Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
File:                     jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json)
Hash identifier:          o4l8fYShEbsl1N8T3AC/NRYslXSzZUwzXnOiTKCwiV8=
Subject key identifier:   12:71:5E:4C:AE:9A:21:DA:93:0B:78:F5:59:EB:7C:C9:46:60:2C:2D
Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F
Certificate issuer:       /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
Manifest number:          0339
Signing time:             Sat 19 Jul 2025 01:30:38 +0000
Manifest this update:     Sat 19 Jul 2025 01:30:37 +0000
Manifest next update:     Sat 26 Jul 2025 01:30:37 +0000
Files and hashes:         1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: z7Sssy98KpPi3qbHVJSLaJpxTUvd/wLBbWSyeXZeXCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl
                          rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918223E, serialNumber=8E7E4A03582039E461ECED910008C9827362359F
        Validity
            Not Before: Jul 19 01:30:37 2025 GMT
            Not After : Jul 26 01:30:37 2025 GMT
        Subject: CN=687af53e-2d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:e8:87:33:3d:78:ec:72:64:11:84:ab:ed:
                    0a:21:a8:af:a9:35:19:bc:51:a1:d6:b2:4e:ff:34:
                    9f:78:37:bb:73:72:e5:91:cc:f1:5f:6f:fa:e4:e8:
                    06:95:aa:cc:f8:e8:30:54:d4:06:f0:99:a3:10:ba:
                    ea:c2:f0:5d:e5:ba:ac:32:ff:c7:c3:ce:a6:08:4c:
                    64:fa:d3:2f:45:d2:95:d8:15:3c:05:f1:08:c9:16:
                    df:9a:68:45:f3:70:53:56:85:a5:80:c2:cc:ee:0a:
                    a5:93:2b:de:59:ed:9c:db:9b:12:68:cf:f8:ce:3e:
                    5d:60:93:5b:65:b2:37:a8:c1:5f:0d:3b:67:67:22:
                    b4:9e:8d:d4:1e:36:d6:9e:ad:99:5e:fb:f0:3b:35:
                    e8:52:9e:ae:83:76:62:24:ad:5c:90:88:bd:04:1f:
                    ac:f4:d8:71:8c:70:9f:dc:79:ed:f9:d9:01:ae:e2:
                    0b:14:da:09:69:5d:87:d1:74:21:ce:a8:f2:b4:72:
                    d3:a4:e2:6a:09:52:58:c7:a6:db:d5:69:d0:e0:26:
                    7c:84:fd:90:af:ec:fb:04:65:aa:48:b5:68:3b:75:
                    aa:02:fa:cc:e7:65:91:f6:c4:b1:50:b7:ac:2f:48:
                    04:59:24:92:c1:5a:13:55:1b:50:20:b0:49:93:13:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:5E:4C:AE:9A:21:DA:93:0B:78:F5:59:EB:7C:C9:46:60:2C:2D
            X509v3 Authority Key Identifier:
                keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:69:ca:14:08:05:54:59:30:16:72:12:20:84:90:5a:37:71:
         30:70:55:57:88:c3:ec:a7:41:0c:60:51:57:0f:4c:6f:1c:06:
         4b:6d:59:14:b7:35:ce:bb:54:96:70:7e:4d:31:50:fc:fc:6b:
         39:a3:91:05:7a:61:a3:6b:7e:df:44:37:6f:86:8a:5c:51:d7:
         b8:b6:c8:7c:c0:71:47:c7:cc:1e:ff:87:bf:18:b8:59:8b:f5:
         f0:a3:63:56:97:95:7a:cf:14:7e:37:1a:70:b0:04:ee:46:4b:
         51:f5:16:1f:fe:5f:54:0d:7b:37:11:2d:ad:8a:8e:4d:9d:34:
         75:dc:be:a6:71:62:24:24:16:37:82:41:a4:20:03:83:03:65:
         1c:26:41:2b:68:02:8b:e7:ad:45:7b:e7:66:2b:4a:fc:44:ea:
         76:b1:cb:96:b6:d6:bf:4c:92:09:7e:24:ca:8c:9b:7b:ed:ab:
         bc:1a:8b:1d:c7:35:38:d8:62:f6:5a:72:d4:5a:80:c1:9f:51:
         43:7f:72:e2:9c:19:ea:00:3b:ec:a9:be:e0:31:2d:81:e3:7f:
         94:43:9b:1c:3a:cf:ce:34:b7:d4:2a:3b:6d:2c:32:6e:28:fa:
         65:27:7a:64:d2:b0:74:f6:e9:f5:c6:70:0e:1b:6b:32:41:c8:
         15:d6:0c:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy
NzM2MjM1OUYwHhcNMjUwNzE5MDEzMDM3WhcNMjUwNzI2MDEzMDM3WjAYMRYwFAYD
VQQDEw02ODdhZjUzZS0yZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmTPohzM9eOxyZBGEq+0KIaivqTUZvFGh1rJO/zSfeDe7c3LlkczxX2/65OgG
larM+OgwVNQG8JmjELrqwvBd5bqsMv/Hw86mCExk+tMvRdKV2BU8BfEIyRbfmmhF
83BTVoWlgMLM7gqlkyveWe2c25sSaM/4zj5dYJNbZbI3qMFfDTtnZyK0no3UHjbW
nq2ZXvvwOzXoUp6ug3ZiJK1ckIi9BB+s9NhxjHCf3Hnt+dkBruILFNoJaV2H0XQh
zqjytHLTpOJqCVJYx6bb1WnQ4CZ8hP2Qr+z7BGWqSLVoO3WqAvrM52WR9sSxULes
L0gEWSSSwVoTVRtQILBJkxOB1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJxXkyu
miHakwt49VnrfMlGYCwtMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE
MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l
Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDacoUCAVUWTAWchIghJBaN3EwcFVXiMPsp0EMYFFXD0xvHAZLbVkU
tzXOu1SWcH5NMVD8/Gs5o5EFemGja37fRDdvhopcUde4tsh8wHFHx8we/4e/GLhZ
i/Xwo2NWl5V6zxR+NxpwsATuRktR9RYf/l9UDXs3ES2tio5NnTR13L6mcWIkJBY3
gkGkIAODA2UcJkEraAKL561Fe+dmK0r8ROp2scuWtta/TJIJfiTKjJt77au8Gosd
xzU42GL2WnLUWoDBn1FDf3LinBnqADvsqb7gMS2B43+UQ5scOs/ONLfUKjttLDJu
KPplJ3pk0rB09un1xnAOG2syQcgV1gwj
-----END CERTIFICATE-----
Generated at Sun Jul 20 03:11:36 2025 by rpki-client