Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
File:                     je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json)
Hash identifier:          7+ED9nvDirEysqinvs2gCzx8K2dQs2z/RglfTwJqb/w=
Subject key identifier:   C7:BC:08:45:5E:A8:C3:8D:5F:81:32:AB:75:95:27:01:41:EE:0F:ED
Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Certificate issuer:       /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Certificate serial:       0634
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
Manifest number:          062D
Signing time:             Thu 24 Jul 2025 23:04:06 +0000
Manifest this update:     Thu 24 Jul 2025 23:04:05 +0000
Manifest next update:     Thu 31 Jul 2025 23:04:05 +0000
Files and hashes:         1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: Hj7/aMNhewI443QBZrEgqLizcvGlDvCmUO2uuUKBNHo=)
                          2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
        Validity
            Not Before: Jul 24 23:04:05 2025 GMT
            Not After : Jul 31 23:04:05 2025 GMT
        Subject: CN=6882bbe5-fa23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:68:d5:ab:32:44:a4:26:b7:a5:a5:5e:99:
                    d2:c6:89:d3:83:37:a3:fe:92:16:ef:5c:e1:d4:4e:
                    16:92:78:89:e0:96:dc:da:f9:5b:51:02:03:4f:9a:
                    d3:9d:d9:dc:68:1f:c5:69:44:fd:80:1a:90:b9:eb:
                    64:7f:e0:4f:5b:9e:01:e7:03:da:5a:5d:b8:15:54:
                    b6:71:06:69:69:64:30:c5:9e:2b:77:7d:a2:c9:30:
                    15:0b:8c:7a:20:4a:3b:3b:a3:6b:fa:08:7e:f0:e3:
                    93:9e:d9:8e:b9:99:0b:34:d0:31:99:4e:11:fe:43:
                    99:be:e2:00:69:75:65:bd:18:c7:f4:e6:d9:bb:21:
                    17:94:c3:bb:9a:fe:fb:65:2e:c7:70:87:f4:73:2e:
                    d3:af:11:bf:ad:e5:76:ea:d0:71:9b:75:2e:f4:e1:
                    8c:46:42:96:a3:57:f0:dc:6b:d9:64:ad:f1:34:80:
                    44:27:ff:33:1a:69:e0:1c:98:11:5e:16:b0:bf:00:
                    b5:70:9f:39:fc:a1:26:7d:f8:67:9d:04:38:11:27:
                    41:38:78:a9:fe:b3:16:a7:e3:b7:9b:29:2a:89:69:
                    68:c0:4d:db:c7:92:4a:e2:af:42:d3:1b:a5:0e:b2:
                    1b:ab:16:fc:83:ac:84:73:ea:6a:fd:1f:4c:e7:24:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:08:45:5E:A8:C3:8D:5F:81:32:AB:75:95:27:01:41:EE:0F:ED
            X509v3 Authority Key Identifier:
                keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:20:5a:8b:41:39:99:b0:01:40:71:22:87:fb:cd:d2:d8:72:
         e9:5c:3d:2a:99:5a:b1:9b:19:39:17:82:78:01:15:1b:e1:8b:
         34:a8:71:a6:f2:dd:fe:20:31:40:ec:b7:5c:58:00:44:81:4a:
         d7:27:ca:87:dd:44:aa:ba:67:c0:fb:4a:3a:05:a9:fc:91:00:
         e8:8a:80:51:67:5f:ad:ce:63:60:32:ce:ad:0e:8f:0e:2b:26:
         ab:9f:e9:de:8a:29:e7:b6:34:0a:41:37:f5:a1:a5:d8:26:e2:
         c6:30:e7:f1:b9:b5:45:55:13:0d:8c:74:ac:c8:ae:96:af:e9:
         0c:d4:ed:e9:11:bc:14:ff:b1:a9:ea:fa:8c:23:66:e0:b7:81:
         94:f6:d3:fc:eb:40:21:f5:7e:71:6f:27:4c:65:9d:da:33:78:
         67:85:2e:70:77:9f:47:36:dc:94:47:15:1a:85:07:b3:c6:02:
         c5:13:43:81:69:a4:fc:1c:c1:a7:78:ec:ca:40:e1:3d:bf:3e:
         ad:8b:e7:d0:da:c9:d9:5c:d1:4a:16:73:6c:7d:1b:d2:f9:9a:
         b0:bb:54:56:ed:e9:dd:a5:28:47:5c:ef:cb:19:62:f8:2d:77:
         7c:c5:05:89:be:cc:d4:f8:d2:d9:ba:c5:8f:70:dd:9d:cf:db:
         86:88:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:10:29 2025 by rpki-client