Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File:                     Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier:          o/vpapMSH6P9pU91MKuP3u7fcHMVG332tIcQ/xWk0Ac=
Subject key identifier:   6D:88:A7:04:96:0A:32:16:0D:F7:E9:01:67:A0:56:CF:F5:BE:3B:B7
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer:       /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number:          41
Signing time:             Sat 31 May 2025 07:02:36 +0000
Manifest this update:     Sat 31 May 2025 07:02:35 +0000
Manifest next update:     Sat 07 Jun 2025 07:02:35 +0000
Files and hashes:         1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: k8WBlZsL8j6V5ikBuDiO3HMrGpE8dLtewoORqlD/pUU=)
                          2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: LzkuGFZUxj6+WvgGdYx8FBFSBGquSdSJrmGH+Nh7tDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
                          rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
        Validity
            Not Before: May 31 07:02:35 2025 GMT
            Not After : Jun  7 07:02:35 2025 GMT
        Subject: CN=683aa98c-53c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:ff:e0:73:94:ce:de:32:c3:7f:40:2f:c5:
                    38:21:e6:06:37:fb:9f:06:78:21:91:dd:22:6a:3f:
                    d3:ef:7e:66:fa:b8:ed:2c:2d:a9:da:95:22:9e:d3:
                    f8:54:ef:8f:1b:8f:85:25:91:bc:c7:6e:07:81:bd:
                    e2:f5:7e:e9:2c:ce:88:d4:2c:90:48:96:71:92:5b:
                    23:b4:03:ae:8a:bd:fc:31:5f:56:ff:2a:ed:64:b2:
                    6a:8f:0b:1a:cb:21:04:7b:6d:64:c4:2c:15:37:07:
                    45:7b:3e:50:3f:05:bb:ee:cb:50:8e:25:28:7e:08:
                    21:89:2e:99:1d:08:a8:60:8b:c5:4e:eb:65:2d:61:
                    10:b2:13:a9:68:0c:ec:50:d0:85:b3:86:26:3a:f7:
                    80:6e:e4:1a:d2:55:67:07:33:5c:33:ad:d5:ba:e0:
                    ea:d0:22:95:5d:bf:97:e2:64:e4:d3:b1:fb:25:83:
                    70:c6:5c:b2:03:ce:d3:87:0e:1b:59:83:61:66:89:
                    4f:ca:0b:9e:fe:50:0e:d9:63:65:6a:84:61:cb:c6:
                    a6:1e:7c:08:98:48:4c:a3:5e:5d:fb:ca:5c:87:bf:
                    c0:8f:6d:39:d4:70:65:63:ed:1d:5b:52:03:66:d1:
                    b2:6c:55:e8:49:13:30:58:b9:9a:45:87:78:dd:53:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:88:A7:04:96:0A:32:16:0D:F7:E9:01:67:A0:56:CF:F5:BE:3B:B7
            X509v3 Authority Key Identifier:
                keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:75:6e:75:85:32:bb:ab:0f:07:09:3d:a4:b3:0a:4a:6d:
         8f:8b:ea:59:58:cb:70:3d:58:31:68:6e:94:be:4e:b0:c3:a9:
         d6:a0:4e:6b:92:37:7a:55:c2:f9:e5:dc:cb:48:49:5e:ce:f1:
         b1:7e:87:4d:f5:5e:b8:f8:b2:91:ff:54:ab:69:b9:e7:3c:de:
         38:ad:be:29:4b:e1:2f:0a:1b:2c:93:bb:34:27:3c:6c:37:ee:
         4b:f7:81:03:3a:2d:c1:fc:a4:65:29:4f:27:88:a3:94:de:bc:
         dc:3a:e2:ea:be:70:57:3a:5f:c2:5b:0d:10:a9:ca:ad:f5:b0:
         09:a8:7a:69:a5:00:71:8e:89:42:31:49:76:d0:d1:04:f5:0e:
         e8:85:63:19:48:7a:2c:8f:b5:f1:d1:98:6a:5f:fb:7e:a6:d5:
         ab:85:9f:ba:0c:d5:e0:40:ad:11:79:30:1f:0d:f6:30:63:29:
         db:ac:75:1a:e7:fb:99:52:6d:b7:41:35:1f:4b:f0:95:dc:40:
         b1:17:f9:07:53:04:4a:36:4a:83:ce:f7:44:db:d3:c9:4a:53:
         78:55:7c:1e:73:e2:16:5d:99:9c:4a:aa:bc:af:4d:91:d7:f7:
         6d:0f:15:45:ff:d4:91:f2:5b:0c:b9:04:eb:10:c6:01:07:76:
         48:d0:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:42:56 2025 by rpki-client