Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          UB3j7VhqsaDjTyb1MHlylRCog0ql17hKdhSgBM8qC60=
Subject key identifier:   72:98:74:90:19:25:A8:A6:DD:88:BB:AF:D4:39:B9:70:93:3F:56:FF
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       067F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          067A
Signing time:             Sun 10 Aug 2025 22:28:52 +0000
Manifest this update:     Sun 10 Aug 2025 22:28:51 +0000
Manifest next update:     Sun 17 Aug 2025 22:28:51 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: NYEoGT8aTxVtvOTj/rOzUUf59QZ6FzxoTcTvduucVQE=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: U3xUizSTWdJYMjLLq4qIbC/HRkla7mf9lgp0wntQ29I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl
                          rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Aug 10 22:28:51 2025 GMT
            Not After : Aug 17 22:28:51 2025 GMT
        Subject: CN=68991d23-0623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:be:ef:b6:53:dc:48:38:95:16:06:8b:4c:
                    6c:02:ac:af:ff:06:58:b9:c9:69:78:e0:21:14:47:
                    ac:14:9f:84:a0:c0:a0:db:09:22:84:69:db:f0:f6:
                    f6:83:ec:14:72:39:25:ba:98:a7:a8:c5:8d:97:a3:
                    cc:c7:fc:87:cd:f6:81:0e:52:6c:a9:ae:e0:0d:43:
                    1b:32:1b:63:ae:cc:5e:14:f0:02:9c:73:19:c1:72:
                    04:e6:cd:e6:96:87:d6:d4:4c:02:84:ef:30:d3:e2:
                    89:48:05:9d:1b:7e:1d:8b:9f:3b:a9:7c:55:a4:b8:
                    6b:99:c6:79:b0:d7:77:5a:0d:75:89:cd:75:14:cf:
                    66:e4:40:30:21:4e:d0:bc:68:40:4f:25:dc:f4:d6:
                    df:d0:0c:23:0f:55:da:a2:ef:3a:91:96:98:fb:57:
                    3a:4c:af:7d:f6:1f:4b:a1:e5:18:16:a2:66:96:18:
                    46:2f:87:5a:97:0a:6c:9c:7b:32:9a:5d:bc:3d:2b:
                    78:8a:b2:d3:10:70:45:a2:b3:f2:16:72:60:ce:b1:
                    26:22:af:d9:9f:d9:f6:9a:19:b6:72:9f:39:d6:8d:
                    ec:0a:53:7a:97:e1:f2:5f:3f:bd:ef:58:2c:be:cd:
                    16:08:a6:ec:c2:b4:16:5e:3d:72:2f:53:7a:cc:63:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:74:90:19:25:A8:A6:DD:88:BB:AF:D4:39:B9:70:93:3F:56:FF
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:10:a1:19:59:f1:06:f7:85:b9:92:a8:74:65:f1:e5:9e:
         b8:37:f5:de:fe:9c:4a:cf:d2:12:31:76:f1:f3:b8:48:f5:a3:
         8c:20:b9:00:68:70:5c:cf:a2:fd:3a:7d:1d:8b:ef:3f:5f:35:
         ee:54:3a:52:cb:58:76:53:7f:d9:e2:d8:ed:40:af:e8:7b:5e:
         ef:ae:c8:51:92:45:f3:be:1d:0e:e8:50:30:39:57:d1:09:ac:
         b2:fc:6b:bd:75:8d:fa:ca:b6:70:1f:f4:26:60:b9:35:07:cf:
         fd:9e:e0:90:cf:7b:cf:a9:25:e9:07:52:3c:cb:c6:6a:0a:2a:
         7f:93:ec:79:e0:18:bc:20:52:cf:fa:5a:e8:f8:31:86:a2:80:
         e3:34:7c:bc:70:62:20:77:3e:65:05:20:47:bb:82:62:b8:2f:
         92:42:69:9a:9a:34:09:7a:5e:c7:54:f9:cb:39:bd:84:57:4d:
         a3:99:a1:25:77:66:85:c6:d3:d8:fe:e9:64:4c:4a:ef:1b:c6:
         cf:32:b7:be:fd:0d:84:6e:fa:32:87:aa:34:3f:57:ec:17:ee:
         c6:e7:a4:24:6a:95:7a:cd:68:3a:be:80:09:1e:73:d6:1d:09:
         4b:0b:4b:19:e3:52:a6:c1:bc:25:e4:3f:4c:58:bf:1d:6d:18:
         76:b7:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:51:59 2025 by rpki-client