
Manifest next update:     Fri 02 May 2025 00:56:49 +0000
Files and hashes:         1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: sm8Bd1GPwhsjRgK3C7nGIimPma+2J7Bx/omt23oboLw=)
                          2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=)
                          3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
                          rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
        Validity
            Not Before: Apr 25 00:56:49 2025 GMT
            Not After : May  2 00:56:49 2025 GMT
        Subject: CN=680addd1-0bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:db:8c:22:35:74:75:a2:2c:29:18:f7:f8:
                    3a:d3:a3:a7:37:43:e3:da:01:e8:b5:24:00:f5:ea:
                    72:4e:6d:15:03:f0:d0:fc:9f:b0:72:80:94:e1:21:
                    d7:53:e8:cc:e0:f3:33:8e:d9:c1:4e:00:e3:8c:ee:
                    04:7a:8e:0b:e3:83:f6:6b:9e:ab:5d:b2:82:15:3d:
                    f8:8f:ff:ab:a5:bb:a7:e4:f5:d6:fb:f6:a4:98:eb:
                    fc:da:4c:ac:b8:e0:3d:86:6c:ba:41:32:d3:6a:5e:
                    3d:60:50:2e:9e:97:6f:b6:03:29:33:69:d5:3e:63:
                    46:20:02:49:f5:6e:ff:7e:f4:29:ff:28:a5:6c:a7:
                    67:21:88:96:91:ab:0f:b6:23:12:ec:50:6a:9b:09:
                    a5:4e:d4:76:f8:d8:3d:6e:6d:52:e2:77:95:da:60:
                    f8:e5:40:f8:bd:5c:ce:b1:55:ac:cb:72:65:b1:f0:
                    39:ea:f3:ec:60:80:53:7f:8b:f8:88:b4:12:5a:c4:
                    2b:01:59:ed:ab:b9:28:3f:4c:40:0a:d7:ca:e1:af:
                    8a:d0:70:06:00:e2:6a:08:3a:a9:91:c9:f5:3e:78:
                    48:71:a1:90:80:08:18:a8:b6:c4:57:f6:83:bf:48:
                    6d:8c:88:d1:d4:b2:3d:76:e8:62:ce:25:9e:0b:a9:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:84:2A:06:AD:F7:75:4F:19:72:99:60:03:CA:98:BC:71:80:CF
            X509v3 Authority Key Identifier:
                keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:e2:73:06:0a:ce:8a:88:56:d1:17:ab:3d:33:44:73:67:
         0c:9c:64:11:66:a5:17:71:26:a8:3d:aa:ee:3b:18:cd:ac:ab:
         1f:1b:48:04:7c:79:c0:f5:f2:9a:f7:37:ce:b5:7f:f3:fe:f5:
         aa:aa:67:89:d2:b5:dc:9f:ec:b7:e5:80:0a:e0:c7:e3:fa:6d:
         f8:7e:0d:3d:df:1e:c6:74:de:f7:7c:0b:e0:89:ee:dd:37:b0:
         f4:c9:3f:ed:a8:e2:70:dc:3d:68:5c:79:04:dd:2d:ee:8b:ff:
         aa:40:0f:1c:f6:67:41:0f:1f:d3:70:dd:59:fa:1e:a2:87:55:
         60:d7:ac:54:6b:d8:c5:77:ee:f3:e5:00:ec:43:99:04:d4:91:
         cf:1e:90:c1:09:dd:ba:7f:33:b9:8b:fe:92:08:02:d3:a1:cf:
         46:5e:ab:fa:bf:13:2d:d8:d5:74:9e:37:bc:7e:53:bf:2c:fa:
         75:06:26:30:52:41:96:cc:47:4d:2f:b7:1e:37:b6:1b:b0:7b:
         39:62:da:5d:6a:c4:2d:c2:e0:52:35:05:58:73:0d:3e:9f:12:
         a4:dd:79:95:00:db:cc:54:7e:e9:91:44:3a:bc:f8:28:ab:c3:
         ee:6f:c0:22:fa:0b:cf:d1:bd:7e:65:d6:35:ad:40:25:38:0a:
         3f:c5:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:13 2025 by rpki-client