Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
File:                     J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json)
Hash identifier:          DoYPLrzT9MuzJMPiAA9XS+Txm2+ZXPah1p8Kh2pXtsc=
Subject key identifier:   09:C4:64:65:CF:B1:42:BD:60:0E:8C:67:5D:23:27:5A:A4:63:87:CC
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Certificate issuer:       /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
Manifest number:          01F5
Signing time:             Sat 19 Jul 2025 02:37:22 +0000
Manifest this update:     Sat 19 Jul 2025 02:37:22 +0000
Manifest next update:     Sat 26 Jul 2025 02:37:22 +0000
Files and hashes:         1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: Btnw4wLrqn+YeSz7CgjwIqZj/CUHHAs6A0itdtvLNDM=)
                          2: 35C34054633911ED97F86846C4F9AE02.roa (hash: j9opGfbttUeCxSnD6dInpPsqFcL3+tDfpef/BimCS4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
                          rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
        Validity
            Not Before: Jul 19 02:37:22 2025 GMT
            Not After : Jul 26 02:37:22 2025 GMT
        Subject: CN=687b04e2-cce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:a5:f3:9c:8e:2a:12:6d:eb:2a:24:3e:c5:
                    66:52:61:f3:0f:14:e9:31:9d:4c:8d:c0:f5:da:ee:
                    2c:dd:ef:89:9a:70:11:2e:24:1c:12:11:76:2f:e9:
                    23:5c:6d:67:bb:92:17:87:78:19:5e:c3:e6:89:22:
                    e8:96:dc:78:a1:1d:c4:f7:09:5b:64:10:e8:fc:ab:
                    03:e8:62:e0:a8:b3:a7:66:5d:e1:c5:17:e4:25:ae:
                    be:4a:6a:55:4a:69:c9:60:e2:71:b3:b3:d6:dc:18:
                    55:34:fa:42:00:d8:14:02:1c:57:1f:a6:14:ba:2e:
                    b7:f0:2d:f1:2e:9d:74:cb:fb:75:25:22:d2:12:d1:
                    20:99:45:e6:79:a2:9a:8b:be:31:f2:2a:ee:58:f8:
                    24:d5:ee:da:71:95:1f:b3:1a:9c:32:19:28:e7:f7:
                    51:02:28:40:60:1d:b4:42:11:c0:38:1d:42:99:15:
                    c4:80:63:29:45:7a:62:a6:96:be:5d:9d:ce:ba:db:
                    c4:be:0a:2d:16:50:09:59:37:70:e3:53:22:40:1d:
                    c7:9e:d6:93:06:9b:09:fc:75:7f:66:50:fe:d4:4c:
                    5f:ed:ab:69:3e:16:26:02:ec:be:07:e1:c4:5b:06:
                    df:99:8c:06:ec:0b:6c:9e:c9:47:8d:02:dc:f8:11:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:64:65:CF:B1:42:BD:60:0E:8C:67:5D:23:27:5A:A4:63:87:CC
            X509v3 Authority Key Identifier:
                keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:07:b7:e0:28:6f:ab:84:0b:08:21:89:a2:7f:43:b0:42:af:
         da:74:29:c7:a4:f5:34:bc:97:f8:80:f8:a0:e6:ae:f9:50:52:
         01:cc:76:1c:66:31:93:c8:d4:e0:d4:18:73:6f:6c:85:16:83:
         24:6c:ab:bd:d1:f0:cf:93:62:d0:bb:38:a4:5d:c9:7d:9b:f3:
         b8:8a:af:a9:f2:47:30:56:db:1f:0e:9c:bd:aa:59:45:1b:1a:
         7e:7a:a8:ce:75:c5:fb:bf:84:73:91:eb:3d:01:5e:cb:88:38:
         a5:49:1b:d1:92:61:fb:5b:ac:22:56:12:b3:50:f9:36:78:f1:
         a9:cb:24:08:c8:24:27:2a:ac:14:42:b5:48:84:a0:0e:d5:ec:
         5b:a6:c5:41:bf:ad:49:95:4b:be:f8:93:6f:34:2d:e9:7c:00:
         3d:9d:7a:61:4f:f7:77:46:86:d5:c7:3d:df:9d:90:6d:60:01:
         da:7e:2b:ae:6c:d8:58:76:93:c1:8d:2c:59:27:af:73:a0:88:
         24:cf:d5:12:05:39:3b:47:b0:29:ed:b1:3d:87:62:5a:45:af:
         25:32:a4:09:20:3b:70:6c:2a:3a:b2:bb:e6:6b:4b:25:83:9a:
         09:51:e1:5b:05:19:23:81:f4:84:60:82:c9:10:1f:86:15:8a:
         34:19:e7:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZDMjNEMzM1QjM3
Qjg5RTQxOTUwHhcNMjUwNzE5MDIzNzIyWhcNMjUwNzI2MDIzNzIyWjAYMRYwFAYD
VQQDEw02ODdiMDRlMi1jY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22Gl85yOKhJt6yokPsVmUmHzDxTpMZ1MjcD12u4s3e+JmnARLiQcEhF2L+kj
XG1nu5IXh3gZXsPmiSLoltx4oR3E9wlbZBDo/KsD6GLgqLOnZl3hxRfkJa6+SmpV
SmnJYOJxs7PW3BhVNPpCANgUAhxXH6YUui638C3xLp10y/t1JSLSEtEgmUXmeaKa
i74x8iruWPgk1e7acZUfsxqcMhko5/dRAihAYB20QhHAOB1CmRXEgGMpRXpippa+
XZ3OutvEvgotFlAJWTdw41MiQB3HntaTBpsJ/HV/ZlD+1Exf7atpPhYmAuy+B+HE
WwbfmYwG7AtsnslHjQLc+BFIJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnEZGXP
sUK9YA6MZ10jJ1qkY4fMMB8GA1UdIwQYMBaAFCfaAFTPurPj2wY/wj0zWze4nkGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU1Qy8zNDk4MDBCRTYz
MzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMtUGJCal9DUFROYk43aWVR
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o5b0FWTS02cy1QYkJqX0NQVE5iTjdpZVFaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMt
UGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiB7fgKG+rhAsIIYmif0OwQq/adCnHpPU0vJf4gPig5q75UFIBzHYc
ZjGTyNTg1Bhzb2yFFoMkbKu90fDPk2LQuzikXcl9m/O4iq+p8kcwVtsfDpy9qllF
Gxp+eqjOdcX7v4Rzkes9AV7LiDilSRvRkmH7W6wiVhKzUPk2ePGpyyQIyCQnKqwU
QrVIhKAO1exbpsVBv61JlUu++JNvNC3pfAA9nXphT/d3RobVxz3fnZBtYAHafiuu
bNhYdpPBjSxZJ69zoIgkz9USBTk7R7Ap7bE9h2JaRa8lMqQJIDtwbCo6srvma0sl
g5oJUeFbBRkjgfSEYILJEB+GFYo0GefI
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:40:41 2025 by rpki-client