Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
File:                     Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft (raw, json)
Hash identifier:          It8mi3Si3tyYOkqI0Ehn3/Y/wqHXpKpIXWE4/9pqbWw=
Subject key identifier:   2F:2D:BD:8D:0D:1F:1F:15:ED:65:5F:CD:58:E1:D0:BA:5C:B6:48:97
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
Manifest number:          059C
Signing time:             Fri 08 Aug 2025 23:57:16 +0000
Manifest this update:     Fri 08 Aug 2025 23:57:15 +0000
Manifest next update:     Fri 15 Aug 2025 23:57:15 +0000
Files and hashes:         1: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl (hash: ihGMChDwmsdeJdUeMBk9SQ8cDCqUFpVdvdWjR8cL08E=)
                          2: 7480CB3208B611EDACE57065C4F9AE02.roa (hash: jCyCwXm2Df4axWoR3z9z8QPYmH54HyaICAVLuHdPDBc=)
                          3: 3962A56E5E0611EF8CB1F080C4F9AE02.roa (hash: 4xd2mN7Ax5rC2kZFZqcKmtUdp723D1QNJshZsXWgNB8=)
                          4: 76FA56B208B611EDACE57065C4F9AE02.roa (hash: I3TiTQI97S/iDWNW5QBw/7N6MZUvJuhLqCD9/DcXYyI=)
                          5: 76C6B0C8105511EC92580578C4F9AE02.roa (hash: AeUmdwcVij3HFSAcGAmt39HQJ7vVDDJX/2H5sMcrxhs=)
                          6: 7BE0CE60064911ECA853EB0FC4F9AE02.roa (hash: H5rhtkxiQCl6KawX/ZNxAsms3H+CgSSnGfvvoD3OwOU=)
                          7: 32E806F8878111EF9723F25DC4F9AE02.roa (hash: L5F1KGoYu5YZs+u9JEEumkpFuC41Zd5SKoGIwNq4vo0=)
                          8: 7B2B3168064911ECA853EB0FC4F9AE02.roa (hash: LJFG0FHuNHdH5wLtq3ShFCXW+xDnUS2QORT5xkQz4wI=)
                          9: 52564FC4836B11EE960BCA6FC4F9AE02.roa (hash: 1VJie0nCCZ3IBg900OIXPZucge83OX3RKmMvS9NKEBI=)
                          10: 9E8B4A3AB3B111EF8237BD72C4F9AE02.roa (hash: yr2wfquGHtrtVK4EjS3koNoxx+PtkmLBM4rgPfXzU3k=)
                          11: A3F69D08606D11F0AFBFBA71C4F9AE02.roa (hash: Wh2rdXz596XArZ4ildyIHGZ323rhgJZOySWgiSbVwpc=)
                          12: 4235F184DACE11EE8E67437CC4F9AE02.roa (hash: vC4UXjrHJ1z922WJWauMC07igQR8ZXrGlrFMLMIIdmQ=)
                          13: FE8AECB2607511F0901D374BC4F9AE02.roa (hash: iOnrWmkX18D7v3AwIq+ETOmXIAlQ80y89CHDQbanBbE=)
                          14: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (hash: S17jIs4ShXG/RDAI0ZHM+AsahRZnrIs9ci+3zHbr4D8=)
                          15: 791CA9EC064911ECA853EB0FC4F9AE02.roa (hash: Zj+n3qCyttH1ytU/yYNlhTWLTLTdnPQuAiYhIwxo9yE=)
                          16: 1D6F108A00D511ED9262EB53C4F9AE02.roa (hash: ER+mxMq7fWPop6Mh+I1B9cH//3Uv1rN8D8hXzTSIngw=)
                          17: F008FF08C22111ECB9FFB964C4F9AE02.roa (hash: cXjBvsRtIl+svOWf/EyRWnjN1gNAqB+MSWIrUrqj+AE=)
                          18: 9A7D9276665111EEAD781D28C4F9AE02.roa (hash: fgna4BFgY5fgXbtzlexb8AOJAD7eWBfMbx6rHPbmSBk=)
                          19: E13F8A68B3B011EF831E2748C4F9AE02.roa (hash: MQzeFjEdBFycQhi11Jp6s1Mnogtfz7WV2I//Hm39pik=)
                          20: 99C5A4CC201211EC8520994EC4F9AE02.roa (hash: z66+1lPfe2iKYHWapE3bg9lGWW5L9dGBakRNIKeqUAw=)
                          21: 73D3C5B808B611EDACE57065C4F9AE02.roa (hash: LETgw7oicQYo9EsyRO0ibmzq7tk3+7ky4OG3X+896Ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug  8 23:57:15 2025 GMT
            Not After : Aug 15 23:57:15 2025 GMT
        Subject: CN=68968edc-4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:e7:4b:3f:7a:19:45:d3:55:51:74:94:e0:
                    83:f8:09:91:89:a5:79:02:5b:a0:14:a4:95:6c:3e:
                    89:09:84:6f:e0:2f:3a:eb:fa:46:78:b4:ae:d9:29:
                    1e:a9:eb:03:74:9a:35:77:48:36:ac:9d:4c:08:f7:
                    1a:97:20:13:cd:29:53:8f:d8:3d:d8:3a:6c:31:f3:
                    b4:29:85:c4:1c:74:df:b0:33:f7:c1:e3:34:27:a2:
                    fd:6d:0d:05:5e:13:cf:f3:53:d4:a6:a0:42:97:a9:
                    f1:a3:70:dc:6e:06:f3:2f:52:e8:80:fd:1f:e3:6d:
                    f6:c2:ed:f8:f8:53:2b:f2:b8:2a:be:e1:09:1e:f8:
                    65:ab:6f:58:c0:29:6c:57:b1:30:a7:84:5f:03:4e:
                    6a:f4:ed:80:30:16:ba:8e:f9:6f:8a:12:7d:5e:58:
                    1b:6f:79:ab:73:7b:ca:7a:e3:ce:1e:83:70:41:44:
                    77:08:3e:5a:da:ca:18:93:4e:a0:fc:bc:06:5b:c3:
                    30:ef:e7:e9:95:9e:29:f5:2f:06:fc:e1:68:d7:a7:
                    27:ea:50:43:29:8f:5f:3d:62:f9:72:08:ae:c4:ab:
                    10:db:a4:2d:e3:62:c8:7f:43:18:26:68:f2:31:e6:
                    92:12:cf:c0:f0:37:e5:93:99:0a:99:fd:52:10:de:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2D:BD:8D:0D:1F:1F:15:ED:65:5F:CD:58:E1:D0:BA:5C:B6:48:97
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:d6:01:24:e4:51:fe:c3:00:6c:4b:c4:71:a6:ec:97:86:
         b6:1b:c2:f1:9a:37:44:d1:d3:df:88:ba:4b:96:00:6e:cf:7e:
         6b:79:3f:02:55:50:73:cc:3c:7e:6e:8c:9e:04:e7:bf:42:7e:
         c1:3c:50:46:14:91:2d:98:9d:72:de:2c:1b:f5:36:2b:ed:c3:
         42:23:9d:34:f9:d8:be:8a:84:28:57:7d:53:74:f2:c5:8b:17:
         ef:4f:ed:7c:36:de:9a:90:28:30:0d:a0:d5:fc:2e:46:4c:24:
         fb:b9:67:73:4f:7f:91:f8:81:54:e7:03:70:42:7c:25:ee:a4:
         21:9c:e5:b4:76:9f:13:bf:cf:7d:ad:ac:3a:e1:e0:f9:20:ed:
         1a:ef:a0:d2:fe:1d:56:78:6e:ee:92:48:6d:5a:6f:6e:e8:2d:
         41:c4:05:af:b6:9c:b4:7d:70:b1:3c:74:dc:fb:fb:82:e0:58:
         f6:cc:9a:12:ed:d5:f1:e3:1b:d6:2e:ad:85:47:95:96:d6:2d:
         b4:3f:97:0e:f5:a6:fb:d1:7d:52:eb:00:7a:bc:be:b5:73:1b:
         fd:cf:2f:b1:d0:5a:69:9a:51:d7:8f:f5:dc:e3:72:84:59:1a:
         69:d5:66:59:26:eb:5a:b6:56:f6:ef:66:56:68:28:48:6a:68:
         91:81:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:45:22 2025 by rpki-client