Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          MLKfqQ69GKAYD7FuoI9qwKHvaV0+pvfKGlRQrxGI4nY=
Subject key identifier:   76:91:FD:EC:F2:16:0E:3B:28:B8:5B:DA:8D:54:A5:4E:BF:79:28:C3
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       16F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          16D2
Signing time:             Sun 10 Aug 2025 16:39:07 +0000
Manifest this update:     Sun 10 Aug 2025 16:39:06 +0000
Manifest next update:     Sun 17 Aug 2025 16:39:06 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: 9M0ay1swn2I9pwh84OWLBKLa+vBSJh/OtQeyD1wWgfk=)
                          2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY=)
                          3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: x5fSlx3nNKz6ifMgnnFr+DL48Yd9QT9h8VtP+zrrY4c=)
                          4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5877 (0x16f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Aug 10 16:39:06 2025 GMT
            Not After : Aug 17 16:39:06 2025 GMT
        Subject: CN=6898cb2a-75ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:36:95:79:c8:b4:95:16:54:c0:61:8d:f9:
                    2e:14:00:2f:34:99:7e:17:13:ea:1c:bc:d4:04:b3:
                    ce:28:90:8f:01:fe:2f:50:44:76:5a:70:61:ff:cf:
                    8d:ec:ee:e9:ab:70:e9:7c:96:a7:98:ea:53:c7:47:
                    07:92:f4:05:77:1f:eb:e2:b5:8a:46:b8:8c:0e:66:
                    71:b7:ba:c2:70:02:a7:b8:3d:84:11:65:9e:29:9c:
                    2d:ef:a7:58:db:2a:79:72:5d:c8:4c:33:68:5e:23:
                    74:9b:4f:ae:b1:15:9b:68:32:83:11:77:0e:1c:0e:
                    2f:df:32:45:e9:58:1a:7d:06:e5:34:bb:98:39:d2:
                    bc:ab:b5:89:4e:92:40:de:7f:8d:df:5c:18:15:54:
                    f1:ac:83:45:01:d3:ef:98:d2:3d:32:66:ae:54:09:
                    60:ec:cc:be:15:83:8c:5e:74:4a:8f:3b:78:d1:21:
                    6b:59:18:5b:07:83:06:9d:ad:10:fb:1a:1c:60:47:
                    88:22:71:0c:1e:ce:6d:7b:54:0f:92:91:e6:a8:24:
                    c0:84:2a:11:e9:66:0e:77:b1:ab:a1:bb:98:84:00:
                    ad:bc:8e:e8:f4:fd:54:0e:bb:2a:fe:f5:6f:89:df:
                    45:ef:81:ee:30:aa:07:1b:1e:26:b2:15:0c:76:7c:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:91:FD:EC:F2:16:0E:3B:28:B8:5B:DA:8D:54:A5:4E:BF:79:28:C3
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:90:e3:d8:7d:7e:07:c2:83:d4:9b:2c:63:ac:94:42:35:8e:
         5c:78:72:cb:7a:c6:fd:0f:56:99:4c:c8:95:e0:6e:00:e7:1b:
         4c:42:12:32:47:83:93:d4:bc:7e:77:ff:16:22:a3:e2:c2:57:
         03:89:43:ed:15:52:43:9c:61:07:9d:bf:66:bd:b4:3f:ab:97:
         e4:62:3d:5c:f5:a2:83:4e:6a:58:d3:2b:ee:fa:84:62:8a:ce:
         50:31:80:96:d4:e2:4b:26:b9:bc:20:d0:d1:0e:0c:61:5e:c2:
         dd:b4:3f:68:6a:b7:f5:66:c1:cd:8e:26:d5:b1:9c:97:59:be:
         f9:7d:40:ff:48:0a:60:ad:79:86:00:36:cf:6e:3c:fc:a3:11:
         d0:0a:f3:0f:b4:70:fe:1f:ba:2f:d5:20:85:32:58:0c:c6:25:
         d7:41:73:ab:b0:c3:89:36:94:4e:5d:7d:42:17:d9:69:0e:ad:
         87:00:52:5f:7f:bd:92:f7:07:7e:0b:c7:73:49:48:3e:e2:f2:
         41:d7:37:a6:c4:22:5b:73:66:40:6b:e6:79:fc:f5:b1:bf:fc:
         fc:5c:55:9c:14:1a:52:c5:24:ef:21:00:6a:63:d0:2a:f7:f3:
         3f:f0:6d:fb:6f:db:91:52:68:a7:e5:5e:52:97:33:cb:6c:b6:
         75:b4:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:58 2025 by rpki-client