Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          q+tH387r+F9qtdCLLyTeeAiTf23b8oLGnXgBcmSr9tw=
Subject key identifier:   7F:9E:A9:E7:92:88:A7:12:F7:61:83:68:9E:EF:A3:6B:2C:E0:47:F9
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       197F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          194F
Signing time:             Sat 14 Jun 2025 16:23:12 +0000
Manifest this update:     Sat 14 Jun 2025 16:23:12 +0000
Manifest next update:     Sat 21 Jun 2025 16:23:12 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: FbtRtrLvkk4I9q6PQ0XZk1Go0xEGKmnGCwVNHkSLufI=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6527 (0x197f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Jun 14 16:23:12 2025 GMT
            Not After : Jun 21 16:23:12 2025 GMT
        Subject: CN=684da1f0-9dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:76:45:12:2e:73:7b:af:fd:84:ef:65:d5:
                    c1:88:d6:7e:ee:7d:92:dd:32:0d:5a:48:fa:46:7c:
                    7b:46:f3:f5:cc:1f:17:eb:25:bc:b9:fc:79:d1:53:
                    1a:be:e7:8a:a4:96:de:3f:16:45:00:70:52:ab:8b:
                    12:d6:84:ff:e2:f2:30:a7:53:e3:51:b7:00:51:5b:
                    ef:c6:82:a5:df:27:1a:4d:b4:e0:6f:3e:64:cd:c5:
                    3b:46:23:8d:bb:3d:67:fc:ef:0a:c8:07:69:74:15:
                    e1:af:52:4b:27:fb:a1:ce:c5:91:e3:60:9b:94:7a:
                    10:1d:bc:bc:5c:06:ca:95:43:d1:7d:4b:2a:cd:96:
                    1e:f2:4e:8d:ef:46:4d:6f:ea:2c:73:64:7d:66:ea:
                    17:61:1a:58:7a:df:04:7d:da:b7:b4:97:78:52:7e:
                    99:28:fe:66:c2:3c:29:4d:c2:c0:92:c3:b9:09:cc:
                    5a:78:a0:02:af:d1:75:b7:5c:8d:2b:f4:ec:34:d1:
                    91:2b:71:2a:68:f4:c6:82:45:8f:0c:da:14:54:86:
                    c4:b1:8f:e8:9c:76:c4:7a:d7:42:da:63:32:63:7f:
                    81:a6:a6:42:9d:9d:9c:85:43:18:ca:46:60:ff:ca:
                    7a:7d:0a:a7:a0:1b:c1:40:95:09:a3:50:2e:7c:49:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:A9:E7:92:88:A7:12:F7:61:83:68:9E:EF:A3:6B:2C:E0:47:F9
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:1b:e0:35:4a:2e:47:82:ec:59:a0:70:c1:78:e1:d0:52:
         09:19:11:78:62:d7:7b:73:52:a9:75:e5:60:fe:b3:42:15:66:
         44:ba:4a:94:29:7f:b2:6d:df:6e:95:db:98:c7:7a:9c:e9:11:
         e8:56:59:04:a1:4d:64:44:51:94:95:10:9b:ef:1a:d0:c1:84:
         4f:25:0f:13:95:e6:63:21:a5:68:aa:dc:b6:23:d0:0f:f8:ff:
         b5:9b:2f:67:2c:22:21:c6:97:75:17:92:e8:21:2f:01:b3:11:
         6a:b1:29:74:ea:13:a1:53:7f:d8:e6:fd:c5:7b:35:c4:1b:94:
         f6:c6:92:31:b1:58:99:46:c7:d1:83:65:d9:42:0b:6b:f1:6c:
         07:29:71:69:35:e1:2c:75:0d:59:d7:30:33:48:25:f3:5a:92:
         ae:50:f1:7a:59:5f:bb:93:d8:93:89:06:bc:88:3d:b4:9d:18:
         51:3a:92:da:a0:ed:5f:34:9b:be:f9:b7:b5:74:4e:2f:96:ea:
         e5:9e:11:fd:a1:52:74:2c:81:34:e1:4f:62:9f:40:0b:de:3e:
         2f:45:e3:ec:68:2f:83:01:7e:73:e9:b2:ab:ab:75:53:36:ea:
         2c:09:68:e6:18:09:08:9b:7e:ef:2f:4c:d2:4b:0f:67:7b:8d:
         53:21:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:49:03 2025 by rpki-client