Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File:                     jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier:          MSAkPqGTZpP6KIEPtyO+oUv+eP6RbkKeDfTOMddamH0=
Subject key identifier:   09:31:B2:FC:17:2B:10:FF:08:13:6B:48:0D:DE:F5:8E:50:F4:84:C0
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer:       /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial:       097A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number:          095A
Signing time:             Fri 18 Jul 2025 20:28:14 +0000
Manifest this update:     Fri 18 Jul 2025 20:28:14 +0000
Manifest next update:     Fri 25 Jul 2025 20:28:14 +0000
Files and hashes:         1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: PnZTsPzHSJCzMb8QQ+A1JjmWzi6b7gjDPi60BZsskK4=)
                          2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: oV5Kg/s7awHZvzZpO+JQXAELEp1giTzDedBNhKwTbhM=)
                          3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
        Validity
            Not Before: Jul 18 20:28:14 2025 GMT
            Not After : Jul 25 20:28:14 2025 GMT
        Subject: CN=687aae5e-b7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:f3:38:e1:a7:b8:0a:ea:35:9f:89:0d:45:
                    5f:ff:71:28:86:0b:af:08:ce:b6:41:cf:03:d4:7d:
                    32:28:58:9e:58:a4:f4:ac:d4:07:b1:1d:14:d1:bc:
                    11:aa:87:ca:75:de:43:99:ae:34:2b:41:c7:67:af:
                    ce:84:ba:d5:4a:5e:5b:37:17:2f:27:5f:6b:0e:8e:
                    05:25:93:39:b4:64:3a:a1:dc:36:bd:de:10:af:9c:
                    63:82:66:8b:86:1c:c1:6c:64:d4:44:d4:3e:47:a4:
                    93:96:ea:b2:9f:05:da:c9:36:02:16:be:fb:6b:46:
                    b1:78:01:c7:a5:4f:d5:80:06:93:2d:fa:fd:cc:e6:
                    6a:d1:96:8e:84:a9:71:11:44:c5:4e:93:55:03:db:
                    2c:75:2f:8c:96:ef:5f:28:a3:d0:05:2d:42:81:93:
                    ff:1f:67:ef:f9:d3:3b:50:69:d5:1e:11:22:4f:ca:
                    ae:fc:2e:ed:80:58:c2:5f:11:e1:5d:63:7b:0d:a2:
                    61:c5:ed:58:cd:18:1b:8a:6d:4f:8d:70:92:df:a9:
                    da:7d:b9:38:49:e2:31:d9:d9:3f:e6:2b:e5:ee:e2:
                    bb:f6:70:8f:6b:55:59:36:d7:03:b6:fb:dd:31:3c:
                    b8:ae:c1:45:33:b7:a1:30:31:48:88:7d:5b:e6:fc:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:31:B2:FC:17:2B:10:FF:08:13:6B:48:0D:DE:F5:8E:50:F4:84:C0
            X509v3 Authority Key Identifier:
                keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:05:66:e2:87:0f:ec:84:b2:56:68:db:6b:16:f1:93:30:
         83:8a:80:2f:0a:77:78:c5:0e:e5:7e:d4:29:e7:37:f2:6c:1a:
         ed:7b:e6:f9:f3:55:72:46:43:ba:dd:4b:13:e7:4a:6c:fa:e1:
         1f:c0:33:98:e9:52:b3:6c:fd:a9:71:70:63:65:93:04:56:7f:
         6a:9d:21:84:bf:04:05:4c:29:e5:d5:d5:23:21:ff:5d:fe:0d:
         14:b2:d8:a3:a9:52:db:e3:51:98:c8:fd:d6:c9:61:2d:6c:1b:
         0a:fb:fd:0b:f7:b9:6e:36:d5:7a:84:87:83:23:4e:cb:88:4a:
         61:c5:06:5f:4a:0c:5e:10:18:03:89:1c:07:ae:c5:c2:59:23:
         80:4a:1a:6b:22:86:16:4a:86:36:e4:c8:4a:92:62:63:5c:0b:
         42:77:d1:22:82:ac:32:3b:9b:8a:35:60:3f:c7:2e:dd:71:30:
         b4:0f:b9:ae:3a:67:94:e6:36:6d:bf:0b:d7:8e:c9:a5:bf:d4:
         2c:83:75:75:4b:8b:ba:12:cd:f1:1f:4d:04:b2:a4:88:8b:1c:
         c9:40:37:52:76:92:d7:b3:0b:e0:b9:e4:37:67:e5:eb:ee:ef:
         55:ee:74:fd:51:e7:93:db:90:be:99:d5:70:5a:64:0f:eb:20:
         48:8c:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:38 2025 by rpki-client