Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          +vY6eZEiv/PxIh8cQUZ6C915b65lbL48XhOoFLgExeo=
Subject key identifier:   AF:F6:EC:C8:E5:64:6D:5E:A4:2B:C4:4E:F8:B7:C2:BB:09:F3:72:6A
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       14A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          1497
Signing time:             Fri 18 Jul 2025 17:00:27 +0000
Manifest this update:     Fri 18 Jul 2025 17:00:26 +0000
Manifest next update:     Fri 25 Jul 2025 17:00:26 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: SnLo7wPYwOEkdjJwoarddIB2wAIs1rT6KvrG0dDeH5w=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5281 (0x14a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: Jul 18 17:00:26 2025 GMT
            Not After : Jul 25 17:00:26 2025 GMT
        Subject: CN=687a7dab-0b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:d3:dc:6c:75:27:b5:b5:d8:d0:0a:f4:0c:
                    69:9d:d3:c3:e5:48:65:56:e6:94:2b:42:c4:92:21:
                    cf:1c:40:18:95:d1:30:ec:a8:a9:38:6e:f4:a4:72:
                    28:68:7e:2d:60:d6:af:84:b8:e4:8c:e9:cb:9f:bb:
                    72:2c:58:9d:44:4d:05:ef:a2:47:a5:8f:a6:9e:0c:
                    b6:8f:1b:97:a0:12:0c:10:65:ff:9d:59:6b:14:1a:
                    d9:3a:eb:02:18:05:47:85:4f:a3:1a:32:f3:ad:09:
                    a3:f0:42:6f:0f:54:74:50:90:41:e1:82:95:ce:16:
                    06:ab:fd:bd:78:db:b0:23:26:0e:6c:af:cf:43:79:
                    b9:59:55:25:85:fe:b6:4f:83:83:17:e4:06:68:94:
                    95:09:47:fc:d7:1d:08:7b:3b:4b:7d:89:ec:19:f8:
                    4d:72:c0:47:69:d2:96:d9:5b:7e:09:81:96:d3:b3:
                    63:e4:84:b4:27:bc:70:06:74:cd:e9:42:d7:fc:5e:
                    58:b1:11:0f:1b:39:89:1b:c7:d7:2e:dd:8b:cb:06:
                    fb:4f:67:07:15:e8:e8:fd:15:f5:d3:62:45:f3:ec:
                    a5:b4:5a:c0:1e:c2:e6:99:2c:41:f9:e2:8f:4d:85:
                    a7:20:7b:8e:20:b7:7f:2e:e4:c5:75:1e:76:fc:c1:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:EC:C8:E5:64:6D:5E:A4:2B:C4:4E:F8:B7:C2:BB:09:F3:72:6A
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:8b:cc:69:13:49:34:c4:5f:3e:c4:54:a0:b0:3c:3c:36:
         cd:32:95:bd:22:c7:19:5b:1f:4b:69:41:60:6f:34:33:7c:10:
         10:55:2a:7f:9f:91:25:0d:b6:68:78:8e:21:f9:54:57:e1:80:
         8e:ea:75:c2:c5:a0:2a:01:c9:41:9f:7a:ea:27:8b:e5:9b:4a:
         4e:72:29:00:39:74:d2:8d:52:a3:0f:0d:56:c4:8e:fb:e4:c6:
         3c:d6:a9:cb:7f:e5:02:b2:6e:fc:2c:b5:7f:4b:41:d6:58:3f:
         5f:26:e9:4c:5d:c1:09:b4:03:19:d7:69:a4:9f:99:0a:f0:64:
         06:25:e5:73:c3:b7:94:dd:bf:11:3f:26:9d:dc:63:b7:6f:a9:
         c9:a2:87:a1:97:87:ce:33:fe:ea:26:6b:fa:48:57:9d:6f:3a:
         9e:48:24:0d:03:7d:f1:b9:e2:78:4b:e7:18:e1:6a:0e:b5:d9:
         28:ce:6e:f0:a2:79:a2:94:4d:1a:a4:47:55:80:46:21:4f:e9:
         34:57:14:1e:5c:99:24:bb:4e:60:3f:ba:d0:2f:a8:ef:75:7c:
         b4:d2:74:7f:38:a0:20:d9:d3:f7:9d:00:f1:b9:9d:22:e0:54:
         be:0f:cb:a3:17:91:98:ea:8b:30:a3:1b:04:ff:42:8e:03:86:
         db:4f:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:56:06 2025 by rpki-client