Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
File:                     JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json)
Hash identifier:          arGsixE6RYywl0uJ6P051V9/BKYc9cx9MSQWf3v42sc=
Subject key identifier:   93:51:67:1E:C7:3C:18:FC:7B:F8:C6:AA:81:65:F0:B9:4C:FE:B9:D0
Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Certificate issuer:       /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Certificate serial:       049D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
Manifest number:          0499
Signing time:             Tue 10 Jun 2025 23:54:27 +0000
Manifest this update:     Tue 10 Jun 2025 23:54:27 +0000
Manifest next update:     Tue 17 Jun 2025 23:54:27 +0000
Files and hashes:         1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: G6ZBlZHKsjZQi0Fvhca1Z9KMvKK+g9UAAqIuMRt9u8w=)
                          2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
                          rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 23:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
        Validity
            Not Before: Jun 10 23:54:27 2025 GMT
            Not After : Jun 17 23:54:27 2025 GMT
        Subject: CN=6848c5b3-8702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:95:a1:a3:aa:11:28:a8:14:9d:af:18:af:
                    80:4a:51:ac:c3:ab:80:1d:ab:88:a1:e4:b6:a7:39:
                    b9:2c:6b:24:43:40:36:0c:83:de:43:89:70:e4:b1:
                    08:e0:6e:f1:63:ee:88:b0:cc:41:96:b9:c7:39:bd:
                    e7:76:51:c3:ab:b5:4d:6f:73:0a:f1:61:36:f2:5e:
                    ed:22:c4:72:a1:cc:c7:41:72:b0:8d:a0:7a:63:91:
                    bf:d5:99:96:a8:a2:89:eb:ad:9a:68:f3:fa:c5:96:
                    5b:04:ca:e7:e3:37:bb:67:c1:da:cf:5b:f2:f0:6d:
                    86:ad:9c:51:28:62:2b:71:1e:7e:8e:11:05:35:75:
                    97:c0:6a:99:6d:71:9b:60:6d:88:fa:26:55:7b:7d:
                    35:83:65:fa:8d:2d:c9:b6:48:14:ef:61:40:d5:26:
                    5d:8d:ba:f4:de:51:79:f2:f3:02:7e:7c:5d:e7:ed:
                    e5:39:a0:7a:d9:06:a3:93:9d:70:30:87:5c:c3:24:
                    07:ab:f3:48:0d:9d:01:6e:61:fe:fa:5b:c5:b5:a2:
                    82:dc:b9:17:14:73:5b:76:4f:3f:7e:27:da:70:75:
                    f4:56:2d:44:41:b6:f2:9d:a9:dd:0d:33:4d:33:b8:
                    ff:d2:f5:21:10:14:1a:88:52:78:3c:3a:c8:f4:aa:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:67:1E:C7:3C:18:FC:7B:F8:C6:AA:81:65:F0:B9:4C:FE:B9:D0
            X509v3 Authority Key Identifier:
                keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:84:cf:e8:4c:8d:a3:16:b9:44:a1:9c:26:b0:6c:e8:ad:e8:
         5a:5a:54:dd:22:ae:e6:1b:a1:a5:a3:6b:ea:cf:59:8e:75:34:
         2e:b7:ea:c2:ec:96:b4:9f:e9:a3:48:25:eb:32:40:6c:29:3c:
         0b:0a:70:11:0f:a4:e9:d9:99:b5:75:09:9f:c1:0d:6b:f4:8c:
         a3:33:0c:75:5e:8e:80:7e:d1:b4:1e:6f:cb:3b:e4:c2:86:6d:
         2b:4e:a9:65:f9:57:38:c9:f1:e3:49:36:5c:9b:7b:84:61:be:
         5e:61:2e:38:f3:16:f3:97:96:20:d8:63:c8:34:df:1c:23:f2:
         7b:05:3a:82:20:4a:c9:60:12:23:17:65:0f:72:a6:b6:3d:25:
         8f:12:02:35:08:1b:e6:3b:f9:3e:36:95:26:2a:b8:a2:0f:a2:
         97:a8:99:10:41:63:65:31:7a:89:9d:f0:70:c2:1a:a5:0f:a5:
         b0:ec:08:00:c8:ba:5a:7a:a7:03:d6:4b:c7:1c:66:ca:be:c0:
         28:bd:81:98:a3:99:65:f2:38:68:a1:64:f9:14:81:38:a8:79:
         28:c9:76:4e:28:e1:a3:c8:ab:dc:e5:ed:f6:fc:be:11:98:0f:
         be:59:4c:f3:56:54:c3:91:a1:5c:eb:24:2b:e9:e1:27:2b:3e:
         17:0b:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:01:27 2025 by rpki-client