Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File:                     J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier:          pFwS/2ZMvTkp9w0x027Ha+LMZ/EF5RXd1c3quJnnR7w=
Subject key identifier:   69:34:58:49:9B:E8:62:45:9C:4F:DC:0F:9C:88:A2:DC:C0:AC:8E:5A
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       033C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number:          0335
Signing time:             Fri 13 Jun 2025 00:37:15 +0000
Manifest this update:     Fri 13 Jun 2025 00:37:14 +0000
Manifest next update:     Fri 20 Jun 2025 00:37:14 +0000
Files and hashes:         1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: TUQ891CyMwtJmrOeeaREa9DheFswyRr3nZuJy3Iirhs=)
                          2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: 7tRXe0RCYJtYetkPzXHwKI+UWg4HugV8cA+U6bVnlYk=)
                          3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: Yllv7GduXNWOYIX1rMtXNPRv/0417UqdoQWVHJFRoH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Jun 13 00:37:14 2025 GMT
            Not After : Jun 20 00:37:14 2025 GMT
        Subject: CN=684b72bb-4790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:b8:3e:90:10:32:39:77:9a:7c:a0:39:6f:
                    e0:6c:bc:bb:66:d9:71:02:a6:75:b7:8c:9e:65:94:
                    9a:3b:10:e5:6d:bd:80:75:aa:a1:dc:99:a1:77:e0:
                    a0:84:3b:ee:75:4d:27:82:82:94:55:8f:7e:e0:dc:
                    ca:c5:ff:78:fa:b7:9e:8d:44:f9:49:3a:2f:27:97:
                    3c:99:37:17:6c:03:a4:04:86:c6:54:bb:cf:6d:7a:
                    53:46:3b:67:21:a1:de:cc:f7:fa:94:bd:84:dd:27:
                    f8:90:f4:68:54:97:58:93:44:c2:60:46:d0:55:4d:
                    d8:d7:81:9f:b2:b8:11:45:55:69:1c:d1:87:35:3a:
                    68:ae:0e:ea:57:18:5a:2f:c5:88:cc:f8:79:24:d4:
                    67:4e:0a:e8:1e:e5:38:cd:c2:05:fd:76:16:80:d7:
                    7a:fa:34:bd:8b:d8:4b:f6:c4:07:af:c4:07:fa:16:
                    fd:d8:72:f1:a1:2b:73:85:52:ab:81:eb:0b:6f:48:
                    b1:39:46:39:81:b5:b1:ed:dc:6f:97:6b:29:95:cf:
                    6c:9c:b9:0d:f1:d3:4e:37:de:b8:0b:ae:b2:3c:d3:
                    22:1c:97:61:38:c7:0b:9b:9f:00:f8:59:50:85:6e:
                    c5:6b:99:a7:46:b3:76:57:b8:ec:bf:b6:d8:53:63:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:58:49:9B:E8:62:45:9C:4F:DC:0F:9C:88:A2:DC:C0:AC:8E:5A
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:5b:f2:ae:28:3c:92:87:4d:16:41:d0:ae:93:c5:81:4a:
         42:eb:f9:d0:d1:9e:40:af:a9:49:5a:a1:db:67:7e:db:c3:19:
         d1:60:4f:48:0e:e2:0c:6c:e5:4e:4d:fa:46:e1:6a:50:42:e0:
         c5:8d:fe:05:8d:1f:b8:05:1a:9a:b8:e2:e0:3d:dd:f9:3d:4d:
         5d:a9:04:53:fe:4c:da:93:d1:a9:c1:7a:dc:9c:37:94:38:ff:
         1e:94:3f:f8:0b:94:5b:04:cb:95:92:5a:ae:1c:62:9d:02:e8:
         1c:84:dd:c7:49:66:71:db:bd:dd:a1:57:95:38:0f:d0:fe:22:
         3c:5f:bf:5a:00:9c:a7:af:c8:d0:a0:cc:03:ac:eb:8a:8f:20:
         a0:a4:c0:4f:12:ff:ee:33:5c:ad:3d:43:1d:3d:52:17:b4:f4:
         36:d0:86:24:0e:cb:5b:1b:b2:b4:19:9d:ea:6b:21:21:7a:6b:
         2d:35:e6:10:c8:3a:56:af:ea:38:71:16:5b:f0:54:7c:b9:88:
         ce:b0:20:f9:c5:e8:1c:4a:47:6b:de:47:5c:fa:48:c7:a1:d9:
         43:3c:94:ee:bd:9d:e6:cb:90:b3:1d:16:14:40:45:8e:55:dd:
         90:d7:c4:10:5b:fa:57:c9:bb:02:2d:e0:f6:c3:9b:71:d1:12:
         df:3b:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:50:29 2025 by rpki-client