Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
File:                     6JNyY8Gd-yOWz0THcFJD_MJujzo.mft (raw, json)
Hash identifier:          6EczmPULM4cgdb/ujtUMYFYardB9BTzguvlZkWUY/Kc=
Subject key identifier:   92:9A:BB:86:BC:8F:63:2D:8E:05:CF:74:1B:B0:29:43:ED:43:E4:55
Authority key identifier: E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A
Certificate issuer:       /CN=A913827A/serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
Certificate serial:       033A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
Manifest number:          0334
Signing time:             Mon 21 Jul 2025 01:22:01 +0000
Manifest this update:     Mon 21 Jul 2025 01:22:01 +0000
Manifest next update:     Mon 28 Jul 2025 01:22:01 +0000
Files and hashes:         1: 6JNyY8Gd-yOWz0THcFJD_MJujzo.crl (hash: 6N92JH/aCJTvo4u1ZQHxkE6Q3wRe8m0m6F8fauV8K90=)
                          2: F89476D4CF1E11ECA610684AC4F9AE02.roa (hash: TEwRyHVvBihM84ufAexV7qZmj3OlIpW3f1GP5PqkIug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl
                          rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913827A, serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
        Validity
            Not Before: Jul 21 01:22:01 2025 GMT
            Not After : Jul 28 01:22:01 2025 GMT
        Subject: CN=687d9639-d0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:b3:9d:78:c3:99:a3:9b:46:d6:95:2d:54:
                    89:41:17:77:52:7f:9b:1b:be:f9:24:4b:8c:aa:c3:
                    81:70:83:a6:20:a2:62:61:5c:0f:8d:98:63:72:45:
                    e6:9c:bf:db:82:28:1b:a3:d9:0b:e7:a9:3a:4c:6c:
                    a1:10:0d:40:93:d0:c3:92:48:4d:de:5d:29:b2:83:
                    24:76:d7:06:a5:fe:77:1d:27:25:50:c7:97:a4:fe:
                    b4:e0:15:76:2c:f6:1e:36:d2:44:0a:87:a0:64:9a:
                    48:97:54:c5:d8:c1:66:bb:86:84:62:7f:b6:26:8f:
                    3b:73:8b:14:41:b9:21:0d:82:d5:4c:a9:92:63:66:
                    f8:30:70:3e:54:2b:2e:44:c2:ea:99:ef:20:d3:7e:
                    bb:d5:19:89:5d:7d:74:54:c4:8d:b9:6d:16:f0:89:
                    c0:87:ca:d9:44:a1:3a:82:8e:85:ca:a8:92:3c:d4:
                    be:ad:4a:cb:52:41:01:76:85:31:0b:ec:75:b6:87:
                    54:b8:18:7c:1d:bf:e5:dc:16:d0:b7:ac:10:ad:31:
                    44:f1:22:5c:16:7a:fe:48:7d:15:3a:4b:00:4b:43:
                    98:bc:77:b1:da:48:dc:71:3b:e6:4b:f1:0d:fc:4d:
                    10:25:a2:37:56:0e:9a:07:7c:cb:1a:e2:85:6f:13:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:BB:86:BC:8F:63:2D:8E:05:CF:74:1B:B0:29:43:ED:43:E4:55
            X509v3 Authority Key Identifier:
                keyid:E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:bf:40:e1:c3:82:e3:08:ce:ec:d7:6f:df:74:7d:8d:7e:
         5f:79:c4:0f:30:2f:e8:e1:0d:0f:a8:01:e9:f9:d7:49:88:86:
         f8:fb:e5:8c:8e:35:74:9f:61:95:38:72:65:25:73:24:d3:95:
         60:d1:9b:9b:b7:fc:8b:97:14:bf:6d:d0:3c:4d:d7:7b:ff:e0:
         45:1c:6a:e1:5b:cc:d5:e5:f5:2f:b9:6e:9a:09:17:f7:f0:c7:
         4c:e9:9c:46:dd:98:aa:e5:cd:5b:25:47:7f:df:a0:96:b1:dc:
         97:4b:1a:c9:cf:c5:bb:0d:a7:a1:e0:4f:9a:d1:9a:57:7e:ad:
         37:82:b8:aa:de:09:89:38:53:4e:a3:bf:76:4c:a0:41:9a:2c:
         c4:9b:c5:45:01:c2:3a:80:59:c4:b5:af:01:95:8f:77:10:4f:
         30:43:ff:1f:6d:b5:f8:14:27:2c:2c:02:f3:9a:82:28:73:e2:
         08:9d:21:f3:18:76:33:be:f5:16:49:fc:42:5c:1a:07:bd:c8:
         26:28:55:38:59:14:41:38:c7:a6:f9:67:49:f3:df:99:4f:6e:
         56:32:22:5d:a3:c6:2e:5a:51:31:43:a3:e3:04:60:36:2e:b7:
         8c:51:03:12:25:0d:cf:8b:f5:d7:22:77:54:9a:08:e3:d0:a9:
         25:73:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:51:17 2025 by rpki-client