Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          NgijrUKRIqkqniib5ObuqOA0vcRYl0a6+HsVZhyuS20=
Subject key identifier:   C2:E6:8C:42:0C:F9:38:81:CF:71:60:83:95:E5:F5:0E:ED:EB:62:2C
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          32
Signing time:             Sat 19 Jul 2025 07:56:54 +0000
Manifest this update:     Sat 19 Jul 2025 07:56:54 +0000
Manifest next update:     Sat 26 Jul 2025 07:56:53 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: zeeqGipH1Pjt7t5hF9zlQQLZSYl/weaBi1llf0iGU+o=)
                          2: 6065D794238B11F0A6312687C4F9AE02.roa (hash: IEKHYh/ngtYZA0UCxVdmnCpzFo6yTGWKpCs27PXlBHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Jul 19 07:56:54 2025 GMT
            Not After : Jul 26 07:56:53 2025 GMT
        Subject: CN=687b4fc6-c3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:b4:a4:8b:d5:74:9f:e5:6d:55:f6:c1:01:
                    54:f6:25:a5:52:82:ba:99:7f:09:9f:84:28:c3:20:
                    28:9d:87:73:a0:ab:6c:7a:99:79:e4:ce:98:72:ff:
                    87:ea:a3:15:e9:d3:03:9d:55:dd:b0:ef:a0:e1:14:
                    ea:71:1e:00:e7:fd:f5:aa:0d:e7:c2:42:39:bf:93:
                    38:58:3f:04:f5:a3:dd:03:3a:31:23:96:45:2a:75:
                    b8:da:9f:4c:fa:c7:3d:c2:0b:1a:a0:01:f8:08:29:
                    d5:66:2f:9f:00:22:a9:6a:9a:bf:92:e1:96:85:e5:
                    89:57:1f:4e:b8:ac:d7:8f:18:22:1f:af:db:9a:50:
                    65:78:b6:57:75:d7:c4:fc:77:1b:41:29:be:bd:85:
                    38:da:35:39:f0:60:7a:63:6b:3f:bf:4f:72:87:c8:
                    a2:08:29:94:86:ac:56:f3:8a:2c:0e:38:34:fa:3d:
                    ee:cc:94:e3:af:58:a5:aa:aa:52:a4:1a:35:a0:81:
                    32:07:32:39:72:e9:57:f4:9a:b2:8e:f2:cf:c2:96:
                    bf:40:af:fc:b2:42:8a:f8:d4:bd:91:f3:86:3e:c6:
                    cd:77:88:bb:9e:b7:b2:56:4e:cc:31:8e:02:72:80:
                    16:c5:73:ce:db:c9:ee:d5:33:2e:cb:91:fa:c6:ab:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:8C:42:0C:F9:38:81:CF:71:60:83:95:E5:F5:0E:ED:EB:62:2C
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:0b:21:54:9d:2e:2f:de:81:1c:04:d9:b0:71:8d:95:36:
         b0:ad:27:27:d7:82:60:ba:81:c0:23:e7:c0:f0:e0:cc:63:c9:
         67:c6:a7:ea:80:c6:05:92:98:ed:12:7a:83:20:0f:70:6a:78:
         a9:e8:3e:cd:e4:60:60:8d:94:40:70:ac:49:53:8d:20:eb:15:
         74:43:54:99:24:10:a1:34:6a:a5:68:d5:f2:e1:d1:e5:ef:bc:
         7b:b7:4d:24:2b:4b:04:41:3c:c7:de:0b:62:63:1d:bf:0a:1b:
         24:48:96:b3:63:4b:d6:aa:bb:c0:bc:a7:02:b9:f0:d8:95:29:
         fb:5f:87:5f:35:d1:35:c7:71:99:56:f2:20:c9:91:d1:7a:18:
         3c:ac:dd:0d:ec:1e:e5:b8:f6:73:77:ae:76:5e:c5:79:ab:b9:
         1c:5e:81:42:7a:6e:94:f3:a8:45:60:1a:a9:b7:1c:17:92:0d:
         c4:79:dd:9a:75:8b:4a:09:7d:06:a9:88:7a:9d:a0:7d:88:07:
         f4:44:88:19:a0:94:e1:d9:61:78:3b:41:3b:f4:8f:3b:df:2e:
         9b:c4:0b:37:a4:bd:4d:77:0c:a3:3f:9f:58:1c:a9:30:49:1c:
         60:19:8d:df:f5:51:42:70:10:bd:d2:ba:62:c7:e0:76:ef:47:
         d1:85:c9:5f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODZBQjExMC8GA1UEBRMoMjdFQjU5MkM5RjdDRjIxMjcyNUM3QTAwMEUyRjZEMEQ5
NkNBNTIzNTAeFw0yNTA3MTkwNzU2NTRaFw0yNTA3MjYwNzU2NTNaMBgxFjAUBgNV
BAMTDTY4N2I0ZmM2LWMzZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4IrSki9V0n+VtVfbBAVT2JaVSgrqZfwmfhCjDICidh3Ogq2x6mXnkzphy/4fq
oxXp0wOdVd2w76DhFOpxHgDn/fWqDefCQjm/kzhYPwT1o90DOjEjlkUqdbjan0z6
xz3CCxqgAfgIKdVmL58AIqlqmr+S4ZaF5YlXH064rNePGCIfr9uaUGV4tld118T8
dxtBKb69hTjaNTnwYHpjaz+/T3KHyKIIKZSGrFbziiwOODT6Pe7MlOOvWKWqqlKk
GjWggTIHMjly6Vf0mrKO8s/Clr9Ar/yyQor41L2R84Y+xs13iLuet7JWTswxjgJy
gBbFc87bye7VMy7LkfrGq7tDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwuaMQgz5
OIHPcWCDleX1Du3rYiwwHwYDVR0jBBgwFoAUJ+tZLJ988hJyXHoADi9tDZbKUjUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NkFCLzc1ODEwMjMyMUM1
ODExRjA4QzRFOTc0REM0RjlBRTAyL0otdFpMSjk4OGhKeVhIb0FEaTl0RFpiS1Vq
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSi10WkxKOTg4aEp5WEhvQURpOXREWmJLVWpVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
NkFCLzc1ODEwMjMyMUM1ODExRjA4QzRFOTc0REM0RjlBRTAyL0otdFpMSjk4OGhK
eVhIb0FEaTl0RFpiS1VqVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAyDCyFUnS4v3oEcBNmwcY2VNrCtJyfXgmC6gcAj58Dw4MxjyWfGp+qA
xgWSmO0SeoMgD3BqeKnoPs3kYGCNlEBwrElTjSDrFXRDVJkkEKE0aqVo1fLh0eXv
vHu3TSQrSwRBPMfeC2JjHb8KGyRIlrNjS9aqu8C8pwK58NiVKftfh1810TXHcZlW
8iDJkdF6GDys3Q3sHuW49nN3rnZexXmruRxegUJ6bpTzqEVgGqm3HBeSDcR53Zp1
i0oJfQapiHqdoH2IB/REiBmglOHZYXg7QTv0jzvfLpvECzekvU13DKM/n1gcqTBJ
HGAZjd/1UUJwEL3SumLH4HbvR9GFyV8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:50:48 2025 by rpki-client