Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
File:                     J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json)
Hash identifier:          YFmQXVW9Dge9DGUwtGINh+DvawgP/O2rxTU5pGYTrGI=
Subject key identifier:   F5:C4:59:10:62:F7:B8:47:B8:7E:66:1C:50:B5:F6:32:FE:50:F9:4E
Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73
Certificate issuer:       /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
Manifest number:          052A
Signing time:             Sat 09 Aug 2025 00:00:49 +0000
Manifest this update:     Sat 09 Aug 2025 00:00:48 +0000
Manifest next update:     Sat 16 Aug 2025 00:00:48 +0000
Files and hashes:         1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: 7RdFxCVFlQSdeCO8iOiSGUgteCiDAhzS8FFaCttfVHE=)
                          2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl
                          rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
        Validity
            Not Before: Aug  9 00:00:48 2025 GMT
            Not After : Aug 16 00:00:48 2025 GMT
        Subject: CN=68968fb0-3f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:93:67:4f:c9:3b:b7:3c:62:19:9d:ad:7c:
                    cc:c8:71:b6:31:35:27:67:48:58:ff:e0:03:78:94:
                    a0:b1:c7:c7:d0:0a:36:74:9d:ce:7f:bc:74:a3:99:
                    99:7a:6a:14:4a:2c:14:33:d5:c5:2d:07:13:5b:14:
                    5f:fb:50:2a:97:58:36:89:e7:42:59:35:88:4b:49:
                    67:eb:f3:57:71:ac:38:ab:bc:8a:85:a4:79:0f:a3:
                    39:1c:dd:7f:0d:92:95:dd:e2:d6:e7:eb:8f:88:12:
                    70:2f:43:c5:bf:2a:3c:d3:75:5d:6d:e1:16:14:ee:
                    b7:89:49:fa:46:51:69:9d:d8:27:0f:d2:b7:0c:fe:
                    e8:f0:fc:50:81:c0:b9:74:b1:19:4a:14:9e:56:18:
                    17:e3:51:67:fa:f1:58:de:2a:03:16:0d:e4:56:b3:
                    5d:69:cf:8c:e9:ea:76:f8:f4:d9:c9:8a:9d:0d:09:
                    df:bf:b7:e2:47:94:2b:0f:65:ac:09:04:4e:13:d3:
                    8c:62:05:87:d3:ed:ec:03:4a:6f:96:16:94:2c:73:
                    21:bf:89:0c:ab:bd:f0:42:6b:2e:ea:cc:eb:56:81:
                    38:bd:b0:87:eb:9d:7c:d8:5e:55:17:d5:b7:b6:e1:
                    8e:0e:06:e0:5c:0c:05:ec:d5:5e:47:3e:1c:fc:01:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C4:59:10:62:F7:B8:47:B8:7E:66:1C:50:B5:F6:32:FE:50:F9:4E
            X509v3 Authority Key Identifier:
                keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:4c:cf:2f:29:3c:e4:58:a3:2c:8c:8e:9c:4e:3f:fa:c5:
         64:dc:88:a9:f2:99:e8:7d:aa:55:32:e6:98:d2:4c:f3:ca:2d:
         bf:33:d1:a0:24:b1:73:d9:64:90:77:37:fc:62:46:b2:04:af:
         b3:9e:bd:b6:4a:0d:f3:2c:23:4f:94:3f:0b:b8:87:fb:17:41:
         e2:b6:a5:5b:d3:f3:c1:e2:5f:7e:6a:22:51:87:92:ab:f6:ff:
         c0:e5:9e:ed:21:49:8a:bb:ac:3c:fa:d2:ae:5e:9f:08:0e:52:
         05:80:ed:8e:5d:94:da:38:a3:0b:13:71:33:c6:d0:f6:a4:3b:
         1e:5a:4d:42:b6:a0:b5:02:44:a7:1a:47:be:9c:cb:9d:65:35:
         28:4e:92:d9:ee:35:1e:f4:09:78:35:11:96:0b:6c:d1:50:94:
         9b:3a:e2:48:27:5a:ed:17:2a:b0:b2:5b:cf:b6:25:a6:c6:54:
         1c:67:7a:f3:61:ad:d2:55:dc:6d:bb:94:5b:00:d1:df:04:25:
         ef:b8:f1:5f:02:2f:d0:f4:20:14:70:ab:c0:64:51:38:cd:a4:
         cd:81:47:17:0c:08:11:55:ba:28:a3:23:c5:d8:df:21:49:3b:
         17:cf:17:af:60:33:5c:3a:15:1c:54:91:49:be:60:e7:74:31:
         fd:31:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:52 2025 by rpki-client