Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File:                     1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier:          KOQtIDcaEkmbFYi8bwc01lxTeR7e5waskUuQtIR0KBE=
Subject key identifier:   6A:50:25:8C:7F:17:E3:EE:34:AB:C7:13:19:84:3C:4D:7D:86:CA:36
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number:          03EE
Signing time:             Fri 13 Jun 2025 00:04:37 +0000
Manifest this update:     Fri 13 Jun 2025 00:04:36 +0000
Manifest next update:     Fri 20 Jun 2025 00:04:36 +0000
Files and hashes:         1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 0rgGLsGnCre9zGU8vbH76bjphwbLR8z6POQy8IV1KMU=)
                          2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Jun 13 00:04:36 2025 GMT
            Not After : Jun 20 00:04:36 2025 GMT
        Subject: CN=684b6b15-9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:8d:53:e6:cc:74:e4:95:1e:11:3d:9f:7a:
                    cc:ba:e4:5d:f2:90:1e:b9:eb:a4:7e:68:f6:77:32:
                    61:cc:1a:94:3f:b8:18:5e:47:e4:8e:5e:76:36:bc:
                    bb:64:5d:9a:11:74:e8:34:2c:ea:f6:3f:e7:d9:26:
                    1e:1e:21:96:bf:80:57:76:b4:39:79:46:35:a0:82:
                    32:b5:68:87:02:1a:28:db:c0:e4:1a:d2:d4:50:e8:
                    23:19:aa:37:df:43:4e:b7:69:2d:5b:f1:5d:f0:53:
                    3a:2e:b7:1f:fb:f4:11:20:34:98:7b:17:2e:e6:e3:
                    74:62:78:95:67:bd:ad:8a:d4:8f:74:e3:dc:a5:a0:
                    90:b2:23:db:87:82:e5:fa:cc:81:09:f4:33:b8:91:
                    b7:47:57:86:bc:97:96:88:dc:69:0a:a5:4f:14:b1:
                    93:97:ae:53:c8:d2:60:f8:b7:14:8a:7a:a8:29:ce:
                    3f:20:ce:e9:64:ea:43:ce:31:ac:be:9c:e7:30:64:
                    79:be:59:ab:8f:ac:91:10:43:8a:49:e2:76:96:9c:
                    f4:b6:52:41:c3:9e:07:41:63:a1:f7:f1:c8:7d:ae:
                    02:b4:b4:0f:93:1f:9a:02:62:5b:1a:4e:f8:3f:5e:
                    32:d2:08:5b:de:3d:fe:57:8d:35:b4:64:dc:aa:24:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:25:8C:7F:17:E3:EE:34:AB:C7:13:19:84:3C:4D:7D:86:CA:36
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:52:3a:13:2f:e3:cb:f6:20:ce:a5:13:de:e5:63:39:62:b1:
         13:2b:07:ff:21:fe:13:56:16:5e:f0:18:16:58:94:3b:a4:75:
         75:02:dc:8f:26:86:20:fe:75:cf:14:36:31:c7:f6:3f:f2:fa:
         bf:82:1a:aa:51:d8:05:ca:36:83:d6:a1:30:9f:4b:42:61:d8:
         ba:23:d8:75:b1:d5:0d:d3:ae:f2:03:7b:1d:fb:e9:ff:76:19:
         c1:8e:39:42:58:51:d5:d6:1b:07:07:c9:be:b3:93:90:24:b9:
         1b:a3:e3:99:e4:71:60:7e:2c:99:56:5d:77:78:3f:5e:dd:03:
         aa:50:9a:41:aa:fb:fe:5e:20:4b:0c:ad:62:ec:8b:b3:41:0b:
         75:84:7d:0e:e4:dd:b5:c3:a9:40:0a:1b:2c:bb:6b:7e:01:35:
         9e:eb:bb:14:63:74:09:8c:bf:29:ad:b1:c4:e2:51:e2:21:57:
         64:ae:31:ee:0c:dd:82:52:ae:a6:e7:aa:20:5b:15:48:af:16:
         80:14:dd:b7:b7:f9:50:82:77:6c:1e:82:1a:ab:77:a8:57:60:
         9d:0c:d5:1f:0f:ff:b4:88:30:e2:d5:18:7c:c8:79:4e:88:43:
         d4:5e:b3:97:c2:47:17:d8:18:aa:ee:8d:6d:51:95:ba:f0:3f:
         b6:15:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:12:55 2025 by rpki-client