Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          k+nW9cL8sZsQ5FoLqSrCBrVFuRYGjFgJ8oMfh0Ev/GA=
Subject key identifier:   60:DF:24:79:8F:F0:CE:90:51:B1:B6:F1:11:4C:79:C7:99:EA:C7:12
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0C89
Signing time:             Thu 24 Apr 2025 18:09:22 +0000
Manifest this update:     Thu 24 Apr 2025 18:09:21 +0000
Manifest next update:     Thu 01 May 2025 18:09:21 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: ubPAmwV1JbEmJIFlaFbvFVImFLQ8D0NCYpXVmWwoW6A=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Apr 24 18:09:21 2025 GMT
            Not After : May  1 18:09:21 2025 GMT
        Subject: CN=680a7e51-1577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:68:79:43:44:af:2d:38:af:c5:2f:5b:2a:
                    25:5b:ce:59:05:0e:65:61:5b:94:34:d2:23:c2:66:
                    c7:5c:29:6f:79:12:4b:59:5a:89:d0:24:23:2c:74:
                    10:1b:0c:3a:f4:52:61:8c:d1:ca:84:83:5f:a0:61:
                    62:7f:f0:03:6a:47:81:f9:e3:f3:d3:ed:48:d2:0d:
                    f4:f3:a0:64:74:be:4e:50:49:cc:0c:18:81:09:96:
                    9d:d8:58:63:2d:53:b4:35:07:8f:07:c6:f4:a8:d9:
                    8d:f2:c5:fc:68:54:5a:34:2a:46:9e:9c:eb:40:53:
                    07:85:a8:8e:69:0d:df:a3:a9:3e:af:54:58:35:54:
                    ee:2d:03:4c:0b:36:69:1b:78:bb:0d:90:81:a2:eb:
                    87:21:4a:32:2e:d7:8b:c2:96:d7:37:da:6e:3e:79:
                    a5:db:9a:b1:3c:91:5f:3a:09:67:0b:f2:ec:6a:6a:
                    42:e1:58:2a:0a:a7:f4:2d:35:bd:48:a1:4c:67:67:
                    14:b7:8f:7d:af:fd:66:de:7d:da:d9:d8:5b:f6:32:
                    e9:b0:13:e4:7f:24:d9:57:32:a1:ce:98:a9:f1:02:
                    24:cd:a4:b7:84:43:8f:ba:f3:7b:ca:88:7a:ad:94:
                    54:80:4d:d1:ad:07:0a:99:8f:12:f8:48:d4:01:71:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DF:24:79:8F:F0:CE:90:51:B1:B6:F1:11:4C:79:C7:99:EA:C7:12
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:10:cb:3f:bb:54:60:a5:15:fd:7d:f5:df:74:da:e6:ef:69:
         28:4d:0f:2e:c8:62:26:cb:8e:70:de:3a:7d:7f:cd:01:d4:38:
         ea:5b:c5:3f:0c:55:79:38:90:44:d0:e0:ef:44:35:a3:fe:93:
         8a:b6:cc:aa:af:52:cd:4a:b7:85:4c:61:c5:78:d1:df:f7:04:
         17:3a:93:0a:ed:29:77:70:1c:37:89:2a:31:84:a4:1f:b0:b3:
         ae:61:af:1f:65:f3:2c:fd:1f:2e:12:7e:0d:e0:de:f3:88:2e:
         90:16:ff:88:f1:c6:bd:0b:85:32:6e:c1:fa:7d:fa:76:54:99:
         75:47:88:7f:65:13:76:79:bb:cb:bb:9c:9d:0e:6e:9a:9e:08:
         68:34:6b:2e:3a:66:03:e3:c0:ed:6e:eb:c8:9f:d8:a0:01:1b:
         5b:72:a7:5e:69:0b:6d:1a:4a:28:46:1e:92:df:54:98:e4:78:
         c0:56:55:5a:6a:e5:39:0b:a9:af:aa:e0:4c:20:95:75:02:f0:
         81:ee:0c:a7:9e:2b:0b:a6:4b:ad:5a:49:55:24:30:3c:3e:77:
         70:fc:31:45:cb:53:80:95:d1:18:e8:12:29:e8:21:b6:b2:c7:
         c3:65:15:85:07:54:aa:d0:56:d1:a1:d1:6d:c2:fd:1d:38:43:
         23:f4:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:29 2025 by rpki-client