Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
File:                     JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json)
Hash identifier:          N6wDyVI6wGBLB9ELPvAVaN3/S9u2h3RZrToahu3Ala4=
Subject key identifier:   2B:48:11:8D:D6:C4:E9:FB:16:77:D6:0C:54:D9:E5:3D:98:1F:EF:EA
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Certificate issuer:       /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial:       13E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
Manifest number:          13D8
Signing time:             Fri 08 Aug 2025 17:06:48 +0000
Manifest this update:     Fri 08 Aug 2025 17:06:47 +0000
Manifest next update:     Fri 15 Aug 2025 17:06:47 +0000
Files and hashes:         1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: ISPmTrW6AUH7M7oSz9J6qf1mFPLjr/U/pVjvQcNutdI=)
                          2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5092 (0x13e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
        Validity
            Not Before: Aug  8 17:06:47 2025 GMT
            Not After : Aug 15 17:06:47 2025 GMT
        Subject: CN=68962ea7-d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:42:f0:f1:0c:56:87:b7:99:ce:2c:65:1e:
                    74:33:3b:ae:ba:1b:c2:c2:c8:6e:d4:e1:2e:ca:62:
                    31:89:04:3c:26:d8:2a:1a:5a:1c:80:65:50:f5:fd:
                    f9:16:f6:72:ce:0f:10:f0:96:84:eb:16:e2:f7:87:
                    f5:a3:a4:d5:51:be:bc:c6:71:f8:42:13:0c:d4:f6:
                    a3:cd:94:29:46:37:60:46:d9:81:21:90:d6:f6:f2:
                    47:4d:59:f9:13:a8:e3:4e:6d:7f:88:87:cb:75:f3:
                    88:58:98:0f:b3:ea:fc:dc:f5:4e:78:f1:b0:4a:79:
                    ef:34:20:42:c2:35:36:f4:c1:77:e9:41:16:1d:b2:
                    e2:bd:71:6f:0d:c7:81:93:19:c4:66:58:c9:a6:aa:
                    d4:cb:16:d9:cb:e9:45:b0:1d:97:0e:9f:c6:ae:58:
                    2f:4a:bc:7b:73:66:61:f4:ca:48:ef:e5:ea:f2:36:
                    71:1b:41:ac:ea:55:50:7d:f9:5a:b1:a6:6e:36:0b:
                    8b:01:0a:1d:86:19:d8:04:5a:f4:aa:0e:94:98:b2:
                    43:3e:6e:d4:8c:c3:9c:72:83:52:a0:e0:c2:38:72:
                    d8:22:62:15:1a:3c:3a:4e:71:84:e3:f9:3e:07:a5:
                    45:4b:0b:72:e1:70:47:b8:ae:0b:6c:cf:2b:8c:9c:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:11:8D:D6:C4:E9:FB:16:77:D6:0C:54:D9:E5:3D:98:1F:EF:EA
            X509v3 Authority Key Identifier:
                keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:4a:ea:04:90:75:11:9c:06:e7:7e:c3:60:4a:3f:a2:09:
         33:d2:d2:cc:f5:05:3c:6a:ef:2e:78:8a:c5:8f:f9:38:05:bf:
         e8:09:ad:89:05:53:6c:3b:78:fe:d5:70:27:82:ae:46:48:f5:
         17:b2:52:44:f6:c3:fa:79:43:53:1e:e0:5d:18:42:23:55:fa:
         1a:df:df:88:f0:bf:28:68:3c:13:16:84:c9:63:3e:97:b9:3c:
         5d:6e:00:6b:ce:5c:78:d9:59:24:83:b4:56:3b:9c:c2:48:33:
         56:ea:e2:de:18:12:de:20:68:ab:fb:e5:73:72:7d:bb:35:c8:
         a0:2d:99:18:64:5e:e1:7d:6e:4b:08:8e:db:26:88:b0:cb:35:
         32:f1:ef:51:e4:d4:a5:db:81:ed:91:9b:2d:6c:8d:34:b9:cb:
         60:1b:6c:e7:6d:49:6d:ba:1b:19:d5:c7:f5:b8:0c:44:f7:1c:
         61:35:e5:a2:5f:a2:a2:5d:44:6a:55:00:ab:ae:ca:58:fe:56:
         8b:68:d4:4b:21:1e:83:ed:eb:b9:7f:79:ba:09:a8:a7:3e:43:
         58:3a:75:f1:7f:5b:ae:8f:b1:d6:47:74:8c:c2:f4:25:2d:2e:
         f6:78:69:79:ab:eb:d2:e6:4a:e4:dd:a3:2c:c0:dd:63:fb:b5:
         4c:05:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:39 2025 by rpki-client