Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
File:                     1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json)
Hash identifier:          EFKoifdVeA05xW7BxvNDk6YleRFwF/WP702M+TbXgbs=
Subject key identifier:   C9:72:C3:B2:2A:03:16:D5:9F:61:F8:4A:C3:98:A8:6D:F6:EB:E3:AF
Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
Certificate issuer:       /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
Manifest number:          15
Signing time:             Sat 09 Aug 2025 08:30:44 +0000
Manifest this update:     Sat 09 Aug 2025 08:30:44 +0000
Manifest next update:     Sat 16 Aug 2025 08:30:44 +0000
Files and hashes:         1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: yRdqMsVXOWr5UTj9J3xaLvAlY03WnY3hBeDrnLf0AOc=)
                          2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: Ia+Jmu8TncD8IiScdaf8hIm9nx7VvvKZ6Drg9K1HDyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
        Validity
            Not Before: Aug  9 08:30:44 2025 GMT
            Not After : Aug 16 08:30:44 2025 GMT
        Subject: CN=68970734-c091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:d6:dd:20:93:c2:56:6f:0f:f2:f9:a6:2d:
                    41:fb:61:aa:c3:85:fc:15:84:e6:50:f3:47:76:e6:
                    59:2b:44:39:8d:42:bf:ac:0d:41:f5:2c:74:aa:ea:
                    56:5f:14:2b:9f:81:85:7e:fd:96:32:b5:1e:f8:f9:
                    32:5b:ff:ea:73:74:7c:da:b3:b8:a5:c0:5a:14:ac:
                    f1:29:ac:e1:d8:e3:62:5b:bc:f9:e4:cd:0a:40:81:
                    a2:8f:f1:af:bd:6b:59:63:b8:29:c5:84:02:11:50:
                    b5:49:84:5e:22:7b:d4:9d:0f:75:25:90:a3:4d:93:
                    0c:f8:f9:fc:c6:b3:bf:e7:76:47:76:a9:04:cb:59:
                    a2:52:3d:0d:a8:b9:d3:99:cd:32:15:f1:29:44:a9:
                    ff:a5:56:49:6e:99:7a:5a:e2:9b:5a:13:1e:4f:4d:
                    a3:78:16:c1:e8:ba:10:01:8c:4c:e3:c5:be:03:ee:
                    a3:7a:f9:9a:ba:8f:72:43:4f:6a:51:9f:90:18:c8:
                    94:3b:f2:68:31:96:da:f4:29:4e:96:30:4c:93:92:
                    0d:c8:f6:76:c1:dc:c8:78:79:2c:6d:b7:ae:c1:30:
                    c6:81:be:86:62:a8:9c:db:c7:0a:cb:8f:50:18:03:
                    5b:10:c9:a5:14:d3:f8:dc:b0:a7:27:2c:51:f4:db:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:C3:B2:2A:03:16:D5:9F:61:F8:4A:C3:98:A8:6D:F6:EB:E3:AF
            X509v3 Authority Key Identifier:
                keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:6e:be:58:cc:4c:44:77:4c:b5:dc:5a:47:a5:e8:91:b2:
         18:cf:f6:8d:9f:1c:b0:b4:8c:f5:c3:36:46:d8:f5:9e:f1:bc:
         ac:a9:fc:49:1e:dc:82:1b:47:e7:08:d7:d2:8f:e9:3c:08:46:
         e8:79:34:d6:9d:3a:fc:a4:07:1b:cc:79:2d:b8:9e:36:9c:27:
         93:48:1f:5d:8d:47:b4:d0:3a:85:65:c5:cf:63:ed:ac:17:28:
         07:80:e5:59:bc:da:3f:63:09:d4:16:c4:02:25:e0:9d:ae:5c:
         55:06:87:ed:58:1a:eb:8a:6c:5c:70:6a:45:ae:97:22:cc:dd:
         07:a5:24:45:2a:35:27:20:5f:f3:e2:4c:40:b1:d8:e1:c4:c5:
         6d:a1:71:d5:9c:56:1b:16:60:fc:46:e7:6f:32:47:f3:23:25:
         e1:da:bf:2c:28:9e:fa:d8:0d:03:c2:24:f3:b8:c3:26:1f:9a:
         07:77:fc:8e:dd:9b:e5:24:a1:87:68:46:50:9e:0d:ad:fa:de:
         4c:27:42:c8:ad:e5:12:9c:ac:dd:fb:d1:b5:ee:5a:04:b6:45:
         64:ad:59:a9:56:8d:47:89:40:c3:eb:8e:c6:7f:d4:0a:e8:e8:
         db:38:b3:45:f8:47:81:7f:90:0e:d0:1b:0c:62:cd:58:fa:2e:
         df:bd:99:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:47 2025 by rpki-client