Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          R/xAxoZjBL48I93TNZh3v3MOnOu1bd4lPWHqE1UJB5g=
Subject key identifier:   8D:FF:ED:E8:3E:D6:34:04:D7:EA:C2:D8:5C:15:3A:BF:92:99:CF:C2
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       34CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          34B9
Signing time:             Fri 08 Aug 2025 14:38:34 +0000
Manifest this update:     Fri 08 Aug 2025 14:38:33 +0000
Manifest next update:     Fri 15 Aug 2025 14:38:33 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: cRMUV5a68IIHcLJeJqXEE+o894DZMVZOHQtFmPX5Lus=)
                          2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13518 (0x34ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Aug  8 14:38:33 2025 GMT
            Not After : Aug 15 14:38:33 2025 GMT
        Subject: CN=68960bea-cd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:e6:e6:b2:b0:0b:48:0c:8c:46:9e:34:59:
                    ce:9e:e8:42:09:1e:9e:3a:70:e9:e9:c6:2e:0a:d9:
                    c2:42:5a:b8:11:ea:4a:59:e7:a3:28:0b:09:c2:47:
                    39:7b:32:e6:e8:cb:1b:e2:f8:4d:86:ff:f4:69:68:
                    8f:42:cb:b3:89:74:06:c3:86:3b:c0:68:a6:43:49:
                    30:52:7b:ee:36:8b:6d:c6:5c:43:86:9c:fa:67:a6:
                    4f:e4:6c:cf:62:07:9c:34:f2:df:38:26:6b:f5:14:
                    3d:ca:a4:52:ff:3b:a2:2c:5a:27:d9:8a:ad:a0:0c:
                    3d:cf:4a:c0:0e:90:be:43:c4:6e:5c:3d:59:ce:bf:
                    32:87:04:74:73:22:f7:67:95:3f:8c:43:90:aa:43:
                    e7:2d:81:33:54:86:45:46:45:0e:76:54:32:b2:23:
                    c6:e1:cc:4c:ec:7f:5a:dc:40:5a:02:f3:15:e3:4d:
                    0f:13:f1:0f:25:ad:1c:30:69:25:3c:69:0e:37:12:
                    af:63:c6:c4:30:09:de:8d:23:60:ef:9a:0d:80:6c:
                    20:8e:2e:eb:96:1f:06:4e:93:67:39:6a:e6:4f:15:
                    8d:ac:72:ba:86:cd:27:d2:28:d2:d0:15:e9:3b:b7:
                    e5:73:7e:cc:ca:6a:05:90:02:04:34:1e:3c:05:e4:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FF:ED:E8:3E:D6:34:04:D7:EA:C2:D8:5C:15:3A:BF:92:99:CF:C2
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b3:e1:ef:c6:be:b4:74:ae:71:f4:73:3b:a7:ba:7e:31:fa:
         63:da:b3:14:ed:b5:dc:c0:e6:3d:a5:98:3a:02:81:8a:7b:a1:
         b8:65:b9:69:93:a2:00:05:d8:ef:92:4d:14:75:12:f6:e4:c2:
         d2:c1:77:88:03:55:02:fb:0b:87:77:6b:5c:c7:fa:41:62:5c:
         e7:93:96:ed:56:3d:1e:5b:fc:81:93:e3:b6:6b:1e:39:bf:b2:
         be:49:6c:0b:e2:c9:f5:c3:35:45:b4:34:e8:12:c3:5c:5c:cd:
         a2:bd:cf:d0:1b:e3:19:41:96:81:54:40:cd:95:9b:2c:0c:f2:
         52:b9:94:29:d8:50:6d:b1:bb:1c:99:c0:ca:c8:2f:79:88:64:
         e6:ab:3e:d2:f2:15:ef:41:4f:bc:26:64:ae:02:b1:83:aa:8a:
         77:54:5b:3f:9f:19:b2:b8:7c:ab:a0:92:bf:ed:c3:7c:2f:42:
         a5:43:aa:34:2f:90:0e:e4:58:99:2e:70:02:ba:14:c7:a4:a7:
         b7:6d:2c:6f:b5:7b:9e:14:9d:e0:a6:c8:48:e8:91:e2:ca:63:
         8e:58:0b:04:58:46:9f:a9:bd:c4:c9:08:e8:8d:af:06:bd:23:
         36:5c:d3:eb:9d:8c:54:82:ad:82:18:d4:8c:26:f1:91:4d:56:
         75:dc:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:48 2025 by rpki-client