Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
File:                     JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json)
Hash identifier:          pG47g5V7YmbpKP3zTUm4HnyzfGHnmaP5xgGEEShqYJ8=
Subject key identifier:   79:F3:9B:73:18:EB:7B:2F:46:9C:8B:A5:A3:65:76:93:B7:E6:D7:F3
Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
Certificate issuer:       /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
Manifest number:          01E5
Signing time:             Thu 07 Aug 2025 03:22:08 +0000
Manifest this update:     Thu 07 Aug 2025 03:22:08 +0000
Manifest next update:     Thu 14 Aug 2025 03:22:08 +0000
Files and hashes:         1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: sP17gdoknJadK/QBScysTOvYFCDE6ptcH93y1Ryvioo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 03:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
        Validity
            Not Before: Aug  7 03:22:08 2025 GMT
            Not After : Aug 14 03:22:08 2025 GMT
        Subject: CN=68941be0-6e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:a1:d0:62:b3:5a:6a:a3:64:54:68:ca:be:
                    7a:85:10:01:bf:d6:a1:c4:74:c2:ef:d4:da:f0:74:
                    d8:d9:74:f2:22:38:f7:71:8d:b0:1f:25:d8:a6:cd:
                    42:f3:c5:f2:52:27:45:35:ba:43:35:9a:5d:b9:80:
                    f5:da:76:cd:d5:21:34:96:9b:3a:db:aa:69:76:8f:
                    bb:f2:50:1e:3c:06:ff:5e:79:5c:99:57:c9:87:68:
                    8b:da:66:44:c6:80:33:52:1d:da:e1:2c:81:74:13:
                    66:07:43:40:c3:67:1b:53:bd:e8:7a:82:a2:d0:84:
                    16:eb:db:69:b4:c2:6c:47:4f:b4:7a:ce:e5:82:84:
                    93:14:7a:4d:f5:93:b0:3a:45:88:ca:dd:ff:51:f3:
                    ba:73:a2:f4:49:d5:de:11:2e:df:8b:2a:49:e7:82:
                    4a:34:ff:72:3b:4c:83:c0:25:5c:80:53:0a:ac:bf:
                    9a:bb:10:47:c9:45:dd:9a:60:cb:a6:ba:52:9d:1b:
                    4b:f0:5e:38:c1:35:35:42:42:ca:0d:0f:5a:ee:42:
                    73:12:8f:a9:6e:d9:af:09:29:a0:27:4b:31:0f:3c:
                    b0:7a:56:e0:f9:37:5c:c9:67:49:b2:5f:53:cb:cc:
                    b8:77:7c:b9:57:d7:ac:a8:6b:be:bb:84:b2:16:6b:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:9B:73:18:EB:7B:2F:46:9C:8B:A5:A3:65:76:93:B7:E6:D7:F3
            X509v3 Authority Key Identifier:
                keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:3a:7f:cd:ea:d7:86:9a:96:bd:7d:37:1c:ee:0b:49:53:
         3a:d0:1e:81:28:f4:6f:db:c0:72:26:65:25:3d:4d:1c:a4:92:
         b3:7a:1b:31:e0:fe:95:cf:e7:4c:68:da:65:fc:32:01:14:bb:
         4e:33:a8:d7:fc:2c:a0:d1:df:a2:9e:d6:d5:6a:0f:a5:b9:1d:
         99:a9:0f:07:4e:bc:1c:9b:12:23:9e:9f:03:3f:43:25:1c:61:
         51:e2:cd:46:67:b7:7e:3e:44:d8:f1:17:c0:27:e9:64:87:ac:
         eb:2b:b3:7f:6d:36:2d:ea:31:84:d1:12:2f:91:b6:13:7a:08:
         89:08:b8:43:42:c5:09:bd:86:27:87:70:c1:57:dd:29:e1:6c:
         42:c7:f6:ea:20:bb:48:e5:78:b3:3c:c5:65:75:ce:d1:29:b9:
         30:a7:c9:fb:f1:1e:dc:c4:7b:dd:0e:99:33:05:32:bc:a2:81:
         c6:a3:71:33:4c:4a:90:cd:cc:2a:7a:70:6a:f0:ca:35:35:4f:
         6e:8c:82:74:94:16:55:03:80:fe:93:f5:b0:58:66:94:2c:f0:
         05:36:27:49:cb:d7:63:19:2c:9d:1e:71:2e:b9:ff:3d:f6:c5:
         b4:39:3c:c8:42:23:30:7d:3c:c1:83:60:21:53:60:3a:c3:a4:
         2c:53:8c:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyQUYxMTAvBgNVBAUTKDI0QjlFREU1MkMwM0E4NkUwRjIxMjg2OTNCNkMxRTBB
ODcyNEVEMTUwHhcNMjUwODA3MDMyMjA4WhcNMjUwODE0MDMyMjA4WjAYMRYwFAYD
VQQDEw02ODk0MWJlMC02ZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogqh0GKzWmqjZFRoyr56hRABv9ahxHTC79Ta8HTY2XTyIjj3cY2wHyXYps1C
88XyUidFNbpDNZpduYD12nbN1SE0lps626ppdo+78lAePAb/XnlcmVfJh2iL2mZE
xoAzUh3a4SyBdBNmB0NAw2cbU73oeoKi0IQW69tptMJsR0+0es7lgoSTFHpN9ZOw
OkWIyt3/UfO6c6L0SdXeES7fiypJ54JKNP9yO0yDwCVcgFMKrL+auxBHyUXdmmDL
prpSnRtL8F44wTU1QkLKDQ9a7kJzEo+pbtmvCSmgJ0sxDzywelbg+TdcyWdJsl9T
y8y4d3y5V9esqGu+u4SyFmtdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnzm3MY
63svRpyLpaNldpO35tfzMB8GA1UdIwQYMBaAFCS57eUsA6huDyEoaTtsHgqHJO0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD
QkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFHNFBJU2hwTzJ3ZUNvY2s3
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMbnQ1U3dEcUc0UElTaHBPMndlQ29jazdSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFH
NFBJU2hwTzJ3ZUNvY2s3UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAj7Tp/zerXhpqWvX03HO4LSVM60B6BKPRv28ByJmUlPU0cpJKzehsx
4P6Vz+dMaNpl/DIBFLtOM6jX/Cyg0d+intbVag+luR2ZqQ8HTrwcmxIjnp8DP0Ml
HGFR4s1GZ7d+PkTY8RfAJ+lkh6zrK7N/bTYt6jGE0RIvkbYTegiJCLhDQsUJvYYn
h3DBV90p4WxCx/bqILtI5XizPMVldc7RKbkwp8n78R7cxHvdDpkzBTK8ooHGo3Ez
TEqQzcwqenBq8Mo1NU9ujIJ0lBZVA4D+k/WwWGaULPAFNidJy9djGSydHnEuuf89
9sW0OTzIQiMwfTzBg2AhU2A6w6QsU4wd
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:32 2025 by rpki-client