Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File:                     JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier:          uX35jr8heAyVnvkBGod5PAffR3gi7GaI1iDHVBaax+Q=
Subject key identifier:   B7:10:08:8E:59:7E:7A:AE:0F:31:C6:8A:00:78:B9:91:45:C2:E2:20
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       1077
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number:          106F
Signing time:             Tue 22 Jul 2025 17:31:15 +0000
Manifest this update:     Tue 22 Jul 2025 17:31:14 +0000
Manifest next update:     Tue 29 Jul 2025 17:31:14 +0000
Files and hashes:         1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: Pj5hmo9zRURGwxbyGzLVbYcd/zqEs74cDYZoAOyFPk8=)
                          2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
                          rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4215 (0x1077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
        Validity
            Not Before: Jul 22 17:31:14 2025 GMT
            Not After : Jul 29 17:31:14 2025 GMT
        Subject: CN=687fcae3-27d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:23:94:7b:7a:e6:a0:7c:0a:f5:7c:3a:2e:
                    1b:98:a0:15:03:17:57:39:e9:f2:50:50:70:5e:85:
                    81:5a:af:ef:b6:65:70:c9:c0:1f:da:e6:5a:fe:9d:
                    bc:14:ee:66:cb:f7:8a:93:06:36:7b:b5:bd:62:ff:
                    12:74:86:42:53:37:55:a4:0e:5b:3c:84:d9:64:1b:
                    33:d5:b2:1c:bd:ba:6a:86:9c:0e:2f:44:1c:05:54:
                    e1:08:d6:64:75:4c:2e:13:23:9c:c4:8d:c0:73:31:
                    d2:5e:37:4e:c6:24:94:6e:43:6b:61:57:e6:a3:8d:
                    b7:68:f0:a4:9a:64:dd:c5:b9:66:1c:bc:ef:3d:fb:
                    63:3b:6d:66:16:50:40:dc:ab:a1:aa:2f:c2:17:d4:
                    17:01:98:db:2f:96:21:ff:29:d1:f9:3b:0c:b2:c0:
                    69:f7:a7:3d:06:cf:2d:62:2b:e8:e6:75:ad:fb:35:
                    12:44:56:41:0c:13:9d:db:39:92:3f:0a:c7:db:4f:
                    a1:e3:4c:cd:c5:81:08:ca:60:f1:ba:40:63:b6:3c:
                    e2:0e:a8:5d:37:42:65:b5:3b:28:df:ca:ee:23:79:
                    82:b5:2a:92:8c:91:ef:bd:3d:e8:29:06:30:12:dc:
                    b9:f5:4e:87:4a:4a:d5:7c:cb:5a:99:55:83:28:78:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:08:8E:59:7E:7A:AE:0F:31:C6:8A:00:78:B9:91:45:C2:E2:20
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:fa:64:1d:95:25:39:eb:99:1e:b0:96:e5:15:c1:da:77:
         fc:16:a7:04:ec:fa:d5:f7:2d:20:4e:26:02:69:66:4f:73:57:
         57:1e:9c:f3:64:cc:6e:5a:d6:c6:cf:e8:e8:47:a2:e9:60:f6:
         ab:66:4d:3e:76:50:02:a1:ad:fc:ae:61:0f:c2:fb:2e:3e:16:
         47:23:55:a3:8d:f7:c2:64:79:85:7e:1b:96:81:4e:71:2f:10:
         bb:dc:12:3f:54:97:ec:62:26:24:37:52:06:5e:6c:0f:d3:39:
         b5:22:d1:fb:9d:f6:25:ba:3f:d0:ef:25:99:b9:ea:86:ad:19:
         5c:71:cc:ae:96:a6:9c:0a:43:ad:42:f8:0f:54:0f:96:67:2f:
         d4:94:65:5e:5d:1c:c3:52:6e:01:59:17:09:40:a4:3f:e8:25:
         0c:bc:eb:50:51:13:7e:15:97:14:a5:30:e7:b6:80:6a:08:b8:
         5f:8b:fe:14:89:b1:2a:a4:f3:73:46:5f:12:63:9c:bd:fb:c6:
         bc:25:84:b3:21:f4:f5:13:4c:2a:b7:89:a2:d7:b2:52:fe:59:
         25:f8:ff:32:5d:c7:e4:9a:35:2a:ad:69:e5:d0:b6:56:f8:e2:
         a1:01:bf:22:a6:d7:2f:3a:b7:86:29:23:db:ba:21:33:be:d4:
         7a:7c:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:21 2025 by rpki-client