Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          TXTtllcaPwOem6q+Hh7zS00+9p3mw8uH6Ls1N4BFIs8=
Subject key identifier:   37:2F:B8:40:BB:BE:94:21:E0:1D:C9:C4:44:28:AC:74:D3:45:92:97
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          C3
Signing time:             Sat 19 Jul 2025 05:58:20 +0000
Manifest this update:     Sat 19 Jul 2025 05:58:19 +0000
Manifest next update:     Sat 26 Jul 2025 05:58:19 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: Q3K8qs+eaOppvTBvzi/rX/fQh6vFwYNsTZYmIGt+He4=)
                          2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: VSLP0SurFYr7NQK9R5lJWuMTjXBESVuwKDdrtUvBsXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Jul 19 05:58:19 2025 GMT
            Not After : Jul 26 05:58:19 2025 GMT
        Subject: CN=687b33fc-c4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:12:93:43:fe:80:c9:7c:d4:a3:c2:be:95:
                    a4:49:a5:85:af:80:09:cc:ab:90:bc:51:58:31:ba:
                    44:c4:9d:0e:b8:fe:c1:49:06:8f:d3:7a:66:54:f4:
                    20:5f:9a:e8:fd:be:bc:10:fd:3d:7a:82:a9:0f:20:
                    70:fb:6d:c0:e4:f3:98:78:6a:81:b1:9e:b6:96:c6:
                    af:18:e5:48:00:a3:0a:ef:6c:bd:61:57:4d:60:ae:
                    6a:41:36:c3:3a:45:fd:e4:98:73:c6:4c:b7:fc:3f:
                    ba:14:7b:53:83:4e:a8:cd:71:df:93:6b:ff:d8:40:
                    fb:94:d0:01:87:1d:d1:f3:33:57:50:ab:75:87:5c:
                    38:ab:ed:42:4d:a7:6a:9c:cf:3f:5c:84:36:a4:6f:
                    fe:95:90:34:70:74:96:1a:23:2a:33:69:54:4b:5c:
                    1e:bf:66:65:7d:72:85:9c:33:1c:72:d9:8a:a9:52:
                    08:21:e3:1a:5d:bc:17:bb:20:71:71:7f:87:e9:7d:
                    54:7f:81:f0:59:a7:a5:7a:a2:b9:1b:e3:33:e3:81:
                    9f:83:be:db:6d:97:53:58:50:0a:1b:79:36:fb:18:
                    a5:43:6b:76:53:7d:35:42:3b:8c:70:7a:42:fe:71:
                    b2:31:40:30:a4:70:1c:c8:81:89:3f:cf:71:31:8c:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:B8:40:BB:BE:94:21:E0:1D:C9:C4:44:28:AC:74:D3:45:92:97
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:45:b5:a2:0e:89:0c:6a:fa:25:15:85:6f:32:51:54:c4:
         81:6f:c3:15:56:b1:f3:52:4a:7a:ab:1d:df:fe:45:e4:12:91:
         99:8c:3c:a8:26:32:8d:ee:26:be:7d:19:11:0d:eb:6f:e1:7a:
         36:b5:7e:b7:87:72:64:85:9a:f8:31:e6:e7:96:2e:ab:57:d2:
         f3:29:bd:a7:22:4c:dd:5a:a0:3b:fd:e2:89:9a:57:47:f6:20:
         6a:e4:60:65:0b:fd:7e:90:47:ce:c3:4c:fd:ff:80:63:e9:28:
         4f:e9:9c:5c:02:62:df:c7:fb:6a:b6:27:fc:be:59:6d:5a:1e:
         9f:01:37:af:3d:cd:6d:91:2c:8a:cf:0a:e0:ba:12:4e:6c:a6:
         b1:b4:19:7b:95:68:37:c8:e7:b0:fa:c1:5c:7c:e9:84:d4:ce:
         00:f0:4f:c6:55:85:f6:47:bb:b2:0f:76:19:e3:17:88:a3:92:
         3b:4f:15:bf:f6:d6:05:46:1a:27:c7:7b:dd:96:19:66:92:3e:
         1c:cd:b1:14:a4:e6:ef:76:36:77:ca:9e:41:65:ae:1d:c4:82:
         93:4c:2f:96:3a:81:3f:92:1b:92:83:32:8a:41:83:70:d8:f2:
         6c:73:b1:5b:56:a3:75:8d:db:a4:5c:48:d4:d0:c0:b9:4b:3c:
         25:42:d9:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD
MEIxNUI4RTAwHhcNMjUwNzE5MDU1ODE5WhcNMjUwNzI2MDU1ODE5WjAYMRYwFAYD
VQQDEw02ODdiMzNmYy1jNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxr4Sk0P+gMl81KPCvpWkSaWFr4AJzKuQvFFYMbpExJ0OuP7BSQaP03pmVPQg
X5ro/b68EP09eoKpDyBw+23A5POYeGqBsZ62lsavGOVIAKMK72y9YVdNYK5qQTbD
OkX95Jhzxky3/D+6FHtTg06ozXHfk2v/2ED7lNABhx3R8zNXUKt1h1w4q+1CTadq
nM8/XIQ2pG/+lZA0cHSWGiMqM2lUS1wev2ZlfXKFnDMcctmKqVIIIeMaXbwXuyBx
cX+H6X1Uf4HwWaeleqK5G+Mz44Gfg77bbZdTWFAKG3k2+xilQ2t2U301QjuMcHpC
/nGyMUAwpHAcyIGJP89xMYz/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcvuEC7
vpQh4B3JxEQorHTTRZKXMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3
OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr
ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9L0W1og6JDGr6JRWFbzJRVMSBb8MVVrHzUkp6qx3f/kXkEpGZjDyo
JjKN7ia+fRkRDetv4Xo2tX63h3JkhZr4Mebnli6rV9LzKb2nIkzdWqA7/eKJmldH
9iBq5GBlC/1+kEfOw0z9/4Bj6ShP6ZxcAmLfx/tqtif8vlltWh6fATevPc1tkSyK
zwrguhJObKaxtBl7lWg3yOew+sFcfOmE1M4A8E/GVYX2R7uyD3YZ4xeIo5I7TxW/
9tYFRhonx3vdlhlmkj4czbEUpObvdjZ3yp5BZa4dxIKTTC+WOoE/khuSgzKKQYNw
2PJsc7FbVqN1jdukXEjU0MC5SzwlQtki
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:05:35 2025 by rpki-client