Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File:                     JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier:          tveairmpRxa2gFOZAa9o8WgYl6GRzUZsVeH8a3NTAnk=
Subject key identifier:   EE:19:37:E1:60:36:7F:2D:78:71:D9:80:8E:63:52:C0:A0:F1:27:6A
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       1078
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number:          1070
Signing time:             Thu 24 Jul 2025 17:31:17 +0000
Manifest this update:     Thu 24 Jul 2025 17:31:17 +0000
Manifest next update:     Thu 31 Jul 2025 17:31:17 +0000
Files and hashes:         1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: HN1zQtwMxZTqFUszBvDW18m5Nno8HZpNH3Nj8Ca6lUQ=)
                          2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
                          rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 17:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4216 (0x1078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
        Validity
            Not Before: Jul 24 17:31:17 2025 GMT
            Not After : Jul 31 17:31:17 2025 GMT
        Subject: CN=68826de5-7cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:e7:e1:39:df:d2:db:63:bf:a0:c9:87:d0:
                    77:09:f2:b2:29:d4:ed:f3:b3:a5:44:f8:53:fd:cb:
                    b1:a8:3e:89:01:51:37:20:af:8d:58:45:9c:ed:ec:
                    57:0d:62:28:f0:0b:f1:e7:eb:12:1f:1f:f4:d6:28:
                    63:ea:ba:9c:83:4c:65:cc:a7:91:1b:ba:3f:4b:0c:
                    3a:19:84:63:df:ef:de:b8:f2:0a:af:ad:47:b7:c6:
                    d2:ae:03:c4:f3:27:5d:e4:d3:2f:19:b3:5b:95:81:
                    41:6d:16:1e:89:20:dc:83:83:33:ce:2f:39:f8:06:
                    39:af:18:98:5b:b5:1c:8e:e6:fd:9e:0b:82:e6:34:
                    a5:53:29:04:f4:1c:4a:d5:57:fe:02:a3:6c:26:57:
                    7e:52:00:4a:d9:43:80:17:0c:ba:b3:d3:bd:22:7c:
                    ca:0b:1e:7c:6b:b4:82:10:ec:57:14:2b:1a:c1:6f:
                    52:91:a0:a0:90:7b:d5:87:d8:1f:98:1a:f0:16:3f:
                    bb:14:06:52:13:88:0b:79:0d:90:68:76:de:8b:bc:
                    ff:6c:58:3b:85:ac:1d:98:5c:d8:4f:b6:ff:2e:4f:
                    e4:60:37:4a:39:48:3e:11:a2:07:b6:63:00:b0:dc:
                    10:fa:fc:ab:d3:c7:bc:0b:68:98:35:0e:88:27:51:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:37:E1:60:36:7F:2D:78:71:D9:80:8E:63:52:C0:A0:F1:27:6A
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:02:b7:1f:59:e0:78:da:4e:36:13:56:96:d3:2d:8a:17:
         35:5c:b2:0c:d0:6e:ca:f2:6c:32:1f:d2:61:6c:a4:70:22:87:
         99:66:a6:35:94:88:5a:5e:df:de:a7:bd:76:71:3d:95:49:06:
         45:5e:74:ba:54:af:76:60:ee:3e:33:26:78:1d:91:47:7d:fc:
         e6:5c:95:9d:7c:58:6f:f5:74:50:07:d4:46:73:78:0a:bd:a7:
         dd:e4:b0:86:bf:7f:b2:f0:2b:36:ad:13:32:c2:0b:d7:63:1c:
         11:b8:f8:a9:f1:f3:3a:ba:de:7e:fc:7d:80:81:db:2e:11:1c:
         29:95:00:17:99:a0:ed:b9:f5:bd:46:c4:f2:95:f1:63:8f:8c:
         a8:9d:d7:04:3d:17:ec:d2:e5:61:cc:cd:1a:3e:6c:0f:55:4b:
         c3:0f:83:d4:c6:7d:59:22:7c:dd:e7:ce:e4:2c:50:ab:bc:b8:
         88:d2:aa:3d:40:2d:62:0e:7e:bc:a7:22:63:da:9a:3d:78:23:
         1f:b7:ab:76:e6:0f:a4:e7:23:95:52:a9:ee:e3:54:92:4f:7f:
         26:70:42:18:7b:d8:37:44:32:46:0d:9d:c5:14:86:ca:b8:5e:
         0a:7b:2b:3e:44:ce:fa:5d:0a:13:a6:5e:f5:62:59:a5:9b:41:
         91:0c:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:01:21 2025 by rpki-client