Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          Zrluv0xYMY4ksUhtXTrY3sWkjGmi/Q+JuyzcFthDpOk=
Subject key identifier:   68:B0:73:23:4D:24:47:55:C4:68:8A:75:30:04:F4:B4:A7:5D:6F:AA
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          07A3
Signing time:             Fri 08 Aug 2025 21:43:28 +0000
Manifest this update:     Fri 08 Aug 2025 21:43:28 +0000
Manifest next update:     Fri 15 Aug 2025 21:43:28 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: GlqGS7NOGOcYKDrC1xpYw311rrgup9GI2+SA1MmrAJ8=)
                          2: A7DE2E7820E311F0993B6882C4F9AE02.roa (hash: no1v0xZMt6mM9ecpNtFecxklCRLhU3BMofUDij88ZQc=)
                          3: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: yvnjwOTgzgeBoIFWnP+qrRUckU6QqKEjOZnd2PgnU28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2, serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Aug  8 21:43:28 2025 GMT
            Not After : Aug 15 21:43:28 2025 GMT
        Subject: CN=68966f80-7446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:0e:bf:2b:a4:12:8c:2b:f3:fb:31:13:31:
                    a1:b0:83:2c:2c:d6:8d:2f:a7:eb:9f:b3:7d:95:92:
                    c7:f0:dd:d1:7e:6d:e6:dd:d2:f9:1c:0f:7a:23:de:
                    40:2a:eb:87:02:a0:bb:d3:47:79:e0:82:02:3a:84:
                    5b:05:40:bf:3c:07:5d:60:01:82:fd:c3:9d:09:44:
                    74:e3:2e:04:de:30:c0:af:60:d1:7f:03:e7:84:45:
                    b6:ed:53:2f:25:ba:19:07:5a:1d:7a:44:b2:8f:68:
                    31:ea:25:4f:5a:52:07:8f:a1:5d:89:16:5a:73:d3:
                    b7:6f:6e:39:dd:ce:be:1e:bb:16:32:70:fd:b2:a9:
                    84:10:18:fd:94:96:a2:0e:8e:f9:58:a3:07:9a:b6:
                    08:58:9f:a2:23:7f:2b:4d:42:6f:7e:a5:4f:23:b0:
                    5b:55:e5:94:bf:e5:8d:59:d9:7f:16:cd:26:b5:c5:
                    59:c6:80:6d:3a:94:7d:7e:5d:e4:ee:54:66:ce:ce:
                    a2:07:eb:6b:65:b9:7f:73:a4:8b:46:f6:1e:42:55:
                    ce:bd:75:93:b8:f3:a2:c7:f8:d5:93:e9:c0:52:fc:
                    2f:71:99:43:91:77:e0:27:9b:98:c4:6b:d4:b6:5b:
                    d5:65:49:01:0a:dd:4e:78:a9:df:03:61:81:a2:65:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:73:23:4D:24:47:55:C4:68:8A:75:30:04:F4:B4:A7:5D:6F:AA
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:64:39:11:38:ff:0c:aa:31:d5:b2:98:74:8a:02:3c:be:c5:
         40:97:a4:2c:4c:ef:80:ed:a7:25:99:93:9c:82:40:0d:ca:68:
         43:01:cc:b2:0b:e2:b1:30:5f:78:28:07:4e:ce:27:d4:12:c4:
         14:81:67:75:ad:be:a2:82:13:61:03:c3:de:63:7e:f7:d6:ba:
         ff:f0:ad:ba:2e:0c:d9:20:46:99:29:6d:0d:36:5a:03:82:f4:
         1e:b2:01:58:8a:38:8e:c0:24:c0:fe:23:5f:bd:cc:df:b0:f5:
         25:c5:a0:a5:62:85:94:54:33:2f:fa:29:a9:33:04:fd:7e:78:
         e0:b7:5c:9f:82:1e:56:1d:68:79:bc:27:dc:c5:af:56:bb:be:
         f6:bf:9a:49:2d:c6:06:50:0d:68:c1:87:9f:dc:da:4c:72:c5:
         da:13:6a:76:f4:25:61:f2:a6:ae:e8:bc:70:e6:9f:bf:6d:89:
         b3:2b:41:21:81:fb:c7:30:22:07:63:d9:36:f2:c3:3d:50:cb:
         ec:3f:3e:12:d0:ab:be:f6:80:ca:d5:a4:4e:6a:e9:22:32:7c:
         ff:8a:70:25:d3:5e:95:c8:07:5a:93:b7:a9:56:73:cc:04:e9:
         26:61:ee:76:94:df:09:01:53:d5:01:33:67:8e:4a:b3:aa:60:
         03:63:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:59 2025 by rpki-client