Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          JxsTrN2yKAYvzYLDRJyUobIDUd9YQ0Cq0lwaarOF3ko=
Subject key identifier:   BE:61:09:6E:24:EF:96:64:AD:9E:69:2B:CB:BD:E9:D7:DD:82:07:0A
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          033C
Signing time:             Sat 19 Jul 2025 01:30:09 +0000
Manifest this update:     Sat 19 Jul 2025 01:30:09 +0000
Manifest next update:     Sat 26 Jul 2025 01:30:09 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: rXJpR0zksMXzaqvvBzKw71cmsrz41T+9jpV8IxXzq00=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Jul 19 01:30:09 2025 GMT
            Not After : Jul 26 01:30:09 2025 GMT
        Subject: CN=687af521-757a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:77:a9:ae:cd:2c:dc:9e:67:d1:00:27:47:
                    4f:7e:8b:d0:1d:5f:6c:6d:f9:00:47:d9:d0:b0:f4:
                    0e:94:22:98:e8:cd:0c:80:db:38:c7:cb:fb:f8:28:
                    c7:93:a1:f6:1e:24:a6:e3:b2:0d:1e:9a:6f:8a:20:
                    14:8d:18:66:7b:b8:6c:8a:89:37:ea:2a:21:cb:da:
                    4f:e3:1b:13:7c:1d:17:2a:11:7f:5c:33:1d:13:fa:
                    d1:78:47:d9:c1:98:fc:b0:99:03:21:2d:40:07:d3:
                    c5:41:61:ce:95:83:ed:d1:33:ff:68:88:ca:1e:f1:
                    13:b1:cb:6d:7f:57:f1:34:2a:bb:7f:b5:4b:aa:a2:
                    b3:0d:b1:c5:e0:b7:f1:75:4a:a6:67:00:5e:f3:ed:
                    71:ed:ed:ae:93:1c:22:c9:a5:bf:3f:6f:fc:56:7e:
                    7c:e6:06:a8:e8:57:62:3a:28:1d:59:63:c1:88:0f:
                    32:83:86:eb:6b:87:c4:01:bd:ff:1e:30:97:9a:f7:
                    74:47:95:9c:78:1b:c9:68:0a:49:5a:08:bf:32:fd:
                    c5:8f:2f:c8:e9:19:60:84:b6:af:69:80:29:a1:4d:
                    d6:eb:10:6e:2e:b2:03:19:22:fa:5e:fa:9e:5a:f1:
                    66:73:7f:24:9c:5a:54:c0:e6:07:f5:6a:b3:2d:7d:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:09:6E:24:EF:96:64:AD:9E:69:2B:CB:BD:E9:D7:DD:82:07:0A
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:a8:37:e8:59:ea:bc:74:19:b1:ff:ab:28:f8:c1:26:fe:
         8d:70:51:d4:d3:60:84:79:55:a7:fa:58:38:82:8c:d6:9d:4f:
         87:f1:48:93:d5:09:7a:a7:0c:90:3c:9f:9f:6c:9e:74:25:22:
         7f:7e:69:40:7a:59:96:bf:48:5c:e8:b7:97:fe:c8:88:9e:a4:
         bf:67:14:48:07:ce:29:f1:08:86:e2:b5:e6:b2:e1:e6:ff:9a:
         36:ec:62:c4:a7:03:43:c2:cc:ff:00:1f:df:15:cb:70:5e:3b:
         78:af:4e:9a:dc:90:a4:36:23:b4:1d:cf:11:d4:34:b1:31:d3:
         de:ea:d8:90:16:d4:18:d3:86:a2:10:45:46:7f:6b:dd:80:97:
         6e:80:fb:6e:9b:ab:3d:fc:b8:8d:78:63:ee:8b:e4:1f:6c:ab:
         0a:b1:7d:1e:7f:82:c5:db:99:e1:fc:dc:39:b2:ac:53:5d:de:
         97:b3:1c:9c:5c:f4:4f:b2:07:2b:71:c5:51:12:56:8d:84:ce:
         e0:98:d4:5e:1e:e7:c1:12:0f:dd:ce:48:16:62:09:38:7d:54:
         0a:c1:58:2c:6d:42:f7:9d:a5:23:fe:23:a1:b6:2d:ad:7d:a7:
         60:e9:2d:53:2d:70:93:b6:6b:ea:3c:3a:54:c4:94:93:51:6d:
         bc:0e:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 04:26:35 2025 by rpki-client