Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
File:                     J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json)
Hash identifier:          +j7/KRgHhBbBbVRDmmq+12v5taymMtCvSy+5twcot7s=
Subject key identifier:   72:B7:F8:14:58:3E:6B:87:AD:0E:1E:16:4C:0A:0F:9E:91:E5:97:2A
Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E
Certificate issuer:       /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
Manifest number:          010B
Signing time:             Fri 25 Apr 2025 04:09:42 +0000
Manifest this update:     Fri 25 Apr 2025 04:09:42 +0000
Manifest next update:     Fri 02 May 2025 04:09:42 +0000
Files and hashes:         1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: leA2jBj/xjFbQSmSMi1We+apeRV0Aeyt7G/dscvKWQ0=)
                          2: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: 6C7RQu6L/61k8kBeOezAxwREknY0f6jdNOm/o1EQWNU=)
                          3: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: KtraNK6MUNFprY77t8YkGpzesemeP8OiSjIlbxZgo0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E
        Validity
            Not Before: Apr 25 04:09:42 2025 GMT
            Not After : May  2 04:09:42 2025 GMT
        Subject: CN=680b0b06-9b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:cb:48:af:66:5a:60:13:47:19:ca:c5:bc:
                    11:54:72:48:ab:99:97:ff:71:0c:71:26:6a:ca:83:
                    54:ed:4a:00:97:8f:e1:8f:43:33:ff:20:ce:2a:fd:
                    c1:fd:c5:6c:26:57:4d:e8:e9:53:42:43:c0:8e:55:
                    02:3f:e3:e0:db:2a:c1:c5:08:49:f3:70:08:29:d4:
                    41:c7:12:5a:19:94:45:e9:d4:67:40:6f:d5:48:1c:
                    16:1e:86:0d:83:1c:cb:01:2a:8c:96:0b:53:94:c8:
                    21:2a:b2:fd:03:63:11:69:cb:61:de:09:df:df:ba:
                    b4:b5:1e:fa:1b:30:50:c0:7b:b8:63:93:ce:13:88:
                    83:28:aa:ba:1c:ad:b3:9a:cd:39:6e:66:38:2d:d9:
                    3d:65:9f:ff:e7:0e:f3:09:40:e4:2e:ca:11:b7:77:
                    fa:b9:c9:e1:32:c9:f7:49:f2:0e:44:2c:71:e5:bb:
                    36:80:d8:f2:31:ca:65:f8:90:5a:ca:fd:38:fc:76:
                    b5:12:d5:96:84:27:45:70:c6:03:d2:9d:62:09:14:
                    44:de:5e:c0:e7:92:8e:54:88:e7:4a:9e:15:da:7e:
                    a7:c3:ee:19:e2:21:17:ac:e2:49:f3:de:5d:c4:fc:
                    7e:40:44:54:1e:d0:10:fc:95:2f:4f:f6:38:c8:60:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:F8:14:58:3E:6B:87:AD:0E:1E:16:4C:0A:0F:9E:91:E5:97:2A
            X509v3 Authority Key Identifier:
                keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:76:80:60:69:7a:9d:01:b1:27:4f:7d:f1:9c:c6:bc:57:95:
         7d:ae:a7:70:69:67:8a:94:39:03:e0:48:a2:95:9b:5d:c5:b1:
         50:4a:c1:9d:11:64:9d:26:b9:05:05:db:22:49:6b:14:a6:5e:
         5b:6e:f3:23:5d:4d:69:dc:d9:a0:e5:a4:37:da:66:7a:9b:aa:
         8a:fe:e4:06:eb:ac:5e:41:e0:28:a4:de:a3:b1:e0:fb:68:d9:
         16:42:88:f6:af:0a:dc:e2:ae:86:37:99:d9:67:34:31:0a:a5:
         cf:38:f4:fa:ac:bd:1f:52:9a:7c:12:b4:34:4b:bc:2c:54:5f:
         66:51:d1:7d:e7:c9:83:19:8c:6e:98:99:e0:b4:ab:9b:7d:35:
         08:a7:75:61:8a:75:e7:09:66:66:94:18:2c:0d:50:73:9f:68:
         47:f7:c0:22:77:80:e3:1e:c7:36:5b:a8:ff:1e:d5:97:94:67:
         e5:5b:2f:a6:b8:71:bf:48:1b:38:56:6a:8f:2c:d4:9e:a8:83:
         c9:4a:c3:f1:cb:02:66:4a:e9:01:a2:8a:af:db:06:cb:48:58:
         fe:cf:e6:41:79:6f:f4:97:4a:c9:82:7e:11:2e:6d:6a:94:51:
         1a:ab:c1:05:7a:cf:c2:dc:ff:eb:d1:b8:92:d2:2e:dd:e8:d3:
         32:69:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:16 2025 by rpki-client