Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          JGQ+beDSDo9FaGXvaan7p1Ibsv9T1OeAX8LIpF8hcVA=
Subject key identifier:   11:35:F9:1D:21:EE:E4:5A:5C:4C:12:8A:EA:6E:5F:B6:24:08:79:0A
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1BF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1BED
Signing time:             Sun 10 Aug 2025 16:11:46 +0000
Manifest this update:     Sun 10 Aug 2025 16:11:45 +0000
Manifest next update:     Sun 17 Aug 2025 16:11:45 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: aFInat1Z03UctfdoS9dsMZ06wcKvuaIDB+VrqsTK3EM=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: adZvd/ecrn/69jFBmaF8532OMU/h1NSuA6iJnPKo2nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7159 (0x1bf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: Aug 10 16:11:45 2025 GMT
            Not After : Aug 17 16:11:45 2025 GMT
        Subject: CN=6898c4c1-6b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:ed:57:c6:42:db:cc:5a:c3:16:75:9a:55:
                    d0:67:74:dc:93:6b:11:75:28:f1:6c:66:69:7c:b1:
                    0f:cd:37:e1:f3:56:c6:cb:18:80:1f:0b:06:98:7b:
                    28:d2:b5:c9:b5:64:a9:50:1b:6d:be:e8:a3:fc:ca:
                    fb:b2:cc:14:a5:52:c8:35:b1:39:bf:cb:b3:9c:09:
                    38:1b:99:06:f1:e9:fb:03:d1:a5:36:e7:b0:09:5a:
                    0b:9e:ea:26:f6:8e:ed:dc:54:6c:6b:b2:a3:de:25:
                    ab:83:9d:6c:57:42:d3:e7:88:40:82:8a:e6:8b:1c:
                    e4:a5:a4:1b:91:df:5d:e6:c0:25:f3:59:3a:ba:53:
                    54:7c:06:ff:18:ea:81:0f:1b:23:57:ac:5a:5f:6e:
                    21:27:b4:0d:10:81:9e:c0:f2:6a:e8:4e:99:cc:e8:
                    9e:c0:f3:88:f9:1c:9c:ea:c6:ce:f3:0c:c4:3f:4a:
                    9d:92:ea:65:3b:58:2d:44:5f:50:69:05:7b:f6:0c:
                    ba:b1:73:db:ab:30:60:06:1a:e5:57:ed:f1:48:ee:
                    8a:7c:65:00:2d:0f:80:b6:5e:83:31:79:0c:21:ba:
                    86:77:f8:bb:0a:98:8a:d9:16:ff:75:65:a2:26:66:
                    ae:9a:02:99:b6:8d:03:ec:97:6a:51:9d:24:74:11:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:35:F9:1D:21:EE:E4:5A:5C:4C:12:8A:EA:6E:5F:B6:24:08:79:0A
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:c5:57:6c:b0:81:d4:42:b9:10:dd:b2:b0:10:f7:b3:10:
         1e:d5:26:9a:0c:a8:ae:cb:16:06:02:8d:cd:c7:fe:d6:f9:ba:
         f1:58:62:64:e3:98:7a:d1:1f:5d:13:a8:4f:a6:e0:b5:65:24:
         48:fa:3e:76:78:ae:9d:25:96:44:6f:8b:f0:af:43:bd:77:b5:
         88:79:ac:f6:d7:61:07:a5:8b:33:3a:71:b8:4e:3b:f8:b2:2b:
         f0:0d:b3:71:4d:d9:b8:07:8a:99:3b:f9:30:ec:5e:a7:2b:9a:
         9f:af:4f:6c:09:40:af:55:85:02:ce:42:03:65:8c:a3:bf:f6:
         4b:99:5a:ef:f3:f2:b6:c2:3c:51:b4:d4:5d:d8:e9:cd:85:4d:
         c0:65:65:d7:20:67:4c:5e:da:86:15:8a:6c:a6:9e:d7:dc:f0:
         0b:81:16:3a:c9:30:bd:fd:a5:b4:2b:15:44:94:fc:2d:af:38:
         39:5a:8b:8d:cf:68:90:0a:2d:fb:c8:57:5a:1a:96:54:dd:0a:
         0d:4e:bd:8d:b2:40:07:ae:f8:1b:4a:94:9f:65:f3:14:1e:49:
         71:08:9d:eb:12:af:5b:84:14:9b:22:0d:da:0e:09:80:67:83:
         46:c0:9a:6d:32:3c:dd:36:1f:10:d4:86:84:69:4a:fc:f2:2e:
         89:3e:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:22 2025 by rpki-client