Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File:                     JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier:          BtyLlU/lkvufJJgZPQwiLchd1aWNCktikG9KYjzAo3M=
Subject key identifier:   32:3C:6E:C2:F7:6F:90:27:88:B9:A8:1F:84:3B:84:14:60:15:78:1C
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number:          01C0
Signing time:             Fri 13 Jun 2025 02:04:38 +0000
Manifest this update:     Fri 13 Jun 2025 02:04:37 +0000
Manifest next update:     Fri 20 Jun 2025 02:04:37 +0000
Files and hashes:         1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: uVe9opUjhCbBdAVkAXoXl9b/gBPVnDje3RxnwH0prFA=)
                          2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=)
                          3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=)
                          4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Jun 13 02:04:37 2025 GMT
            Not After : Jun 20 02:04:37 2025 GMT
        Subject: CN=684b8736-0bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:fd:1b:4c:5b:27:e9:91:b9:ff:ab:84:dd:
                    0f:d8:9a:76:5f:20:62:d3:b4:22:9b:0e:2c:61:75:
                    bf:d5:12:f8:92:76:87:07:8a:06:58:27:bc:18:ad:
                    a4:2b:9a:f1:82:14:de:3b:09:77:3d:41:63:7e:32:
                    57:b2:0d:c2:9f:d7:7a:cd:69:f2:c6:c3:bb:22:2b:
                    df:70:b7:72:c8:64:f3:f3:eb:64:25:9d:b1:a3:46:
                    76:e8:2f:d6:09:8d:98:4b:e5:5b:b0:24:cb:a1:3d:
                    45:01:98:1b:45:03:78:01:b8:14:ca:ca:d7:7d:1f:
                    28:b6:cd:a0:c3:6c:d8:49:60:bd:1f:3e:5f:86:d3:
                    9f:f5:a5:40:c9:90:cc:a2:cd:d6:e1:0d:db:92:4c:
                    0a:43:72:d5:63:c2:14:4b:e0:3d:f1:73:56:08:53:
                    82:20:53:fe:0f:50:87:6f:6f:82:87:18:73:b1:37:
                    77:a0:80:44:fd:14:c1:ab:92:5e:2b:3b:69:00:4b:
                    ef:62:e8:7e:6c:b6:ac:46:3c:38:33:af:95:b5:2a:
                    4f:6f:14:5e:3b:3f:41:af:75:a9:c0:c5:49:74:ad:
                    0e:52:51:3d:50:37:cf:14:3f:0e:94:df:4c:35:f2:
                    7d:6d:af:73:fc:9a:0c:93:43:d6:e8:81:28:8f:e1:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:6E:C2:F7:6F:90:27:88:B9:A8:1F:84:3B:84:14:60:15:78:1C
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:37:ae:7a:e7:9a:7f:76:70:50:27:8c:04:39:20:12:49:3f:
         71:54:28:4b:85:7f:5c:33:f7:61:60:ef:ec:f2:39:92:42:88:
         ba:bf:7b:85:47:57:14:ce:e5:77:c0:02:1b:8c:10:ea:c8:a6:
         97:11:8a:84:34:c3:c2:84:a2:f7:31:07:01:f0:8b:64:ec:12:
         ff:cf:40:5d:19:66:0c:b2:d6:52:5f:9f:60:70:d6:43:ec:f8:
         f2:69:d8:93:dd:59:73:52:a4:82:e6:12:f4:61:3b:99:47:6e:
         2c:c1:97:20:c3:98:25:b2:10:5d:fa:52:2b:ed:a4:08:e5:61:
         62:65:7f:77:ed:65:ce:07:0b:70:a8:95:2c:6e:59:de:55:94:
         01:48:6a:2e:16:3e:a5:8e:eb:4d:cc:4a:4a:22:a7:7f:94:28:
         8a:ec:8a:ff:49:45:6a:b6:43:10:53:ee:96:ac:4f:02:6b:b1:
         68:ca:96:fb:c0:19:50:e5:70:da:8b:11:58:dd:2e:af:ae:bd:
         62:48:55:51:60:1b:72:71:80:79:95:0e:f4:de:fb:de:40:96:
         c2:e9:ab:04:fc:04:26:37:c7:f5:f4:02:35:a8:a9:62:f3:9e:
         f1:de:63:ed:12:85:3f:b1:54:0a:16:ea:2e:33:c2:ff:49:1b:
         1f:56:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:40:47 2025 by rpki-client