Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File:                     JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier:          RvzLQvvOyGADsi405DjLxK1xozakN8f8wmGcjnPPB9E=
Subject key identifier:   A9:B6:60:92:59:DB:AE:36:A3:1D:0A:5E:60:E4:9B:26:23:48:CF:3D
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number:          1CC5
Signing time:             Sat 02 Aug 2025 16:17:41 +0000
Manifest this update:     Sat 02 Aug 2025 16:17:41 +0000
Manifest next update:     Sat 09 Aug 2025 16:17:41 +0000
Files and hashes:         1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: gXTFXMDimhPGY/X73zFeRZ4ConOqZhX7IOHe4HVBhCg=)
                          2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=)
                          3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=)
                          4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=)
                          5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 16:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7397 (0x1ce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Aug  2 16:17:41 2025 GMT
            Not After : Aug  9 16:17:41 2025 GMT
        Subject: CN=688e3a25-a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:1f:fb:cd:a9:73:cf:51:55:55:61:10:1b:
                    01:f6:9d:07:26:e2:ef:6b:d7:2a:ca:95:b6:ac:15:
                    ef:3a:98:d2:0c:31:0b:a8:ed:24:9f:8a:89:ff:28:
                    de:66:e0:cf:f3:32:a1:e5:5e:09:ca:3a:4b:6c:0d:
                    15:72:c4:c7:03:1f:c7:d5:bc:de:ef:3d:74:cd:22:
                    eb:dd:cd:2b:5e:c4:cd:1b:a3:c9:d4:d7:5d:40:1a:
                    ef:b0:9b:bc:e3:3d:10:7a:2f:48:4f:53:fd:25:cb:
                    a4:ca:87:ce:ad:84:14:bd:e2:34:f1:d8:60:f2:f5:
                    76:54:ff:e7:d3:51:21:f3:29:ff:02:42:50:31:0f:
                    83:5d:d1:12:37:97:31:c4:50:b8:76:f4:79:0e:98:
                    b8:44:ad:a8:9e:46:4c:af:6e:37:31:db:4b:34:6a:
                    80:09:f6:3f:cb:71:a5:f7:4d:b8:8a:9e:90:7d:2f:
                    ba:6a:82:44:9f:0b:7c:5b:a1:33:81:03:d3:fa:7f:
                    7a:ed:c8:d9:e5:4e:a4:51:b4:4e:96:d2:a0:ec:ca:
                    87:d8:f7:34:9c:44:f3:61:d9:18:3a:cc:89:27:84:
                    c8:88:7f:98:cf:e1:4f:59:22:eb:5b:05:1f:9d:43:
                    23:b1:d8:82:ad:7d:99:6d:6c:44:56:c9:5e:93:1a:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:60:92:59:DB:AE:36:A3:1D:0A:5E:60:E4:9B:26:23:48:CF:3D
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:4f:0e:9b:37:17:0c:1d:b9:c3:c8:a5:5b:80:41:3e:fc:
         4b:19:d6:93:9d:aa:73:ac:71:89:90:b4:2b:b7:9c:29:56:97:
         ee:d6:ed:15:61:81:38:69:f8:63:88:79:ea:5a:8f:4a:f9:44:
         12:31:10:29:79:ae:e9:41:68:95:4c:0f:0f:a7:f0:d5:c4:01:
         5c:e8:8b:23:2b:35:64:15:a9:73:ed:2a:06:99:57:54:a7:87:
         16:0a:ee:6e:8a:78:00:46:e6:b7:42:f6:f1:5d:08:bf:0e:e9:
         a7:bc:8b:14:d7:4c:58:2b:de:09:f6:39:76:d8:cc:54:a5:a3:
         7d:92:d1:1b:34:5d:10:37:8e:0d:0f:98:f5:aa:33:9d:2b:71:
         c7:a3:d3:35:78:94:76:06:b7:a4:88:3d:3e:e2:1f:38:af:ca:
         47:23:84:e8:4d:6a:8e:ac:d1:85:4f:a5:50:18:53:2d:b8:7e:
         97:65:ec:12:9d:53:12:c0:ab:24:83:70:a9:df:e0:b1:51:cc:
         62:ba:93:e2:d4:26:63:fb:08:4b:49:ac:58:80:4f:bf:e8:e5:
         f8:4a:20:55:09:03:d8:26:6b:48:96:11:f2:c9:86:9f:53:cb:
         c5:46:d0:9e:b6:76:c2:be:b6:10:1c:9b:a8:6b:37:70:3a:f5:
         2f:f2:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:57 2025 by rpki-client