Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File:                     rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier:          fNsxTtuuzu5gJ1GOD0MYY5+GfTqXoXLzHeUy+IQx5r4=
Subject key identifier:   3A:77:D1:FB:E2:49:DA:58:C2:25:9E:59:F0:95:4E:7F:95:55:A3:6A
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer:       /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number:          C5
Signing time:             Wed 23 Jul 2025 06:03:52 +0000
Manifest this update:     Wed 23 Jul 2025 06:03:51 +0000
Manifest next update:     Wed 30 Jul 2025 06:03:51 +0000
Files and hashes:         1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: MJou5BbRpQeL9zayx/GdKMeGv/xB0UyVd4fKgHZYgXc=)
                          2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
        Validity
            Not Before: Jul 23 06:03:51 2025 GMT
            Not After : Jul 30 06:03:51 2025 GMT
        Subject: CN=68807b48-2a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:00:b5:b3:50:ac:3f:ec:ff:75:83:57:85:
                    a5:4e:24:da:fa:6a:6a:62:97:20:2b:3e:c8:be:1f:
                    b4:c9:dd:c9:81:11:51:af:11:80:ce:e1:59:eb:4d:
                    52:29:8a:84:1b:32:50:6a:b5:89:54:75:7e:48:a9:
                    9c:80:ad:f1:a5:99:6a:f1:92:a5:4e:5e:cd:bf:54:
                    bd:be:d5:b1:3a:e4:ba:e6:f4:ac:93:01:f4:d5:97:
                    bf:97:04:71:24:4f:fe:e5:5b:1c:19:a8:5a:1d:54:
                    ae:c0:48:75:14:f3:c9:6b:25:a4:0e:9f:50:6d:7e:
                    b6:46:2a:ae:db:21:06:60:da:e7:be:d9:5d:ff:d6:
                    db:a6:9b:7d:1a:10:3b:41:dd:4c:b3:d9:a3:e6:cb:
                    22:3e:52:16:79:22:d9:4c:96:83:35:d1:4a:a8:e8:
                    8c:a7:5e:b2:60:cb:32:bf:f8:8d:f8:e7:79:d5:05:
                    06:c9:38:50:48:7c:15:01:82:a0:e7:7f:70:78:29:
                    5c:e5:54:15:58:d1:ab:09:c8:58:b2:23:8e:30:11:
                    33:14:46:b3:4e:ba:f5:f2:98:ba:02:eb:bc:5f:29:
                    b7:42:eb:c3:ed:f3:76:d9:32:34:41:32:31:54:28:
                    3f:d5:3d:14:43:a3:60:87:dd:35:64:b3:1f:6b:c4:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:D1:FB:E2:49:DA:58:C2:25:9E:59:F0:95:4E:7F:95:55:A3:6A
            X509v3 Authority Key Identifier:
                keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:5b:36:4e:ce:8a:81:6d:c5:b8:6f:f6:6c:6f:57:6e:6a:
         f8:cc:40:e4:8f:a6:18:3e:7f:a8:83:15:df:0b:61:bc:03:6b:
         d8:15:31:2b:7d:3d:64:3e:9b:8f:71:c2:68:2c:87:2d:23:02:
         8e:34:f7:5e:1a:d9:22:85:ab:4b:15:f5:af:15:75:25:85:00:
         67:f0:1b:bb:51:1d:76:8a:b5:32:28:8c:64:d0:e6:b4:03:6f:
         f5:7d:40:68:97:b6:69:35:0b:c7:a0:df:2a:20:65:8d:c2:41:
         08:b6:41:88:98:28:38:02:7b:7c:fa:e9:c8:23:93:9c:65:7a:
         7f:8c:90:ac:47:55:1f:fe:14:11:61:3e:83:e3:38:ec:ad:a9:
         a4:ba:a8:60:8c:a1:a7:38:0b:8c:a5:df:bf:01:3e:e3:a7:6c:
         99:75:39:73:65:19:2e:10:c9:8c:c5:9a:6a:92:a5:f1:b1:11:
         62:50:51:f0:70:ff:ee:52:b0:7c:ca:f2:4c:04:02:d9:2f:f6:
         14:7b:dd:6f:c2:44:5c:e6:43:01:a1:da:dd:56:fc:af:38:8f:
         35:dd:b5:6e:c0:9e:1d:a1:da:64:f8:29:37:34:19:7e:92:80:
         95:ed:a7:db:0c:c3:21:09:4f:6e:92:8e:3e:a0:59:cc:ae:e2:
         7e:bf:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:22:24 2025 by rpki-client