Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          Pe79VVyWe7Hpyod/xIW+UHwwrRqcay6zYY+kfn64YMQ=
Subject key identifier:   84:8B:AD:BA:35:74:36:BC:B6:59:9A:69:CA:95:24:76:5C:95:FC:2D
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          079A
Signing time:             Tue 22 Jul 2025 21:39:42 +0000
Manifest this update:     Tue 22 Jul 2025 21:39:42 +0000
Manifest next update:     Tue 29 Jul 2025 21:39:42 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: X+mJc6HzczRGmOEynizhJ9ZP7y1fMmjULIhsyRzsUmI=)
                          2: A7DE2E7820E311F0993B6882C4F9AE02.roa (hash: no1v0xZMt6mM9ecpNtFecxklCRLhU3BMofUDij88ZQc=)
                          3: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: yvnjwOTgzgeBoIFWnP+qrRUckU6QqKEjOZnd2PgnU28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2, serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Jul 22 21:39:42 2025 GMT
            Not After : Jul 29 21:39:42 2025 GMT
        Subject: CN=6880051e-d00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:11:3f:cb:3f:fe:c3:b1:df:4e:30:41:88:
                    f7:61:7f:da:13:a2:bb:c5:6a:57:a1:66:8a:77:88:
                    b8:09:ed:1a:ec:03:dd:a7:74:9b:e5:b2:18:5d:ee:
                    ac:62:3a:f6:b4:3d:ef:b4:06:5d:2c:6a:32:7f:89:
                    3c:c5:4f:83:af:35:8b:1f:66:67:14:61:0a:a1:6a:
                    9f:85:0e:e8:c3:98:62:58:f7:d0:5c:a9:1c:27:23:
                    63:68:df:a8:82:5e:b0:86:c7:3e:c5:d1:73:68:60:
                    09:33:80:02:e9:72:72:54:06:86:1e:d9:6b:11:bd:
                    bb:ee:dd:5c:50:3a:71:46:1c:1b:90:7e:56:fd:bf:
                    fc:51:62:7e:97:f7:3c:37:07:d7:50:7c:a7:8f:83:
                    8a:e8:ff:3c:73:8f:23:38:04:67:23:8c:a9:04:a4:
                    b1:3f:da:81:e0:e6:61:fb:30:7b:71:82:58:2d:26:
                    3f:c5:fd:f1:8e:b3:1d:19:07:79:49:25:56:41:9d:
                    c3:d6:9d:c6:43:3d:89:e1:8a:94:7a:22:85:42:53:
                    9e:08:bd:d2:57:d3:38:f6:1f:be:ae:ca:92:b6:b1:
                    6e:90:48:b1:60:0b:47:c1:20:cd:dd:e7:ec:0b:a2:
                    e7:26:34:63:0b:a7:12:11:38:f5:61:94:4d:67:f8:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:AD:BA:35:74:36:BC:B6:59:9A:69:CA:95:24:76:5C:95:FC:2D
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:08:a8:e8:db:5a:0d:45:1b:e5:2d:b4:c0:e6:a9:63:99:
         d1:b5:8a:37:74:36:ae:b1:78:a8:3e:c5:af:6d:8b:e1:3a:9d:
         e1:82:15:72:8f:3f:e0:0e:a6:74:b7:f7:6d:62:87:04:94:e1:
         ec:7b:54:73:3d:5f:ba:fb:8f:7b:53:9f:aa:d9:ee:1c:28:6a:
         d7:f5:2a:f3:2f:ea:37:df:f4:dc:fe:82:16:53:54:e0:c9:50:
         22:ca:04:e4:56:b4:b8:1a:a7:30:6e:a4:44:73:6f:76:26:42:
         6c:e2:53:16:8c:47:88:62:e3:06:68:21:78:40:02:fc:5d:a1:
         e9:3e:0e:9d:23:f0:59:1a:d5:dd:aa:03:ac:bc:e8:e8:1d:bd:
         ef:2f:96:d0:85:de:64:0c:17:ff:37:a7:d0:47:b9:b0:44:e8:
         75:48:d8:08:c3:76:02:ac:d6:19:41:56:f1:3f:2e:95:da:97:
         61:f7:62:e4:4c:b1:19:96:6f:2d:99:ae:6e:2d:15:21:31:80:
         59:bd:18:8d:e2:b9:e5:80:ca:e3:97:a1:7e:b1:d1:c1:92:64:
         b5:0d:10:a8:ea:20:50:b5:b7:04:fd:0b:13:17:c6:27:01:a1:
         13:66:a7:52:5c:5f:63:71:97:5c:5d:1c:55:d1:6f:b1:98:8b:
         88:69:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 10:09:23 2025 by rpki-client