Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          GbHn78btLOVxPcPc9qSyRfPc4alb+0mUIPWAVXqwKYY=
Subject key identifier:   2D:B9:7F:E3:A1:33:8A:F9:19:C3:49:1A:E3:B8:09:32:05:31:86:79
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       061F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          060E
Signing time:             Thu 24 Apr 2025 22:39:55 +0000
Manifest this update:     Thu 24 Apr 2025 22:39:55 +0000
Manifest next update:     Thu 01 May 2025 22:39:55 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: xR2y919k2pAgc5K24o5zsRQWdAbbm3jD2FCr1YfzjxU=)
                          2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: mwRP961xtY2lPq9MW+s5fgbFnCinGV45dL2366gga8s=)
                          3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: W99oRxw3I+qxKmMA4BJDWXe3wvdXS+ZW2rGIK9SdBKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567 (0x61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Apr 24 22:39:55 2025 GMT
            Not After : May  1 22:39:55 2025 GMT
        Subject: CN=680abdbb-5a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:8c:5c:cd:c9:c7:b9:83:ed:13:e7:b0:d8:
                    d4:ff:f2:c3:01:32:69:11:a6:2e:4a:12:bf:81:e4:
                    eb:0a:2c:6c:28:5c:57:16:5c:ef:35:34:d6:f4:db:
                    9c:a0:22:48:3c:88:49:91:bc:0b:16:e7:32:6d:93:
                    1c:43:a9:f9:5c:4a:cd:6d:9d:c7:01:95:e2:79:de:
                    aa:b7:aa:83:1e:43:2f:7a:a4:6b:2c:88:c3:47:77:
                    f5:c9:d6:da:94:37:22:c6:3f:58:06:65:8f:0b:fb:
                    6b:e1:a7:25:8a:a6:a0:23:43:4f:85:a1:d2:f5:be:
                    c8:9c:f1:23:36:95:f7:86:b2:0e:dc:57:4d:68:a7:
                    e9:0a:a1:75:aa:f7:30:66:ca:b3:25:92:92:77:86:
                    bf:32:9b:7b:0c:ad:08:59:36:04:1b:cd:d2:3d:70:
                    c1:64:7a:5a:93:b5:98:f1:65:4e:2d:3e:f9:6d:e3:
                    54:cc:05:07:3d:07:ad:8a:f4:16:ad:17:f3:d2:18:
                    a2:b4:cf:23:bb:08:3b:dd:e9:03:c6:00:22:d7:4d:
                    bf:dd:a7:b9:06:25:cf:2b:f3:1f:76:23:ec:84:b6:
                    f8:e5:c9:2d:68:51:0e:55:2c:c6:4e:e7:29:57:47:
                    52:25:76:d1:32:65:be:cc:75:86:02:23:13:c4:f2:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:7F:E3:A1:33:8A:F9:19:C3:49:1A:E3:B8:09:32:05:31:86:79
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:ed:0c:70:76:00:5d:f2:76:3c:77:65:65:cc:f4:6a:4e:
         28:6c:0e:ca:89:6a:47:47:38:13:85:d5:8b:04:bb:d1:56:2b:
         c4:ab:75:17:65:6a:e7:94:fe:a5:6d:88:1c:ec:69:ec:6d:e3:
         a0:84:e0:37:86:69:e5:eb:c1:46:86:08:e6:54:94:be:05:6c:
         7e:28:63:16:6e:79:b7:16:a4:c8:22:46:a1:83:7a:2f:b9:c4:
         cf:c0:50:e2:a8:8a:56:8c:75:c4:98:eb:d0:36:1b:68:75:6f:
         11:ee:a3:0b:1d:41:c6:32:8c:d7:4d:1b:8b:4d:7e:64:44:4c:
         38:a0:0d:99:de:f8:f7:2f:fc:58:47:ca:c6:79:6d:12:19:cb:
         5d:d6:a0:00:9e:cf:57:23:4a:f0:3f:89:c1:72:cf:c6:43:c8:
         cb:5c:9c:66:0d:31:29:f2:87:d7:f4:c0:bd:00:e8:08:9f:48:
         40:87:5f:b1:38:ec:65:59:9a:aa:9b:5b:15:8f:15:36:c0:26:
         9b:3b:5b:04:05:f3:ac:ba:c8:87:0f:0b:39:71:65:18:43:58:
         63:21:8a:a9:d3:66:6a:40:cd:b0:cb:cb:9d:bd:4d:43:cb:e7:
         23:86:ac:81:68:b3:30:67:6f:63:d1:c2:97:cc:3f:e1:18:92:
         83:b7:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:24 2025 by rpki-client