Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File:                     jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier:          5iNs+IbDp19PDxXo4mTRahU+y7qXBixM40y0jQvNyEY=
Subject key identifier:   1B:F1:C5:3B:85:1C:EB:6A:05:4F:14:E9:04:4B:13:48:8F:5D:D1:C6
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number:          0143
Signing time:             Sat 19 Jul 2025 04:32:58 +0000
Manifest this update:     Sat 19 Jul 2025 04:32:58 +0000
Manifest next update:     Sat 26 Jul 2025 04:32:57 +0000
Files and hashes:         1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: r4SAhPtsgo3an7wPa5tUHnRDl7xyElrtMHGQvWF3DnQ=)
                          2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: hIfGEZpVGRuqTYaqcdzSTwoH6LvOfzrGbr0BYVenTJE=)
                          3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: xpU4YvMsifPhb0IGkIRTwpNd6P9gbkGB+l0mAvn3/+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
                          rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Jul 19 04:32:58 2025 GMT
            Not After : Jul 26 04:32:57 2025 GMT
        Subject: CN=687b1ffa-70c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:79:f8:f9:0f:47:39:b5:af:bf:2e:03:ab:
                    30:52:05:5c:3e:9a:40:8b:92:a3:e1:b7:c7:ad:23:
                    38:33:53:f7:47:fa:3d:67:2d:ff:bb:70:ad:0a:5e:
                    64:ca:b7:82:b5:9c:20:5c:5f:51:68:66:b6:91:f8:
                    17:e6:9b:64:6a:28:19:b8:37:56:6a:d3:26:89:06:
                    bf:21:5e:47:5e:8d:e1:e7:0a:8a:d4:cc:88:75:8b:
                    81:73:11:12:30:ca:5a:78:bd:74:da:6a:f3:04:71:
                    fc:b2:6a:e6:a2:80:70:0e:4f:cb:58:2c:d4:13:54:
                    a6:32:74:42:a2:cc:5e:af:3e:c3:13:53:17:76:29:
                    79:94:93:05:17:0d:5e:a2:3f:77:ea:d0:2d:bc:31:
                    2e:dd:ec:64:89:9f:60:e7:a9:14:f5:85:3c:71:bc:
                    1a:17:f9:8d:0c:1d:4e:a0:fa:1e:e8:95:2f:dc:0c:
                    fd:1f:73:a8:7d:30:b5:24:83:9b:99:40:3b:a5:2e:
                    bd:84:69:68:c0:8a:8a:7d:1c:53:9c:6d:14:53:6c:
                    84:b6:fc:d5:ea:34:1f:59:31:3f:2b:c2:d3:82:7c:
                    d1:29:29:d5:a4:a7:47:78:d6:f1:41:23:1d:d2:46:
                    af:1f:8a:f4:6c:8b:d2:b7:9c:96:59:e9:42:cb:f6:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:C5:3B:85:1C:EB:6A:05:4F:14:E9:04:4B:13:48:8F:5D:D1:C6
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:2d:55:aa:bf:9c:50:2f:89:7e:1a:5c:0e:6b:d7:3f:af:
         a1:d9:65:bb:f3:3a:25:26:4e:ac:cd:aa:6f:05:1e:77:7f:01:
         03:6c:14:6f:71:8b:fd:d7:5f:6d:b5:61:4c:8c:06:fb:01:08:
         76:a2:97:52:08:76:a8:53:2c:89:54:81:2c:fe:cc:3d:ed:ae:
         95:f0:18:44:5c:e5:78:86:ea:f5:da:04:71:f3:ba:bb:f5:e8:
         39:1e:86:88:ed:c8:8c:9d:c9:21:ec:2e:dc:22:bc:5a:1f:6b:
         70:16:85:7e:0c:08:e9:15:ad:e9:a7:5f:e7:25:34:5a:fa:43:
         65:ad:06:9e:f2:6d:68:2c:6d:86:90:40:0d:0c:ae:4d:ae:b6:
         3a:18:80:2c:b4:90:b7:c7:20:10:da:ef:41:cc:8e:3d:56:a1:
         b0:aa:51:b6:c2:b7:71:2e:3c:18:80:2a:00:cc:9a:54:ca:58:
         9b:d4:49:5b:76:c9:74:d1:db:0c:2c:46:b8:58:12:48:f7:7b:
         82:ad:22:46:f6:42:e2:2d:bd:24:4a:83:a1:29:e2:e1:2a:bc:
         e7:ce:91:97:23:54:76:e4:10:78:19:1e:40:92:91:83:b8:a8:
         8a:99:47:76:6d:e9:e0:b0:ac:2f:30:2c:13:6f:bf:08:84:b5:
         ac:e0:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:55:36 2025 by rpki-client