Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
File:                     jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json)
Hash identifier:          fXPdhou35fboQsQZ1KK/X5AUyNHScE92p4/rf0jE5t0=
Subject key identifier:   C7:26:B2:13:9A:97:90:8C:FA:FA:00:CD:5C:7E:A1:1C:80:04:B1:66
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Certificate issuer:       /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
Manifest number:          0406
Signing time:             Fri 25 Jul 2025 00:48:23 +0000
Manifest this update:     Fri 25 Jul 2025 00:48:23 +0000
Manifest next update:     Fri 01 Aug 2025 00:48:23 +0000
Files and hashes:         1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: Cb5Eh6wlDplmHyBIRv0mmCU+wG7yPVkprtfqd0noQ/E=)
                          2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=)
                          3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
                          rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 00:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
        Validity
            Not Before: Jul 25 00:48:23 2025 GMT
            Not After : Aug  1 00:48:23 2025 GMT
        Subject: CN=6882d457-9473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:95:11:81:c2:6a:e8:5f:4d:f5:f7:b2:d5:
                    b8:c9:87:b8:15:c9:b0:f4:ec:1b:9d:59:28:d2:3c:
                    16:df:10:88:81:e0:43:8b:e1:3f:b4:6c:f9:0a:b6:
                    23:c7:ac:77:8f:ce:2a:0f:ae:4f:c0:ba:58:34:82:
                    f7:2e:9b:bd:60:bb:d6:8b:6c:0c:ab:db:d8:c8:8e:
                    8c:1c:94:96:35:83:6e:92:6c:85:17:44:d9:70:f4:
                    7a:4a:d6:19:f1:f8:19:44:8a:01:5f:75:f5:62:c7:
                    bf:2e:48:b6:d8:8b:6e:31:d6:34:b3:58:67:2b:62:
                    e7:a8:3a:45:2e:ea:91:4c:dc:9f:6d:6c:ae:7f:c1:
                    3e:52:7a:a3:48:a9:59:2a:43:1c:23:ba:e1:ab:a9:
                    b9:2d:e4:39:2e:a0:82:0e:b1:e3:7d:14:00:9a:45:
                    ee:7f:ac:2a:03:ec:f1:47:f1:1c:84:f7:b3:28:c3:
                    bf:4a:9b:b0:3c:28:8f:6b:fc:5f:60:ba:6c:57:11:
                    1f:d8:12:66:59:f7:d9:d6:f3:41:b3:1c:9b:a9:bd:
                    86:26:ed:bb:59:73:70:b4:a5:01:63:be:26:45:37:
                    6d:8f:ca:5f:8b:73:e8:d5:1e:e7:28:8b:fe:46:9a:
                    c7:02:c0:92:a7:0d:93:be:6f:59:c9:64:35:c3:f4:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:B2:13:9A:97:90:8C:FA:FA:00:CD:5C:7E:A1:1C:80:04:B1:66
            X509v3 Authority Key Identifier:
                keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:68:02:ac:2f:23:24:ca:08:bf:51:7d:13:12:c5:8e:e1:
         42:01:f3:0f:29:45:b2:c4:bc:51:d2:c7:c2:f3:5f:64:6c:34:
         65:bb:12:45:f7:cf:89:c5:5e:ea:42:be:b0:cf:17:88:c3:7b:
         c6:00:67:3f:d5:a3:5b:48:3c:26:01:8e:c6:5c:b2:1b:56:02:
         72:b8:1c:ae:c5:05:c7:59:a7:af:89:03:6b:cb:c5:da:6e:b8:
         e9:e5:30:52:15:4b:57:3d:50:45:22:f4:6e:0c:40:6f:af:72:
         9d:69:47:57:01:47:4e:ef:20:45:0d:65:73:35:c1:24:a7:9b:
         e2:8c:56:1e:dd:7a:b6:df:31:0c:66:52:e3:29:f0:ff:7d:45:
         f4:90:78:8a:a4:d5:cd:cc:19:d1:77:3d:cc:e9:61:4b:38:67:
         21:e0:fc:76:8b:f7:b0:61:96:b3:98:05:5c:c6:16:c0:c2:7f:
         e6:e3:6c:7e:30:50:97:50:c5:88:f6:b4:37:c1:a1:ab:de:4b:
         d5:0b:b3:fe:83:29:ab:9d:d8:20:e8:57:67:1b:01:28:0a:60:
         3d:93:8e:9d:c3:39:6a:d0:3b:b4:ca:f7:06:9e:18:fe:32:3c:
         cc:29:1a:44:b0:80:d8:f3:7f:c6:52:46:b7:72:08:9c:a0:47:
         b2:da:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:26:20 2025 by rpki-client