Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File:                     jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier:          DQvyVxAWW706uNh1/kD4EQQxk/Q/OmvYbbL8aAmpe1w=
Subject key identifier:   A9:46:28:48:42:D6:D6:A2:2D:94:81:F5:04:37:8D:8F:D4:7A:E5:47
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer:       /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial:       0999
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number:          0977
Signing time:             Sat 06 Sep 2025 20:22:45 +0000
Manifest this update:     Sat 06 Sep 2025 20:22:45 +0000
Manifest next update:     Sat 13 Sep 2025 20:22:45 +0000
Files and hashes:         1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: MGjNpSP7efxP00YSREiVxpGLDaciGaAbd7fkKIRc38M=)
                          2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=)
                          3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
        Validity
            Not Before: Sep  6 20:22:45 2025 GMT
            Not After : Sep 13 20:22:45 2025 GMT
        Subject: CN=68bc9815-cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:0d:42:ab:4b:bf:c7:08:d3:58:88:f1:c7:
                    e9:75:9d:79:29:bc:cc:70:95:6d:6e:85:e0:cf:a3:
                    69:d9:6a:df:d6:46:79:66:8c:dc:52:c3:5a:dc:a7:
                    33:d5:2d:f8:66:b2:b0:83:6b:ac:f9:51:b1:45:ad:
                    33:ea:0d:2a:40:c5:04:d4:52:31:3e:3b:23:af:17:
                    f5:9f:a0:d8:5f:5c:44:c2:88:a5:da:ed:81:c1:a3:
                    9a:25:46:33:b8:6a:1e:f3:c6:bb:7f:10:85:6c:2b:
                    40:00:71:81:8c:2b:2b:33:9a:6c:58:9b:b5:51:02:
                    64:00:05:92:3d:30:66:09:43:31:fe:4a:65:a2:0d:
                    48:7b:e4:80:80:b5:6c:00:3f:8a:dc:8f:1f:c2:84:
                    e6:e1:1a:4c:fa:c3:a1:1a:03:12:2e:2d:0d:9e:cd:
                    54:b5:3d:4d:28:e7:07:84:7a:37:5c:01:88:6e:a2:
                    1e:c8:d6:1b:97:db:54:73:b4:24:d4:d3:4c:a9:fd:
                    9a:3d:3e:16:41:38:9f:18:56:e6:66:52:fd:b2:1f:
                    1d:7d:a7:ec:3b:4a:5f:ca:ab:83:dd:d8:29:4f:ad:
                    fe:7d:d0:85:e3:49:07:b6:37:5f:32:65:48:a9:44:
                    2e:5e:bb:c3:87:3d:6f:bf:0b:99:8a:b3:03:a6:7e:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:28:48:42:D6:D6:A2:2D:94:81:F5:04:37:8D:8F:D4:7A:E5:47
            X509v3 Authority Key Identifier:
                keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:c6:ea:5c:a6:4a:c2:76:cc:3a:f1:b4:d2:f9:d8:3b:2f:
         de:1c:5e:79:c7:65:9d:b9:1d:e7:c8:1e:e3:44:7c:ae:74:47:
         78:92:47:10:56:06:29:23:11:49:3b:74:97:ca:64:55:03:ce:
         1e:02:97:04:c3:0f:df:da:a0:1a:cb:25:d0:f2:ef:59:34:36:
         89:10:3a:44:60:97:87:ba:8a:0c:f0:c2:a6:59:78:10:d2:ef:
         68:d1:8e:8d:fd:6c:36:62:c0:45:2b:7c:6a:c3:f8:30:ca:03:
         28:1e:ba:66:6e:8f:64:98:5c:e2:ab:91:4a:94:a4:a0:ac:40:
         7a:4a:bd:9e:8a:f6:37:af:df:5c:09:09:76:7f:5d:ce:75:2c:
         d3:a4:32:25:6a:61:f4:14:a8:e6:ee:1a:aa:0b:8f:7d:29:dc:
         f1:2f:a4:86:c8:35:3f:0e:2d:7d:57:fb:f7:c7:78:23:98:9d:
         2f:39:33:60:38:90:71:d6:9a:ca:04:a4:f8:7b:d3:27:fe:2e:
         2e:60:ba:0f:e7:b3:37:e9:7d:27:d8:13:2f:e2:78:d9:e6:4f:
         86:8a:d4:43:75:d6:b5:74:7e:63:01:a7:c4:7a:86:c2:f2:41:
         1e:de:bb:a1:71:b9:b7:34:3b:78:18:15:bc:5b:da:59:1f:5c:
         f2:9d:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:32:58 2025 by rpki-client