Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          PkDZJO/lptT03/YgtShERrxQoHhsR/DncIvMAgQzOXY=
Subject key identifier:   74:09:49:B2:42:CC:C9:1B:23:6D:29:B6:D6:06:73:04:24:FE:63:01
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       08B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          08AD
Signing time:             Fri 08 Aug 2025 20:51:48 +0000
Manifest this update:     Fri 08 Aug 2025 20:51:48 +0000
Manifest next update:     Fri 15 Aug 2025 20:51:48 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: kOGVgAUKfnNYnOyNzYbzDdhot0STJJ8hlsXM89rZC5I=)
                          2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Aug  8 20:51:48 2025 GMT
            Not After : Aug 15 20:51:48 2025 GMT
        Subject: CN=68966364-3559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:24:0a:98:9d:7c:3e:7c:80:b6:dd:fb:ec:65:
                    25:fe:74:ca:4c:62:cd:91:e3:e8:a4:97:84:23:0e:
                    7e:03:f4:fa:3e:34:31:82:6d:a6:88:32:ab:fa:12:
                    80:40:cc:46:d9:3c:c7:83:4f:45:a8:41:3b:9e:c6:
                    fa:41:29:3f:c1:c8:d8:8c:1c:7e:ee:0d:36:87:2c:
                    be:cd:23:a2:4e:9f:e4:f1:df:a5:da:ea:1c:13:4f:
                    db:ea:d6:83:f7:2d:98:cc:c3:cf:0d:8d:12:24:c1:
                    11:bb:27:1b:68:9c:ba:91:78:93:06:14:b8:56:9b:
                    41:e0:b8:86:e7:7f:09:10:9e:73:8d:04:4f:4d:a9:
                    83:cb:74:d3:85:e7:7b:93:8e:48:f3:5b:01:77:17:
                    7f:79:86:dc:d3:d7:d9:0c:bb:44:2e:c3:dc:ad:7d:
                    3c:9e:b8:0e:5c:4e:d3:d3:0b:db:b4:ee:e2:a0:3a:
                    2e:7e:bf:b7:ae:e3:c8:a0:87:1a:dd:68:7f:04:26:
                    83:80:d5:a5:ed:e1:31:cc:7a:98:96:bc:4a:f9:b9:
                    e3:89:14:d5:c8:5a:b6:55:eb:e3:af:c7:4f:89:23:
                    86:bf:49:c4:e0:8e:37:35:f4:62:e1:72:1f:44:90:
                    5a:c4:8d:92:4e:a1:37:88:78:3f:7b:2f:bc:3a:f2:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:49:B2:42:CC:C9:1B:23:6D:29:B6:D6:06:73:04:24:FE:63:01
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:2a:b8:93:31:30:aa:5c:24:69:7f:70:71:89:a5:08:15:
         21:42:ba:41:47:98:e2:81:ed:f6:a8:21:9a:7b:8d:52:5b:50:
         d7:b5:2e:5b:0b:4d:0e:65:cc:d8:3e:bd:86:a3:90:fa:41:e4:
         31:30:4a:05:54:d2:df:f1:44:43:14:b5:04:da:5b:8c:0b:ff:
         89:48:99:c6:86:a4:54:a2:c0:c2:ce:c1:1d:a6:59:8a:c6:71:
         04:65:9b:e6:d5:45:d1:0b:46:c6:1e:d1:cc:9d:77:29:65:55:
         46:e4:6d:58:f5:6e:18:48:26:45:71:51:5e:fb:9c:a9:a2:1e:
         2e:18:80:48:a0:42:22:f9:ed:fd:53:0d:8f:91:6f:1d:5d:fd:
         52:67:4b:b1:64:b9:bf:b6:68:57:18:f7:f5:77:ad:f0:47:c2:
         40:73:dd:9c:bd:bf:a5:78:ae:d3:b2:04:71:6f:6b:a0:83:5f:
         af:09:09:33:e8:ef:0e:b4:ac:6f:2c:f3:9d:9b:c7:9a:8b:18:
         4a:5b:90:bd:59:b7:87:a6:69:57:24:78:fa:96:43:8f:d5:3b:
         5d:9c:df:ec:75:e0:a6:02:de:37:29:da:96:bf:3f:72:5d:c1:
         19:60:28:4e:c7:45:a2:bc:97:cf:dc:1c:fc:ac:2b:97:2d:23:
         5a:bf:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:54:21 2025 by rpki-client