Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          aX2PrZ3aGiKsKMRTaRH7VWLsPDv9K5FWX/+2u3yZb6E=
Subject key identifier:   CE:51:A6:0F:E5:F4:76:24:FC:1A:E1:C6:5B:E1:0A:0F:FE:62:9B:01
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          79
Signing time:             Mon 21 Jul 2025 06:57:44 +0000
Manifest this update:     Mon 21 Jul 2025 06:57:43 +0000
Manifest next update:     Mon 28 Jul 2025 06:57:43 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: uvkNLBii5e3mfqiSx5ev9aXKAI18455RJbSn4LyEGys=)
                          2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=)
                          3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=)
                          4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Jul 21 06:57:43 2025 GMT
            Not After : Jul 28 06:57:43 2025 GMT
        Subject: CN=687de4e7-c2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:4c:0e:bf:dc:50:ce:b1:a9:4e:e4:c3:46:
                    d2:e6:64:df:c4:d3:92:c9:88:5a:a2:14:76:9e:e2:
                    34:b0:f2:78:93:e5:8e:c1:ad:4d:dd:31:24:79:a2:
                    4d:10:d4:ce:98:d5:03:9a:6a:b5:0a:ef:21:3c:5b:
                    35:53:52:18:a7:8a:bf:7d:6c:2b:b6:b1:3c:d7:6b:
                    3e:d3:43:49:73:c2:f4:1a:39:77:50:91:9e:08:1b:
                    69:e8:cf:a5:3f:16:5e:d7:21:b4:e4:3d:3d:b0:07:
                    6d:f9:92:ce:62:17:b6:4c:ac:bc:a5:0b:b8:9a:7d:
                    67:27:5a:eb:e0:f5:fe:34:da:f8:62:3c:52:20:7b:
                    42:48:4a:bc:68:ce:6d:d2:83:f9:dd:35:cc:64:f9:
                    b8:af:68:05:30:dd:dc:a1:4b:16:85:b5:5a:04:07:
                    a7:df:19:bb:fd:71:6f:7f:b8:34:e8:78:94:e5:22:
                    3f:93:9a:ed:1a:c3:d1:cd:d2:fe:14:bd:10:ff:42:
                    2c:71:de:8c:c7:97:30:fd:83:9a:09:0a:3c:19:94:
                    76:9e:a0:e7:84:c0:9e:bf:83:30:80:20:aa:a7:08:
                    27:2a:b3:e4:51:20:26:8e:56:d4:28:8a:49:e7:03:
                    c0:3a:d0:3a:1b:3f:7b:f5:f1:2b:65:d5:85:8b:ef:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:A6:0F:E5:F4:76:24:FC:1A:E1:C6:5B:E1:0A:0F:FE:62:9B:01
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:90:c2:de:24:b4:ab:e6:a4:96:19:81:70:e0:18:16:51:3b:
         f9:d6:fa:61:79:62:d6:d5:9a:e0:0a:3d:df:16:cf:bb:7b:1f:
         db:9e:c2:95:5d:82:64:bf:b1:e8:3f:43:d1:8a:43:dd:32:ef:
         7c:3c:83:cc:fa:57:0d:9a:8f:b7:82:73:f6:1d:66:04:9d:cc:
         54:61:93:84:ce:39:e9:a8:bc:60:09:0f:30:50:13:c6:e7:17:
         db:f9:27:2d:d7:91:95:ad:f5:73:06:43:2a:cf:8a:b1:00:a0:
         25:c5:e9:28:2a:0c:81:ee:f0:8a:88:22:a9:94:ec:4b:6d:09:
         df:fe:e2:80:fe:26:93:c3:b7:45:f7:ab:97:bd:db:57:3a:32:
         bf:da:c2:6c:12:11:aa:77:a7:e9:79:3a:14:ee:fa:2d:28:d6:
         c2:8e:77:99:0a:54:12:f9:b5:e1:4f:11:b3:6e:c7:8b:ba:99:
         cb:91:52:03:ae:55:73:d5:bd:f8:7f:cd:a5:bd:7c:42:42:e4:
         91:1a:4e:ac:7d:d6:89:22:77:01:a0:65:c1:0a:82:43:02:fc:
         a1:76:78:78:99:c8:bd:f4:24:60:4d:8f:3d:38:bf:1a:bd:c5:
         6f:a9:b0:c7:b0:ab:1a:1f:d7:52:c2:73:86:9f:3f:e2:c5:00:
         f5:fa:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:56:49 2025 by rpki-client