Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          Mt5Bsl/u2GEMbiqRno02cXY5u/OPNoGfkO/T8n466YM=
Subject key identifier:   07:C7:7A:1C:E1:AE:8F:7B:A8:45:BD:E8:3E:C9:42:35:42:6E:63:4F
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       064A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          0639
Signing time:             Sun 20 Jul 2025 22:54:24 +0000
Manifest this update:     Sun 20 Jul 2025 22:54:24 +0000
Manifest next update:     Sun 27 Jul 2025 22:54:24 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: Ql0nhBy76xb9IX5nnppph6Hf6oOv5/e4r/tCW/xb/mA=)
                          2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: mwRP961xtY2lPq9MW+s5fgbFnCinGV45dL2366gga8s=)
                          3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: W99oRxw3I+qxKmMA4BJDWXe3wvdXS+ZW2rGIK9SdBKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Jul 20 22:54:24 2025 GMT
            Not After : Jul 27 22:54:24 2025 GMT
        Subject: CN=687d73a0-1d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:00:43:cc:5a:51:3c:74:da:30:27:2a:53:
                    1f:d0:d7:0a:2e:96:52:1b:6e:bd:5c:e6:ce:e4:18:
                    45:b2:ea:0d:c0:3d:8d:78:e2:a8:29:12:9a:f2:3d:
                    46:04:48:3a:ee:69:91:40:49:9e:30:bd:56:63:7c:
                    a2:99:9d:2a:cf:a6:00:d3:bf:1d:15:f9:3a:3d:cb:
                    d4:a6:f3:ba:7b:63:0b:be:ea:4d:4f:e8:bb:14:b2:
                    49:50:f5:62:59:2a:08:24:01:00:37:29:6b:b3:8d:
                    66:88:f8:59:a2:6e:e6:98:97:73:6f:6b:a6:27:40:
                    9a:3f:97:ef:4e:11:53:be:d9:e8:74:98:6d:ad:d4:
                    c1:e9:8f:43:43:3d:a9:bd:ec:7f:9c:b2:06:cd:76:
                    0b:78:45:2b:55:a1:d9:0e:40:4a:86:97:ba:32:56:
                    20:8b:7d:ea:8b:86:3e:55:9c:70:5f:83:06:99:3a:
                    d2:b6:ed:f4:3c:6c:eb:f5:03:ce:f0:51:dc:d5:cd:
                    8d:05:e7:c0:05:33:35:fa:65:7e:c4:df:3e:80:e1:
                    41:30:f9:e7:95:4f:cb:49:67:3d:b1:ee:6f:81:72:
                    d7:8c:db:f9:f5:61:8b:53:02:6e:87:d9:d2:3d:a5:
                    0d:32:af:ad:68:d5:bb:7e:19:0b:38:73:39:ec:13:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:7A:1C:E1:AE:8F:7B:A8:45:BD:E8:3E:C9:42:35:42:6E:63:4F
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:b0:4f:ec:c7:46:98:13:8b:f2:40:8f:ce:bb:43:53:21:
         23:5b:82:c1:f9:36:ac:de:4c:af:93:66:f5:5d:55:72:a3:50:
         a9:fa:f2:59:de:0c:8d:0b:2e:dd:58:31:8d:f3:a3:57:5e:11:
         8c:3c:82:9a:36:d6:2e:ba:9a:74:7c:60:75:28:95:b6:93:f5:
         98:fe:f8:aa:a5:ea:2d:dc:00:fc:36:0b:e2:cb:ce:b8:15:ac:
         5a:12:b4:1a:7a:af:ca:15:f9:ba:a3:77:48:1e:ec:d0:71:13:
         fb:f9:4e:87:b3:ed:92:43:32:da:42:b9:f0:3d:d3:2e:ce:01:
         02:e5:a1:cb:cc:2f:4a:bb:1f:e4:61:41:66:88:c1:90:37:80:
         0a:63:7b:30:ac:72:71:94:91:16:f7:b9:ca:8b:f7:7f:c3:3d:
         35:29:36:c2:6e:c8:e1:47:ef:10:7b:f0:a3:62:76:75:a4:4f:
         49:1f:75:a0:05:4e:47:0f:bd:91:b8:fb:c1:19:42:18:d7:14:
         2a:2b:a0:85:c0:e3:d5:61:e9:6e:23:05:3d:b5:dd:1a:42:66:
         46:20:6a:35:73:d8:c8:72:ef:09:70:07:d2:df:fd:d2:fb:75:
         54:c0:b4:27:e2:1b:20:f4:2e:eb:95:6a:48:ce:23:2e:d0:38:
         12:24:fe:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3
QUIyQjNCMkUwHhcNMjUwNzIwMjI1NDI0WhcNMjUwNzI3MjI1NDI0WjAYMRYwFAYD
VQQDEw02ODdkNzNhMC0xZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0U0AQ8xaUTx02jAnKlMf0NcKLpZSG269XObO5BhFsuoNwD2NeOKoKRKa8j1G
BEg67mmRQEmeML1WY3yimZ0qz6YA078dFfk6PcvUpvO6e2MLvupNT+i7FLJJUPVi
WSoIJAEANylrs41miPhZom7mmJdzb2umJ0CaP5fvThFTvtnodJhtrdTB6Y9DQz2p
vex/nLIGzXYLeEUrVaHZDkBKhpe6MlYgi33qi4Y+VZxwX4MGmTrStu30PGzr9QPO
8FHc1c2NBefABTM1+mV+xN8+gOFBMPnnlU/LSWc9se5vgXLXjNv59WGLUwJuh9nS
PaUNMq+taNW7fhkLOHM57BMFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfHehzh
ro97qEW96D7JQjVCbmNPMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw
NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ
U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOCLBP7MdGmBOL8kCPzrtDUyEjW4LB+Tas3kyvk2b1XVVyo1Cp+vJZ
3gyNCy7dWDGN86NXXhGMPIKaNtYuupp0fGB1KJW2k/WY/viqpeot3AD8Ngviy864
FaxaErQaeq/KFfm6o3dIHuzQcRP7+U6Hs+2SQzLaQrnwPdMuzgEC5aHLzC9Kux/k
YUFmiMGQN4AKY3swrHJxlJEW97nKi/d/wz01KTbCbsjhR+8Qe/CjYnZ1pE9JH3Wg
BU5HD72RuPvBGUIY1xQqK6CFwOPVYeluIwU9td0aQmZGIGo1c9jIcu8JcAfS3/3S
+3VUwLQn4hsg9C7rlWpIziMu0DgSJP52
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:42:38 2025 by rpki-client