Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
File:                     JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json)
Hash identifier:          M58LiQ9cA9ChmcTNXGqSfmbjmte+p0bxLJFd/2F73wc=
Subject key identifier:   CA:32:91:BC:C7:E0:C4:9E:1C:9C:CE:40:86:62:42:B3:DA:B6:DB:F2
Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
Certificate issuer:       /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Certificate serial:       0366
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
Manifest number:          0359
Signing time:             Thu 21 Aug 2025 01:09:51 +0000
Manifest this update:     Thu 21 Aug 2025 01:09:51 +0000
Manifest next update:     Thu 28 Aug 2025 01:09:51 +0000
Files and hashes:         1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: 25n6rtow/jzKywuwvD+V9VP9YCrhMGlmLe4JLDpOAnc=)
                          2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=)
                          3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
                          rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 01:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
        Validity
            Not Before: Aug 21 01:09:51 2025 GMT
            Not After : Aug 28 01:09:51 2025 GMT
        Subject: CN=68a671df-ed10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:30:63:0c:0b:19:d4:38:e4:d3:4e:9b:a0:
                    22:a9:ff:b5:5c:61:a5:0f:63:20:a8:24:d7:b3:54:
                    79:57:89:a9:f0:fa:77:30:ea:2b:c8:b0:59:4b:26:
                    90:d3:52:a8:2a:ef:bd:39:27:d1:02:ca:7a:3a:1a:
                    71:0e:cf:80:95:76:40:f7:fa:8a:8b:b8:6c:3b:f2:
                    62:6f:f3:73:7c:04:18:48:71:95:c7:08:ef:18:69:
                    5f:ec:cd:e9:1a:d5:20:48:38:5e:9a:c0:00:ae:e2:
                    ec:bf:a2:a0:b4:bc:ff:e8:a6:aa:a9:67:2e:b3:77:
                    31:5c:e0:f8:85:61:75:ee:a9:9f:e1:2b:46:4a:af:
                    b4:15:a4:b2:36:f3:e5:37:e8:67:1d:54:cb:4d:73:
                    67:74:e9:cc:cb:e0:84:0b:ae:48:04:c3:d6:07:8a:
                    33:28:08:08:79:3d:59:97:ac:17:54:7f:05:66:2a:
                    34:d3:d9:0b:ed:df:f3:c3:03:62:2a:5d:93:07:04:
                    51:3f:e5:4a:a3:16:6a:53:8b:4d:b2:05:5c:0c:83:
                    fc:63:fc:2f:b9:df:74:e5:3e:43:3c:07:c3:36:de:
                    e1:d1:7a:41:26:a9:e1:eb:fd:dd:b5:0b:79:ad:47:
                    7c:15:cf:03:71:c4:d2:21:4f:fb:7e:d6:cc:79:6e:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:91:BC:C7:E0:C4:9E:1C:9C:CE:40:86:62:42:B3:DA:B6:DB:F2
            X509v3 Authority Key Identifier:
                keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:79:6b:ba:eb:5f:9b:41:41:5b:0f:86:6e:0c:01:f3:22:
         e2:70:b2:52:42:e8:89:9c:f2:44:0a:43:6f:d0:94:b8:fc:51:
         33:21:07:c3:9c:c2:b5:d1:68:68:80:43:b5:04:e4:b5:79:e3:
         d0:c2:e7:c4:e3:db:ed:91:a4:7e:0d:25:ba:d5:62:f4:2d:da:
         a9:48:97:65:c0:78:c7:a6:79:70:ad:6a:af:b6:f8:c2:7f:9e:
         6b:0b:49:13:4e:a1:9d:35:a0:7d:93:11:c9:66:53:7c:9d:4b:
         37:5d:40:4a:00:5b:1e:68:63:80:87:08:12:59:60:f0:e5:3a:
         78:4c:a8:fc:af:bb:7d:49:77:d5:fb:9e:92:ab:af:d5:10:64:
         88:cd:82:ce:37:4b:d9:cd:76:b7:45:fb:5c:02:6c:7d:e2:6b:
         07:bf:90:e4:02:4e:15:58:91:ee:58:c9:e4:d2:b8:e0:e9:ba:
         93:bb:48:ae:ac:e1:ad:12:50:e9:09:e8:f5:11:6c:b5:00:cb:
         6e:5d:3e:c3:1c:72:9d:b7:b7:7e:fa:0e:2d:f3:de:24:0b:5b:
         44:c9:7b:82:8d:d4:aa:bf:b9:7f:e6:75:1f:e5:e3:b9:e8:cc:
         39:e6:5e:a3:f4:86:c1:87:7d:5b:d3:00:49:e2:97:56:f7:ec:
         73:38:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:25:12 2025 by rpki-client