Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File:                     JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier:          tU9++wp3loeR3IoQNTizIBAzMqr0bAFJEmKAiM0vNN0=
Subject key identifier:   20:F1:F4:10:D3:60:8F:87:A5:12:24:71:29:0B:CF:4E:90:1E:EA:75
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer:       /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number:          0E22
Signing time:             Tue 22 Jul 2025 17:57:53 +0000
Manifest this update:     Tue 22 Jul 2025 17:57:53 +0000
Manifest next update:     Tue 29 Jul 2025 17:57:53 +0000
Files and hashes:         1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: wnq2qlPjTmR8XdiyZZETMD15Vu+ZLpCe1aNRtU2ZgRw=)
                          2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: 6yiyih3iYU5SXCZve8BQVAbNfjgN61udEXmY/BbF0dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
                          rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
        Validity
            Not Before: Jul 22 17:57:53 2025 GMT
            Not After : Jul 29 17:57:53 2025 GMT
        Subject: CN=687fd121-ae69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:4f:ec:0d:66:7b:dd:a5:12:f4:e7:c8:25:
                    7f:e2:ec:22:56:94:b0:ba:0d:64:8e:8a:a1:95:e7:
                    6a:b6:13:59:d9:21:48:50:b0:a4:18:fe:5c:67:68:
                    23:05:78:ba:f3:9e:f4:c4:08:0f:bf:95:5d:d1:2e:
                    84:56:5a:c7:5f:d8:6b:61:79:c6:6c:2e:60:8b:94:
                    5d:da:25:84:2a:d8:ea:38:89:b6:32:43:51:0b:3e:
                    1e:6c:f8:bf:54:e6:ed:6a:51:dd:0b:60:0b:dd:27:
                    2a:ec:bd:43:ff:bf:c3:fb:ce:ca:a6:d2:fc:b7:67:
                    b5:27:1e:93:08:03:40:a6:a2:75:33:ec:1a:ce:1a:
                    29:c7:67:99:9a:0d:a5:f7:48:90:78:be:98:03:32:
                    cb:c9:0c:72:da:6c:42:6f:8f:11:c3:6c:3c:16:40:
                    6e:f4:6f:3d:a0:ae:66:b8:ab:fe:4b:89:8f:c4:06:
                    92:ae:77:4f:b3:bf:e6:fc:40:9b:a9:d5:ae:30:b4:
                    34:b5:b5:e6:ab:d0:b5:19:1d:c5:47:d2:60:bc:9a:
                    8f:01:80:f9:e2:b2:d5:1a:e9:69:59:10:24:0a:09:
                    ef:10:f6:2c:73:12:5d:e5:c6:e2:07:28:69:02:35:
                    4b:af:58:30:12:86:c6:08:b4:11:16:ae:85:fc:0c:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:F4:10:D3:60:8F:87:A5:12:24:71:29:0B:CF:4E:90:1E:EA:75
            X509v3 Authority Key Identifier:
                keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:af:16:3c:47:68:2d:c0:4e:2e:86:37:c4:85:ab:f2:68:
         73:68:61:3c:ed:ef:3b:3e:66:cc:06:6b:c3:d3:72:0a:72:b0:
         3f:90:c0:0d:c9:f6:64:88:4c:ff:3e:d4:1f:79:42:2d:c3:07:
         dd:6d:31:48:a5:98:96:d9:f9:8c:6b:4c:f6:ef:17:98:5f:3f:
         41:a7:4f:77:5d:01:2b:ae:5a:b6:d8:9b:e2:85:de:d8:eb:f1:
         e0:93:9e:60:ac:90:ed:97:bb:14:73:db:09:2d:1c:a1:e1:73:
         68:47:99:d0:62:87:1d:f2:00:3d:55:b1:f1:9c:e4:4b:e7:6e:
         72:8c:b5:3e:43:d0:4f:4a:23:ba:76:83:68:79:39:56:1a:68:
         aa:b2:03:df:ca:97:9c:f2:f4:d8:df:e2:f4:fe:bc:2b:bf:9f:
         5c:7d:ab:19:25:f7:5e:d8:8e:1c:f4:2b:0d:49:4a:70:a4:15:
         e5:8c:8f:bc:43:54:c4:1f:f9:6d:d6:8c:5a:a2:02:3c:95:dc:
         d0:a1:b2:8a:e4:6b:96:64:ba:e5:1c:b6:ed:26:73:84:74:67:
         ce:f5:db:ba:42:f8:96:c3:fd:75:a4:f6:4a:aa:e7:13:8c:d5:
         07:10:d6:b5:f3:55:12:2b:d1:35:44:69:18:89:fe:80:7a:e4:
         5e:38:f6:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz
ODFCNUM0MjYwHhcNMjUwNzIyMTc1NzUzWhcNMjUwNzI5MTc1NzUzWjAYMRYwFAYD
VQQDEw02ODdmZDEyMS1hZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1WlP7A1me92lEvTnyCV/4uwiVpSwug1kjoqhledqthNZ2SFIULCkGP5cZ2gj
BXi68570xAgPv5Vd0S6EVlrHX9hrYXnGbC5gi5Rd2iWEKtjqOIm2MkNRCz4ebPi/
VObtalHdC2AL3Scq7L1D/7/D+87KptL8t2e1Jx6TCANApqJ1M+wazhopx2eZmg2l
90iQeL6YAzLLyQxy2mxCb48Rw2w8FkBu9G89oK5muKv+S4mPxAaSrndPs7/m/ECb
qdWuMLQ0tbXmq9C1GR3FR9JgvJqPAYD54rLVGulpWRAkCgnvEPYscxJd5cbiByhp
AjVLr1gwEobGCLQRFq6F/AzooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDx9BDT
YI+HpRIkcSkLz06QHup1MB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD
RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1G
QS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpeK8WPEdoLcBOLoY3xIWr8mhzaGE87e87PmbMBmvD03IKcrA/kMAN
yfZkiEz/PtQfeUItwwfdbTFIpZiW2fmMa0z27xeYXz9Bp093XQErrlq22Jvihd7Y
6/Hgk55grJDtl7sUc9sJLRyh4XNoR5nQYocd8gA9VbHxnORL525yjLU+Q9BPSiO6
doNoeTlWGmiqsgPfypec8vTY3+L0/rwrv59cfasZJfde2I4c9CsNSUpwpBXljI+8
Q1TEH/lt1oxaogI8ldzQobKK5GuWZLrlHLbtJnOEdGfO9du6QviWw/11pPZKqucT
jNUHENa181USK9E1RGkYif6AeuReOPZu
-----END CERTIFICATE-----
Generated at Tue Jul 22 20:31:15 2025 by rpki-client