Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          ZrJU+BeKrkYpxWrErke2i4M+STtWmApzDJP29IqRI7U=
Subject key identifier:   3B:DB:81:31:2E:94:D9:03:EA:E1:B9:A4:3D:9E:3C:3D:61:71:81:21
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       1979
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          1949
Signing time:             Mon 02 Jun 2025 16:37:07 +0000
Manifest this update:     Mon 02 Jun 2025 16:37:06 +0000
Manifest next update:     Mon 09 Jun 2025 16:37:06 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: KPg4mot25rX/xfmPii/b38LPCdPnJ7n8GTfKjxouRk0=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6521 (0x1979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Jun  2 16:37:06 2025 GMT
            Not After : Jun  9 16:37:06 2025 GMT
        Subject: CN=683dd332-a8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:1c:be:01:63:58:15:a3:cc:5e:03:f2:10:
                    b6:b8:44:83:95:3c:da:e1:6d:c6:2a:62:8d:f2:0f:
                    bf:77:90:25:4f:21:6c:3d:14:af:13:69:4d:cb:9d:
                    6d:1c:62:2d:25:7f:80:88:2b:24:a9:12:1e:51:95:
                    55:41:7a:56:42:ce:d5:40:d8:29:74:9f:6d:e7:b3:
                    de:35:d5:24:62:1a:22:ba:e7:68:ad:0a:a1:a1:a5:
                    15:f4:2a:2e:37:d1:6e:b0:d8:c3:93:bf:2c:d8:bc:
                    71:1e:88:ab:00:fe:2a:db:c0:dc:7e:31:f1:5f:fa:
                    38:6e:b8:4a:f3:7c:35:4f:0c:d1:47:02:18:f8:fe:
                    8e:b8:a9:92:88:a2:75:2d:03:33:27:ac:45:40:90:
                    55:5b:e3:48:f4:9d:6e:d4:0b:7b:f3:f8:93:90:93:
                    bc:af:c8:26:46:0c:5d:2e:d6:d0:e1:9f:84:e2:9e:
                    59:09:67:9a:7e:be:17:90:59:8e:96:05:2e:68:d2:
                    12:33:28:47:dd:3a:69:6e:8f:f9:42:e2:90:5f:9d:
                    80:42:cb:48:e8:23:87:8c:9f:7d:40:89:98:aa:eb:
                    f2:41:36:22:e2:19:30:75:f8:5e:ef:d6:55:fa:26:
                    ec:ef:9b:4b:39:f6:bc:0a:fb:eb:2b:0d:6f:96:3a:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DB:81:31:2E:94:D9:03:EA:E1:B9:A4:3D:9E:3C:3D:61:71:81:21
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a7:64:ca:36:80:f6:ca:5c:45:60:21:7c:20:14:30:d0:57:
         46:75:11:82:7b:66:70:f8:1e:e5:31:db:41:42:01:31:e7:a6:
         81:3d:75:6d:f5:57:a3:f2:39:cb:6f:f8:0e:59:ad:0d:6e:66:
         e9:c3:e3:d7:ce:31:cd:a1:2c:67:c4:dd:09:13:80:38:98:57:
         26:80:50:62:d0:8e:69:57:17:77:4a:47:94:6d:88:d2:fe:e7:
         dd:48:41:ec:8b:44:01:ec:64:6a:a9:fc:f2:48:40:aa:1f:5a:
         aa:51:02:09:72:16:ed:a7:2c:4f:8d:09:c7:ea:7f:ba:8c:da:
         bd:65:9a:e6:7e:41:20:01:7f:f5:8c:7a:a0:a2:aa:89:98:2f:
         0f:a4:41:6e:31:43:c9:fc:14:0f:be:cf:16:62:a1:bb:bc:26:
         61:37:d6:15:84:83:02:ec:8b:b4:cc:3f:f4:69:ff:3d:c9:b9:
         97:8a:98:5f:75:fc:4c:60:42:05:27:dc:ac:7f:35:5b:46:50:
         4e:d4:aa:e5:80:e0:bf:55:d5:69:fb:ea:10:19:16:b5:b5:4f:
         70:62:f5:35:a6:32:21:0d:19:74:f2:32:9e:6c:38:91:4b:39:
         00:04:67:a2:d6:f1:60:df:93:d7:67:5b:f7:ba:82:89:6a:b2:
         0a:a2:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:01:53 2025 by rpki-client