Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
File:                     jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json)
Hash identifier:          ZQkjokT7+WBxBIgVyotj1vpw6PkjbMH3ZNpbuR82Qmw=
Subject key identifier:   67:12:D5:E2:97:00:DC:35:0A:61:34:41:B7:1A:FD:60:1A:E7:BB:3D
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Certificate issuer:       /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial:       1C2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
Manifest number:          1C17
Signing time:             Thu 24 Jul 2025 16:18:38 +0000
Manifest this update:     Thu 24 Jul 2025 16:18:38 +0000
Manifest next update:     Thu 31 Jul 2025 16:18:38 +0000
Files and hashes:         1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: xs06BDJ9jltJqAOfzgKBcHy8dD4M4U8wdVLnbl7zHMs=)
                          2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
                          rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 16:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7215 (0x1c2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
        Validity
            Not Before: Jul 24 16:18:38 2025 GMT
            Not After : Jul 31 16:18:38 2025 GMT
        Subject: CN=68825cde-7c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:1b:7d:e7:6a:75:e0:57:a2:b5:da:49:9a:
                    15:ef:0f:01:a7:15:04:73:b8:1a:fa:ee:43:21:72:
                    87:0f:87:29:ed:d9:67:e7:01:05:1b:6c:57:64:3d:
                    9f:80:da:c6:56:63:58:e7:55:68:fa:96:6f:bc:ba:
                    89:20:ca:e7:51:3e:36:f1:2c:5f:97:94:da:ee:1e:
                    72:c6:7f:25:cd:7a:3f:2f:6b:00:27:15:8d:27:6a:
                    94:ba:83:30:62:0f:8b:38:06:eb:f8:b7:a3:00:72:
                    58:5c:44:b8:35:e5:57:ef:a9:be:11:14:17:9a:80:
                    65:cd:d3:ee:2f:5d:4c:d1:9b:8a:62:fc:8f:33:4b:
                    c7:ce:b9:2f:8f:f6:43:35:70:00:19:e7:f7:24:09:
                    0e:e5:8a:4e:34:33:71:f7:39:ae:02:7b:87:2d:39:
                    0e:7f:d1:23:0e:80:63:4a:fa:cd:a9:ce:2b:b3:75:
                    75:e4:80:1c:da:76:51:14:e5:80:7a:58:40:4e:15:
                    d9:15:f4:27:73:3e:68:5c:77:0a:c6:86:13:f1:e2:
                    51:c7:98:d6:a3:d5:46:25:5f:43:b9:ad:80:19:b4:
                    7b:f0:ec:8b:e1:78:a1:e0:f5:84:66:2b:ee:df:f5:
                    b5:13:c6:94:55:bf:b5:9c:c4:20:0b:c3:2e:0f:2f:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:D5:E2:97:00:DC:35:0A:61:34:41:B7:1A:FD:60:1A:E7:BB:3D
            X509v3 Authority Key Identifier:
                keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:8e:fb:30:09:51:13:a3:71:b5:f8:e2:42:26:64:35:ed:5d:
         15:2e:3a:e6:c1:c0:55:95:71:b8:0d:2b:55:bc:1e:57:e4:61:
         88:2b:c8:2d:86:7c:a3:5a:82:e8:d6:01:a6:12:c4:29:1f:fa:
         1c:8c:2c:b8:10:d8:12:41:a8:76:67:08:db:b6:3f:99:7c:be:
         1c:23:23:6a:ff:61:bc:d8:6b:ca:fc:42:d5:5e:1d:ba:7b:a3:
         74:54:37:a8:c9:3d:2a:a5:0b:65:e2:25:27:57:de:16:a2:16:
         33:30:da:0e:5f:31:56:d1:c6:ab:a0:ea:a6:59:a0:6d:12:5d:
         56:d2:5a:57:61:f1:f0:1b:5d:37:a2:c3:7d:a9:0b:83:15:ac:
         07:d4:7d:e6:4d:16:3c:8e:d3:4b:ff:77:5d:20:c4:24:8a:df:
         74:67:3a:01:c9:95:f2:ba:f4:cd:eb:48:a8:3e:23:82:c6:53:
         1f:fe:8e:72:a4:7d:5a:25:a7:a3:6c:8a:ea:18:e9:bb:4f:53:
         93:93:ee:6f:0b:85:3c:49:e2:d3:d4:92:85:a4:5e:bc:b3:1c:
         2f:6d:c8:95:29:45:0c:4c:c5:d0:64:a3:13:1f:58:76:a3:90:
         97:88:a7:08:77:78:ef:55:0b:97:61:dd:3f:06:ec:ea:5f:90:
         58:76:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:26:31 2025 by rpki-client