Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File:                     JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier:          JSpQDob7PWDb5HQYYU505/y2gq9GXo9FnV9KqEtFzPE=
Subject key identifier:   76:0E:F4:5A:64:17:EB:66:42:B0:F8:DF:D3:2C:46:1B:1E:B4:2A:77
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number:          0126
Signing time:             Thu 07 Aug 2025 05:10:35 +0000
Manifest this update:     Thu 07 Aug 2025 05:10:34 +0000
Manifest next update:     Thu 14 Aug 2025 05:10:34 +0000
Files and hashes:         1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: Yg0reYXrokoEjiXjCpkd5PVHfFgf8+6zrpcAaJz7RYI=)
                          2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Aug  7 05:10:34 2025 GMT
            Not After : Aug 14 05:10:34 2025 GMT
        Subject: CN=6894354a-f446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:47:1c:96:9c:b0:e4:fd:d7:42:c7:ba:5b:69:
                    90:3d:98:6f:8f:62:91:47:ba:39:7b:51:62:0c:ff:
                    77:71:62:99:68:e2:ac:5b:f4:14:de:27:22:d3:77:
                    a5:fe:6d:61:b8:f0:80:da:6e:b1:24:7d:9a:26:b6:
                    72:5e:9a:38:04:a9:8b:4b:fb:b4:d1:71:3e:ff:54:
                    ec:25:28:17:74:ad:b7:89:66:c8:13:9d:4c:ba:5b:
                    ce:ba:b6:bc:31:3b:9c:6d:55:7b:64:f3:bd:6b:b6:
                    c4:83:3f:11:df:11:6d:c5:7f:33:e1:92:34:74:81:
                    53:f6:b9:1d:52:ff:c0:c8:54:5a:18:e6:03:cd:78:
                    2d:da:60:1e:b2:2f:e8:f4:d7:18:55:cf:c3:97:9a:
                    ab:82:da:42:9f:53:f2:b2:7b:85:30:fa:31:bf:8b:
                    0a:7d:51:e7:d0:9a:29:6b:04:69:e6:8f:a2:64:8e:
                    0a:bd:7e:47:a7:15:4d:82:cb:70:1d:3e:76:28:32:
                    9a:6b:b0:63:6f:29:87:68:bc:c3:d1:29:da:ce:0b:
                    b1:75:d2:00:e9:2a:2b:22:9d:c3:41:d1:36:86:79:
                    4d:c1:09:1d:86:e1:c5:a5:22:b2:aa:d8:bc:bb:ec:
                    2f:87:a0:71:d7:00:bf:5f:c5:d8:52:85:42:9f:1a:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0E:F4:5A:64:17:EB:66:42:B0:F8:DF:D3:2C:46:1B:1E:B4:2A:77
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:72:51:a8:c0:c9:a0:1d:90:06:bb:10:d4:52:e1:8c:f4:
         e7:d2:e3:6f:c2:01:ae:99:84:c6:45:7d:bd:33:ec:e4:e7:23:
         3b:a7:bc:72:28:82:65:df:17:34:f2:88:0f:f4:fe:c3:6b:2f:
         22:c5:42:43:0b:c2:e3:96:db:8d:83:f1:2b:20:68:30:f6:b0:
         ec:94:82:4b:c8:98:57:3e:c7:b0:73:95:00:46:66:44:0c:d0:
         f2:d8:ea:37:4d:4a:a8:4d:d4:6c:3d:4a:74:b8:c8:2f:fc:81:
         8f:1a:ae:21:60:e8:df:92:b0:21:ce:a9:f5:30:56:65:b6:1e:
         74:a0:3f:8e:f5:95:9b:08:49:34:84:3d:28:1c:84:94:ab:18:
         8f:84:f4:84:54:fd:8b:a5:64:7a:75:98:60:7a:b1:f3:a6:76:
         a6:71:0b:f3:3f:f4:62:02:e5:4b:09:8a:21:03:d0:e2:13:2f:
         73:9f:d1:1d:bc:fe:3c:a0:49:c2:2e:15:48:e8:44:aa:d0:20:
         a4:96:f3:be:9d:82:63:0b:f8:b0:aa:47:7c:8c:ec:74:60:9d:
         b6:43:38:e2:11:88:06:50:c5:66:09:8b:b5:f3:56:34:dc:a4:
         b9:92:52:e7:ec:ed:b8:20:b3:f3:ad:52:95:97:c9:02:cf:45:
         a4:e1:11:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5
NjM3MEZCOEIwHhcNMjUwODA3MDUxMDM0WhcNMjUwODE0MDUxMDM0WjAYMRYwFAYD
VQQDEw02ODk0MzU0YS1mNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+Ecclpyw5P3XQse6W2mQPZhvj2KRR7o5e1FiDP93cWKZaOKsW/QU3ici03el
/m1huPCA2m6xJH2aJrZyXpo4BKmLS/u00XE+/1TsJSgXdK23iWbIE51MulvOura8
MTucbVV7ZPO9a7bEgz8R3xFtxX8z4ZI0dIFT9rkdUv/AyFRaGOYDzXgt2mAesi/o
9NcYVc/Dl5qrgtpCn1PysnuFMPoxv4sKfVHn0JopawRp5o+iZI4KvX5HpxVNgstw
HT52KDKaa7BjbymHaLzD0SnazguxddIA6SorIp3DQdE2hnlNwQkdhuHFpSKyqti8
u+wvh6Bx1wC/X8XYUoVCnxpQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYO9Fpk
F+tmQrD439MsRhsetCp3MB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1
MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3
OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6JXJRqMDJoB2QBrsQ1FLhjPTn0uNvwgGumYTGRX29M+zk5yM7p7xy
KIJl3xc08ogP9P7Day8ixUJDC8LjltuNg/ErIGgw9rDslIJLyJhXPsewc5UARmZE
DNDy2Oo3TUqoTdRsPUp0uMgv/IGPGq4hYOjfkrAhzqn1MFZlth50oD+O9ZWbCEk0
hD0oHISUqxiPhPSEVP2LpWR6dZhgerHzpnamcQvzP/RiAuVLCYohA9DiEy9zn9Ed
vP48oEnCLhVI6ESq0CCklvO+nYJjC/iwqkd8jOx0YJ22QzjiEYgGUMVmCYu181Y0
3KS5klLn7O24ILPzrVKVl8kCz0Wk4RGs
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:21 2025 by rpki-client