Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File:                     Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier:          Bs9KMPNt5n9XGIACWBvJQMcEPH1CqlMPbLXfGpGPnnw=
Subject key identifier:   3E:2C:6C:BB:A0:02:A8:44:43:3C:CB:3E:75:C6:6E:28:4F:79:05:92
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer:       /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial:       05B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number:          1F16
Signing time:             Sun 10 Aug 2025 16:22:32 +0000
Manifest this update:     Sun 10 Aug 2025 16:22:32 +0000
Manifest next update:     Sun 17 Aug 2025 16:22:32 +0000
Files and hashes:         1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: 9XZsz9JYW8v32r7o0qr6hX6VfgW3qCVf69jFRHbtQ7I=)
                          2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
                          rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
        Validity
            Not Before: Aug 10 16:22:32 2025 GMT
            Not After : Aug 17 16:22:32 2025 GMT
        Subject: CN=6898c748-b8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:af:cf:99:05:c6:65:6b:1b:3b:60:11:00:
                    14:ed:fb:48:f3:5b:71:dd:fd:50:e2:ac:35:58:d8:
                    0d:a8:9d:ad:fc:2b:dc:fc:10:2e:3c:da:99:81:c7:
                    fa:61:2e:5d:51:85:d7:f1:76:4e:91:29:de:2b:24:
                    2a:16:73:d6:0f:88:a2:2c:42:1c:cd:df:b9:b3:94:
                    db:5c:ef:e9:2e:b3:57:40:5e:e3:a5:da:54:92:1e:
                    bf:2e:3c:3a:54:49:76:c4:ab:5f:91:6c:f9:15:86:
                    84:c5:86:64:af:f4:f1:99:ba:23:b1:7a:ec:aa:89:
                    7f:24:38:68:2f:97:ef:c7:33:16:bf:de:de:42:ad:
                    05:3d:bf:0c:a9:84:c9:d4:23:f6:9f:2d:86:04:3b:
                    4a:ef:e0:89:80:d0:8c:53:ea:15:79:30:ba:96:81:
                    b8:88:86:b6:ed:d2:ec:23:cf:b8:bb:18:0a:93:57:
                    45:5c:19:aa:b9:d6:20:9b:e0:c3:e0:77:f4:8e:a2:
                    97:35:d1:dc:6e:b1:99:88:3f:81:49:0b:e3:99:77:
                    ee:a0:ee:71:19:e8:00:76:67:f7:d6:f8:12:10:d0:
                    5a:14:c6:a2:74:08:ae:dd:e1:9f:c5:f3:46:8c:5e:
                    77:8c:23:ee:6b:73:26:b8:0c:34:d6:be:90:06:a2:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:6C:BB:A0:02:A8:44:43:3C:CB:3E:75:C6:6E:28:4F:79:05:92
            X509v3 Authority Key Identifier:
                keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:58:0b:1c:f1:4b:e8:bc:60:ad:8a:e7:34:c5:f5:ff:25:
         50:b7:dc:1c:c3:2f:a1:7d:15:22:c0:71:c3:44:c8:cc:1e:8b:
         75:ea:de:05:2f:ff:a8:ce:40:1d:7d:87:09:fd:cf:ff:cf:76:
         f4:a5:17:66:d6:1f:96:51:99:e5:9f:d7:ff:57:e1:2b:ca:f4:
         51:34:cb:98:f6:b1:a1:84:10:cf:22:d0:0a:20:63:bb:b7:b2:
         ef:e9:99:a2:bb:2a:93:93:3a:44:7c:07:2d:a6:c7:70:c7:e7:
         ac:16:7b:1c:5c:66:af:9e:f0:f0:49:d4:3b:1b:c5:ee:c2:d1:
         8e:71:19:10:f1:6e:ea:67:37:8a:9e:e0:05:ae:da:fc:e4:df:
         de:25:24:e3:f5:40:10:21:19:8f:75:be:15:68:76:91:fe:27:
         53:3a:4a:9b:95:ab:02:16:46:0a:75:f4:5f:30:8e:7b:77:8b:
         a0:96:eb:bc:14:58:8d:91:c3:79:92:6f:a3:c9:cf:4c:3f:ce:
         62:33:c8:38:d4:1f:15:61:5b:fc:dd:16:e2:5b:24:fe:f7:56:
         ef:e7:45:6d:71:73:2d:4e:4b:28:23:28:34:f1:df:0c:62:b5:
         66:9d:8f:e8:6a:d9:59:f2:1b:f0:e8:a4:33:c4:a1:74:f5:4f:
         1e:ec:a4:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE
NDE3QjdGQUQwHhcNMjUwODEwMTYyMjMyWhcNMjUwODE3MTYyMjMyWjAYMRYwFAYD
VQQDEw02ODk4Yzc0OC1iOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3+vz5kFxmVrGztgEQAU7ftI81tx3f1Q4qw1WNgNqJ2t/Cvc/BAuPNqZgcf6
YS5dUYXX8XZOkSneKyQqFnPWD4iiLEIczd+5s5TbXO/pLrNXQF7jpdpUkh6/Ljw6
VEl2xKtfkWz5FYaExYZkr/TxmbojsXrsqol/JDhoL5fvxzMWv97eQq0FPb8MqYTJ
1CP2ny2GBDtK7+CJgNCMU+oVeTC6loG4iIa27dLsI8+4uxgKk1dFXBmqudYgm+DD
4Hf0jqKXNdHcbrGZiD+BSQvjmXfuoO5xGegAdmf31vgSENBaFMaidAiu3eGfxfNG
jF53jCPua3MmuAw01r6QBqIoUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4sbLug
AqhEQzzLPnXGbihPeQWSMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4
MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V
X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANk1gLHPFL6LxgrYrnNMX1/yVQt9wcwy+hfRUiwHHDRMjMHot16t4F
L/+ozkAdfYcJ/c//z3b0pRdm1h+WUZnln9f/V+EryvRRNMuY9rGhhBDPItAKIGO7
t7Lv6ZmiuyqTkzpEfActpsdwx+esFnscXGavnvDwSdQ7G8XuwtGOcRkQ8W7qZzeK
nuAFrtr85N/eJSTj9UAQIRmPdb4VaHaR/idTOkqblasCFkYKdfRfMI57d4ugluu8
FFiNkcN5km+jyc9MP85iM8g41B8VYVv83RbiWyT+91bv50VtcXMtTksoIyg08d8M
YrVmnY/oatlZ8hvw6KQzxKF09U8e7KQk
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:58 2025 by rpki-client