Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
File:                     jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json)
Hash identifier:          GwPG95RCQWhxnrHEo5LQJ910CDqwvRHcb83d/nek9iM=
Subject key identifier:   DD:B8:D3:3D:52:4C:D9:00:9D:5F:73:0A:4E:74:4A:DB:C2:68:44:FD
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0A72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
Manifest number:          0A66
Signing time:             Sun 20 Jul 2025 19:45:34 +0000
Manifest this update:     Sun 20 Jul 2025 19:45:33 +0000
Manifest next update:     Sun 27 Jul 2025 19:45:33 +0000
Files and hashes:         1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: 1+tREYEFo15LqrdDW0ftiQHotMM9GXGPOZxZNP7eqf8=)
                          2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=)
                          3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Jul 20 19:45:33 2025 GMT
            Not After : Jul 27 19:45:33 2025 GMT
        Subject: CN=687d475e-1b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:f7:37:49:7a:72:ec:b3:ea:f2:65:f7:36:
                    ae:a6:82:e5:19:a0:aa:0b:8a:fa:7c:37:38:58:89:
                    ba:a2:d4:fe:3b:c5:0f:df:4c:52:fc:c5:12:19:8c:
                    11:a0:04:63:6e:b3:45:98:d5:1a:0c:2b:58:f8:8a:
                    2e:bc:8d:5e:75:28:41:0f:65:33:d2:9b:bd:5d:45:
                    7a:21:59:6d:11:31:87:4c:61:3e:1c:db:51:cb:f9:
                    c9:8a:7c:ce:2e:b6:f2:1c:75:43:42:96:3d:13:f7:
                    d5:21:e0:be:60:0c:66:12:5c:9c:8e:20:97:8f:44:
                    51:ec:5d:3e:9c:bb:8f:ee:2a:b6:d6:5e:25:b0:66:
                    c8:92:94:88:6e:24:1f:b3:fe:db:52:6a:47:60:e4:
                    a7:49:f6:8e:df:96:07:3c:a4:86:09:93:e5:aa:7a:
                    bf:64:d7:53:98:dd:3d:ad:2d:c6:cc:a2:7d:a7:60:
                    b8:30:70:43:06:16:dd:ec:61:16:53:9e:d7:03:bf:
                    aa:1f:e1:dd:a1:b0:99:3d:e3:25:5c:15:13:77:c3:
                    cb:85:21:0c:5e:2d:7c:aa:77:bf:8f:bf:fa:c8:82:
                    c7:35:b0:df:20:39:84:19:77:42:3a:2f:48:16:91:
                    cc:6b:f6:1d:d8:c0:81:39:32:f5:5a:31:6c:06:15:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B8:D3:3D:52:4C:D9:00:9D:5F:73:0A:4E:74:4A:DB:C2:68:44:FD
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ab:96:6e:e7:4e:0b:db:a6:99:df:7a:97:24:9d:48:58:c4:
         b5:a6:3f:69:83:16:e3:5f:da:3f:96:9e:3f:bc:87:2c:32:20:
         ee:e5:bd:15:09:f4:7f:d4:06:5d:02:74:1b:10:fd:fd:4c:c6:
         df:1b:22:ef:8f:ea:78:06:b3:51:42:73:28:b8:8b:cb:13:7b:
         40:b0:2a:c1:b3:56:d0:e2:bc:d4:78:72:c5:42:fa:61:ef:95:
         ae:73:b0:8c:76:5b:6e:19:70:83:73:15:e6:c2:22:47:f5:5d:
         4f:26:be:71:06:c0:f9:e2:81:fc:5e:4c:8f:0e:b0:34:9e:59:
         9a:05:0b:ed:23:41:e9:c5:39:20:74:12:64:6b:a4:81:71:b5:
         64:b2:e3:0f:a1:67:65:37:11:b4:4b:95:33:75:de:50:f6:46:
         2e:e0:ce:05:1d:c7:85:c4:87:83:77:d7:03:cd:01:b7:5a:0b:
         92:f2:11:45:3b:f7:41:81:9b:0d:d8:e8:08:b1:ff:67:20:f2:
         37:c4:ec:3b:ee:9e:f8:63:8c:09:2f:e3:45:fa:98:cd:aa:e9:
         00:09:37:74:8e:d1:5b:66:48:fb:ea:df:6e:7b:a4:b7:2e:a8:
         16:ed:ea:c3:58:f5:d4:a5:34:c4:d6:fc:28:75:a5:c1:7a:19:
         a8:97:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:45:48 2025 by rpki-client