Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          M7ywg8emjEV0/oVAPKj6G8OgmTl2IgZJfh3MlZLQfIg=
Subject key identifier:   F8:D8:FF:7F:52:43:9B:A0:49:02:85:65:9E:6D:97:57:38:E2:A4:7B
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          60
Signing time:             Sat 19 Jul 2025 07:18:29 +0000
Manifest this update:     Sat 19 Jul 2025 07:18:28 +0000
Manifest next update:     Sat 26 Jul 2025 07:18:28 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: Ht/oBWjcmufe9VkvVmHJZn8Q9r0s+cZV6Bgv3CMMPD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Jul 19 07:18:28 2025 GMT
            Not After : Jul 26 07:18:28 2025 GMT
        Subject: CN=687b46c5-93f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:91:e4:e4:72:32:49:ff:14:e8:08:d8:26:
                    c1:db:e2:7f:03:07:40:c7:dd:bc:51:db:df:dd:14:
                    fb:83:9c:41:8f:30:5b:07:6f:72:7c:ae:ed:e8:dd:
                    89:f2:88:d6:69:f1:cc:d9:ed:35:60:d0:f0:b6:78:
                    49:84:94:54:0a:83:20:58:7c:e8:73:35:31:d3:80:
                    d4:77:76:25:4d:3f:d8:d9:b9:99:c2:c2:0f:85:eb:
                    86:06:13:41:2d:0d:41:eb:a9:8c:b6:2e:10:f9:56:
                    15:83:83:09:69:d4:ba:92:28:5a:c5:1a:e1:45:79:
                    f4:ad:b6:17:6d:97:50:15:1b:5e:7e:bf:85:75:fc:
                    b7:bc:0b:88:06:94:16:ac:8e:ae:c2:f2:62:9d:d9:
                    a5:38:82:82:f2:d6:0c:93:c8:c6:c3:d7:15:93:66:
                    8e:af:fb:8d:5e:70:40:fc:ad:fb:a1:0a:fa:3b:1f:
                    ad:6d:38:4f:ad:dc:9f:b8:cf:91:48:e5:8d:cf:18:
                    f1:28:88:16:96:ea:fa:a8:7c:d7:79:ea:61:2a:e9:
                    55:83:07:a5:bb:9f:84:4c:32:e2:73:ad:92:16:65:
                    45:a9:f7:3b:91:7d:4c:1a:3a:4f:66:06:32:ec:f5:
                    8e:b2:18:4d:45:a9:19:87:b1:60:04:1d:28:19:29:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:FF:7F:52:43:9B:A0:49:02:85:65:9E:6D:97:57:38:E2:A4:7B
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:20:26:c9:70:86:f4:be:6c:93:39:ce:35:72:82:6c:71:
         76:23:ad:ed:93:91:bc:3c:6f:ec:19:c5:31:bb:13:fb:11:f0:
         90:78:45:6f:11:10:19:6c:aa:8b:f6:f8:cb:4a:29:f6:88:5b:
         0a:6b:79:c7:34:de:a8:2a:04:91:33:a7:77:26:e0:44:47:3e:
         ba:16:1a:64:cf:54:ca:ed:e1:08:ee:38:8e:cf:4d:47:21:a0:
         4e:b3:48:41:de:7a:f1:f6:69:ad:0b:c8:3c:37:8b:94:ca:40:
         bf:e8:e7:12:9d:e6:51:92:54:6b:bf:f6:84:9c:b6:72:18:eb:
         49:ad:ae:85:94:88:cf:1c:23:c7:8e:51:bf:4e:a0:ff:dd:29:
         f1:98:22:02:8d:73:b0:a6:08:9b:b3:cf:c6:d6:d8:e0:ab:6b:
         24:03:1a:6b:de:9b:9d:f7:cf:8b:d3:bf:f7:0f:9e:36:15:6c:
         b8:0c:6f:eb:c5:93:3d:16:41:08:dc:b0:d4:91:d4:13:96:12:
         38:55:ef:39:67:f6:49:34:5a:71:3e:dd:5f:04:2b:64:51:9b:
         a4:0f:28:b6:20:d5:1f:bf:8d:cc:62:0a:fb:5a:93:09:78:b1:
         ee:73:e8:37:af:c7:12:57:3f:34:51:98:25:1a:c5:36:0c:c9:
         cd:d8:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 01:58:31 2025 by rpki-client