Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File:                     JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier:          acZOB8eB6NUfCrPCM4CKRVaiiViGE0b3V5qwElyY+/o=
Subject key identifier:   7F:BE:50:19:A9:06:0F:87:DD:E0:DE:AC:FC:DA:87:D7:7C:C2:57:44
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer:       /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial:       0C6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number:          102B
Signing time:             Fri 30 May 2025 18:31:53 +0000
Manifest this update:     Fri 30 May 2025 18:31:52 +0000
Manifest next update:     Fri 06 Jun 2025 18:31:52 +0000
Files and hashes:         1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: Z35kcoN2ozITo1kNIdEVE5ihhE+GOKVsg5a5wz0a4kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
        Validity
            Not Before: May 30 18:31:52 2025 GMT
            Not After : Jun  6 18:31:52 2025 GMT
        Subject: CN=6839f998-2499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:23:fa:e4:b5:37:48:39:ff:c4:d7:a6:96:
                    a4:2c:ae:ec:0f:41:13:5d:b4:a1:21:6f:dd:a1:73:
                    8b:ca:5c:67:d1:60:d0:e8:20:7a:21:c6:52:fe:00:
                    fb:fc:46:a9:b0:e1:5a:4d:1c:0c:4c:23:41:96:b0:
                    11:b6:ec:f2:f7:4d:c0:98:52:eb:dc:46:9a:dd:61:
                    f3:7d:f9:fd:ee:16:cc:5f:76:7f:20:24:fc:05:bd:
                    58:c3:40:3c:ea:59:64:04:4e:9b:d5:9f:d1:a4:51:
                    9c:6f:f5:35:f5:e2:fd:30:fd:f3:96:44:f4:61:de:
                    f9:5d:5b:0e:09:74:59:14:d9:d0:44:15:43:62:e9:
                    d3:b8:ee:e4:db:2d:66:d9:28:da:19:dd:64:0a:a8:
                    33:8e:99:cc:f4:56:c1:68:22:9a:73:c2:94:03:e2:
                    fa:31:c7:14:e4:54:bf:ed:09:ea:a1:08:e7:7f:8b:
                    0e:f4:a6:c1:37:63:2c:e1:d0:b4:78:3f:92:54:57:
                    f2:27:37:0c:0b:56:53:0c:c3:65:2c:4a:e7:3b:b4:
                    c2:5c:07:99:66:15:04:92:dc:9b:78:06:b2:bf:66:
                    3a:e2:04:ea:82:f3:a0:31:33:23:b5:ca:17:23:46:
                    2a:5c:c6:69:20:44:53:67:c3:0b:d4:55:e1:22:53:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:50:19:A9:06:0F:87:DD:E0:DE:AC:FC:DA:87:D7:7C:C2:57:44
            X509v3 Authority Key Identifier:
                keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:9b:2e:7f:6c:e9:c0:c1:e6:98:06:c5:db:79:c3:33:31:
         39:1a:da:fe:50:bd:42:ae:a3:64:69:c6:e2:68:3f:20:ca:55:
         94:25:ee:6c:aa:da:68:4d:85:ec:d0:64:1b:7f:cf:76:6b:d1:
         86:0e:07:c0:5f:30:d7:25:2a:63:da:4e:55:d9:bf:74:f1:e6:
         6a:fa:0e:22:05:ed:b1:b2:96:5c:3e:16:47:ec:34:d8:ac:f6:
         44:73:bf:2f:fb:8b:a2:81:cc:00:4e:b9:ce:af:ce:05:f9:0d:
         e2:03:f3:e2:b3:ab:36:c1:df:a5:cc:5c:75:db:48:9d:2a:ca:
         86:1d:68:1d:92:c5:ee:23:b5:81:0b:76:85:cd:79:8d:a5:79:
         f0:1b:95:e4:82:59:fd:2d:43:59:65:67:31:8a:a1:80:b2:d4:
         e3:9d:56:b4:4b:62:ff:7c:89:b2:9b:02:92:52:16:20:58:7b:
         7b:39:66:5f:6b:49:39:a7:11:bc:b2:b8:a3:a1:d8:ad:23:90:
         ef:86:a0:4f:b2:ae:19:aa:7d:fc:35:dd:38:f7:bf:43:04:a9:
         39:c9:83:21:dc:d0:a0:ab:68:47:22:c9:0b:2b:34:c9:da:8b:
         9a:53:58:91:6e:da:05:04:08:f9:b6:e6:b6:0b:6f:0c:68:49:
         e0:38:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:57:42 2025 by rpki-client