Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          Et1jACoLneyf/I7gVq3bvxhRDbgRNCYHYEuqC2m8XiU=
Subject key identifier:   AD:B9:5E:14:F8:A4:59:AA:CA:AF:14:78:E1:74:22:95:D6:D2:3F:B2
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          21
Signing time:             Sun 15 Jun 2025 06:58:21 +0000
Manifest this update:     Sun 15 Jun 2025 06:58:20 +0000
Manifest next update:     Sun 22 Jun 2025 06:58:20 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: r1+oZVk20QzrS+hQwJEdRvx/xbmkeAEF1YFsLA1QGFQ=)
                          2: 6065D794238B11F0A6312687C4F9AE02.roa (hash: IEKHYh/ngtYZA0UCxVdmnCpzFo6yTGWKpCs27PXlBHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Jun 15 06:58:20 2025 GMT
            Not After : Jun 22 06:58:20 2025 GMT
        Subject: CN=684e6f0c-ba6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:26:ab:8b:90:49:f8:9c:38:6c:3b:05:16:
                    b9:59:d1:2e:74:e6:a7:b5:32:d1:c1:4b:ec:e0:c7:
                    61:40:34:1f:f2:66:52:86:c1:32:b3:e1:9b:89:34:
                    42:1f:97:9b:9c:23:77:77:2f:05:a8:ff:4f:e6:1c:
                    48:79:4b:92:72:bf:f3:97:7e:f6:c5:81:65:fd:93:
                    3c:e1:7d:ae:1e:1f:13:0a:b1:f0:37:94:cc:e6:b9:
                    f5:a3:b6:c7:e5:30:62:fc:f6:d6:d6:96:6f:3e:57:
                    cf:bc:d8:0b:c1:71:84:67:3d:dd:9e:45:62:98:cd:
                    a1:a2:72:d7:f4:4e:4e:81:68:e7:f9:f9:75:db:12:
                    e7:cc:69:68:eb:a4:3e:fc:c5:cc:24:7f:23:68:9a:
                    f9:c4:69:33:89:85:26:4b:52:bc:33:50:00:ec:9c:
                    a5:54:95:34:c7:3c:34:a8:12:86:8f:7c:da:37:93:
                    ed:cc:5f:96:38:2a:a6:66:38:71:b6:ce:05:05:fa:
                    eb:78:1a:00:03:ee:84:c9:f7:08:ac:c1:9c:75:0d:
                    33:6d:04:ba:e1:95:2e:44:0e:71:e7:49:fb:7c:52:
                    ef:ec:d1:8a:9c:53:18:e1:a6:69:fb:e6:05:30:32:
                    0b:8b:34:eb:d7:ac:3c:bc:f6:aa:84:23:74:ab:65:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B9:5E:14:F8:A4:59:AA:CA:AF:14:78:E1:74:22:95:D6:D2:3F:B2
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:3b:fd:34:f8:ed:59:5e:68:14:8c:7b:57:f1:2a:ec:f8:
         d5:f3:88:3c:9c:2b:16:ea:87:15:b9:0a:7d:a0:e3:74:41:68:
         f3:1c:9c:32:0a:7d:16:6d:da:a1:f6:8c:ce:4b:a6:2c:61:6b:
         50:8d:5c:59:d5:36:44:ca:f5:66:ae:e4:50:92:f6:c3:41:d5:
         be:6b:c2:cc:66:d8:b5:74:ad:cf:00:cc:09:5c:1f:a3:83:78:
         19:10:1a:11:e1:d9:02:df:cd:fe:e6:8d:b2:4d:1e:b4:4b:00:
         e9:b0:55:61:1d:12:72:47:27:bd:cb:9f:c1:6a:67:af:9c:02:
         d7:c1:63:50:47:cb:11:ac:c9:80:cd:d1:78:26:76:77:d5:5f:
         18:9c:5b:fc:85:d7:54:ab:cd:3a:9d:be:ff:09:b7:d2:36:53:
         f4:f1:2f:c6:07:49:09:c8:de:43:10:96:6c:00:e0:af:29:58:
         79:37:0e:98:b3:36:6f:11:b5:4d:88:bd:11:d1:34:4c:21:59:
         ae:42:65:b7:a4:87:03:0d:70:62:82:a4:94:45:72:bd:eb:c3:
         ba:d6:2b:bd:74:48:1e:6e:b7:83:66:bf:0b:06:5a:ae:27:8a:
         0c:15:88:31:f7:08:2c:cb:5e:9a:a6:47:9b:c1:77:57:f9:1f:
         07:29:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:57 2025 by rpki-client