Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          I0xVVGoPbo5pM8b4PXlUBSGTHqr9Q6cQccM341Wq82M=
Subject key identifier:   16:06:1C:52:1F:EA:85:61:E9:B9:E3:45:DE:86:24:86:C7:20:AB:98
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          E5
Signing time:             Wed 23 Jul 2025 05:52:28 +0000
Manifest this update:     Wed 23 Jul 2025 05:52:27 +0000
Manifest next update:     Wed 30 Jul 2025 05:52:27 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: EkZxijyWHWoMOV71tjwXruwicV4Ml0u9kZiskekiijk=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Jul 23 05:52:27 2025 GMT
            Not After : Jul 30 05:52:27 2025 GMT
        Subject: CN=6880789c-ba32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:80:f7:72:f3:64:f6:60:b5:fa:c1:8a:22:
                    65:97:c1:22:4b:d8:41:19:62:14:14:49:2f:61:aa:
                    19:6f:10:12:4f:2e:ae:63:4b:41:5c:c5:64:13:bb:
                    66:80:e3:39:83:4d:3a:64:38:1b:42:f1:f0:58:4e:
                    fb:25:07:67:de:ba:26:bf:16:e2:34:33:7f:d2:56:
                    19:6c:c0:96:dd:14:ae:b9:84:3b:76:c3:82:23:cd:
                    76:d2:17:d4:42:25:5d:98:f5:5b:ff:34:df:57:34:
                    16:69:40:e9:b9:b9:ab:96:47:da:24:90:90:bb:d6:
                    34:61:55:0c:67:4e:d3:5c:2b:d6:4b:26:8e:df:6c:
                    f1:e4:d7:8d:a5:31:42:42:a5:bd:7a:ab:89:31:99:
                    0e:11:0a:c3:d8:46:04:ae:16:71:20:ac:fc:ff:01:
                    21:82:1e:e9:50:6a:0a:5b:2a:93:f7:d4:47:64:19:
                    12:c0:3e:3f:a2:41:b3:da:03:8a:89:a5:f5:4e:b0:
                    b7:91:ee:62:a8:e1:aa:81:ec:62:25:d4:ea:23:0a:
                    cc:69:d3:32:ca:e6:3b:d4:4c:ac:db:4f:53:5a:1c:
                    76:c9:0c:1e:42:52:be:d2:66:8b:72:6e:50:8b:ec:
                    c1:db:ef:c9:40:fa:46:e5:70:9c:ed:d8:66:25:36:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:1C:52:1F:EA:85:61:E9:B9:E3:45:DE:86:24:86:C7:20:AB:98
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:37:06:29:27:0b:dc:66:01:fb:02:9b:3a:48:cf:d4:70:
         71:56:0b:54:e3:73:83:76:f7:03:a4:0a:7e:0f:90:da:fb:69:
         8e:4f:b9:c9:cb:14:da:0c:ec:79:66:0b:c9:c5:89:ce:2a:a1:
         81:bb:e4:10:52:f0:c7:4b:fd:f2:f7:68:ae:81:89:59:d0:3e:
         a4:ab:f9:f3:0f:f3:5c:73:84:53:0a:12:31:69:b1:55:4d:8f:
         dd:24:0d:44:67:69:96:48:be:2a:0c:7d:50:64:fb:da:cd:52:
         6b:05:4e:6a:2b:1f:41:b2:d9:7f:e0:b5:71:9e:b8:f7:92:12:
         97:a0:0a:e5:e7:74:01:4c:c2:ab:27:17:bf:ef:2b:8a:79:af:
         03:1b:78:d4:c1:76:38:89:04:be:96:81:85:da:58:63:6b:69:
         02:df:49:75:fd:39:e7:46:c8:fc:91:de:5e:08:06:ca:dd:84:
         f3:19:a7:15:6a:5b:13:33:f4:6c:c9:02:7e:79:79:87:4d:9b:
         bf:c2:83:56:d0:04:2f:2f:cc:c7:00:5e:b4:64:c7:e0:44:bd:
         5e:20:d2:08:aa:f7:c4:f1:f7:e8:21:bb:1b:61:84:d1:05:7c:
         08:c6:94:57:f1:93:1c:20:c9:82:dc:d8:5f:38:58:e0:2d:67:
         c2:f3:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:52 2025 by rpki-client