Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File:                     Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier:          +jzBSHkLeHgG6dBnJKSxW5wPsai6pThgOqn7sZb/j0M=
Subject key identifier:   F4:2B:D4:CE:22:A3:21:F7:D4:23:33:0C:D3:D6:84:E2:67:45:38:02
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer:       /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number:          30
Signing time:             Fri 25 Apr 2025 06:40:09 +0000
Manifest this update:     Fri 25 Apr 2025 06:40:08 +0000
Manifest next update:     Fri 02 May 2025 06:40:08 +0000
Files and hashes:         1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: jD7H+LgjwzySWK0VUR8U4vBWd+HM2VpSYYGwOE6FoQ8=)
                          2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: LzkuGFZUxj6+WvgGdYx8FBFSBGquSdSJrmGH+Nh7tDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
                          rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
        Validity
            Not Before: Apr 25 06:40:08 2025 GMT
            Not After : May  2 06:40:08 2025 GMT
        Subject: CN=680b2e48-c02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:2d:66:df:07:cf:0a:d2:5e:67:da:e6:d3:
                    02:dc:5b:2a:e0:3f:d9:37:fb:cb:ae:58:a5:55:6b:
                    b8:52:a6:e7:5e:08:5a:6f:55:c2:f3:ea:e7:3f:03:
                    36:e5:d0:28:41:c0:fa:1a:e2:2b:a1:72:98:2a:cc:
                    63:46:7f:bc:64:1b:b8:a2:0c:43:d8:94:89:78:20:
                    c8:c3:43:3f:77:53:01:83:3e:6d:b1:26:b2:d7:96:
                    ed:aa:20:42:34:b9:ad:b1:4a:f2:24:d1:00:d9:ed:
                    c1:59:1c:79:f1:98:17:30:a2:29:67:84:73:c2:ea:
                    90:11:f8:2f:7f:35:fa:08:cd:9f:54:88:df:d1:93:
                    c2:e2:6e:75:e3:90:a0:4d:8e:a7:6e:9f:2c:28:fa:
                    d2:27:4b:ae:6b:b9:45:ca:e1:1a:af:44:7d:af:c3:
                    4f:be:9b:91:46:35:e7:3d:2b:77:65:6b:28:a2:77:
                    0b:56:6e:38:81:e1:cb:ab:39:eb:7a:98:b9:b8:e1:
                    64:c0:3a:9f:a3:d0:50:90:fd:08:92:09:1c:45:b3:
                    05:29:e8:27:55:58:21:37:fc:5f:57:c6:f5:42:27:
                    3d:a8:05:a8:4d:99:ef:7d:39:c6:78:cc:d6:d7:01:
                    eb:db:d0:f7:0d:90:75:89:f9:5b:9b:70:a3:7e:7f:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:D4:CE:22:A3:21:F7:D4:23:33:0C:D3:D6:84:E2:67:45:38:02
            X509v3 Authority Key Identifier:
                keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:a2:de:b4:b2:3a:da:26:ae:59:ad:13:35:6f:99:c0:ff:
         b4:95:86:e9:18:f7:cc:10:a7:f9:ba:53:38:d6:5e:fb:08:97:
         08:7e:06:91:57:7e:f9:91:3c:d8:62:a6:7d:3c:20:7b:9b:44:
         36:9e:ee:22:7a:f9:4a:71:30:ba:50:af:69:db:39:ef:16:7f:
         79:77:12:b8:28:ca:00:a4:e3:91:d2:eb:2f:3a:0e:94:e6:84:
         75:c5:c6:2c:13:e8:c9:c9:34:59:82:37:91:74:39:28:56:37:
         d4:22:b7:68:c9:56:e1:7c:fc:11:77:36:35:50:d9:f0:ab:96:
         6f:dc:97:3d:7f:ab:50:cf:67:9a:f1:bc:83:28:af:71:7b:7a:
         39:8f:81:6b:9e:36:e4:ed:64:8a:b9:fa:63:88:0c:f6:be:b1:
         8d:35:d9:52:57:75:e8:c6:54:f8:89:76:05:a9:2b:93:2d:1d:
         4f:b7:33:8a:44:02:0b:f9:31:ff:19:6d:52:59:50:2e:8a:98:
         24:08:43:89:4f:14:1c:0a:a7:d9:52:88:40:e7:de:cf:bc:eb:
         11:53:88:6c:4f:96:84:ed:9f:7f:20:90:bc:8e:9f:78:bc:fe:
         a1:fe:24:c6:29:4a:35:0a:e1:8d:8c:13:6b:df:7f:cf:16:e5:
         38:1a:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:23 2025 by rpki-client