Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File:                     jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier:          3u8rLyheEUwBDTnFkSj48ak06m5XB6weuXQuuUh0N3M=
Subject key identifier:   80:68:DF:04:FB:E6:52:A3:BA:FE:87:B3:6A:04:98:EE:A3:79:B5:95
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer:       /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number:          5D
Signing time:             Sat 31 May 2025 06:41:09 +0000
Manifest this update:     Sat 31 May 2025 06:41:09 +0000
Manifest next update:     Sat 07 Jun 2025 06:41:09 +0000
Files and hashes:         1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: b5cCB6rKLFGfMsc8OIkvHhdcwqTBOK5SNks7y1K7WZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
        Validity
            Not Before: May 31 06:41:09 2025 GMT
            Not After : Jun  7 06:41:09 2025 GMT
        Subject: CN=683aa485-5533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ee:94:ef:1c:35:f8:be:a7:b1:c3:e4:78:9c:
                    24:9e:02:43:0e:6a:75:e5:47:e7:28:96:ee:fe:8c:
                    1a:38:62:be:95:a5:cb:34:55:ee:d4:d0:f7:aa:65:
                    bc:45:17:5f:73:35:27:ea:3a:1e:75:46:f1:e9:56:
                    96:cb:94:c2:1a:17:83:af:0d:74:8c:06:35:4f:f7:
                    5c:da:da:f9:dd:cb:84:57:9a:3f:5c:f9:b4:fd:12:
                    7e:e0:d8:cb:e8:64:e3:55:a0:49:d4:c7:5d:2a:53:
                    d9:47:b9:57:7f:d0:df:f6:cb:0e:42:d1:c0:19:e1:
                    57:9e:fb:f7:7f:ff:9a:c4:64:87:14:43:ef:75:d2:
                    6e:5a:96:34:4b:0a:bb:30:8c:e2:a7:70:cd:07:26:
                    01:32:e3:c6:0e:6a:df:a9:26:b4:8e:91:c4:cf:af:
                    0a:12:ae:00:db:b4:e5:17:22:f4:b3:5e:43:0b:ca:
                    e2:e3:03:65:7a:99:69:23:10:85:41:86:06:f6:b6:
                    68:e4:c0:d6:24:35:60:39:c5:4c:d9:38:da:e9:03:
                    8a:e6:1f:eb:fd:63:4e:2c:05:04:16:ca:f2:b2:02:
                    b6:51:1a:be:20:ab:1b:45:48:2d:72:24:f7:ed:ad:
                    f0:b4:01:fb:35:c9:cf:fe:00:63:65:b1:e4:a2:ab:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:DF:04:FB:E6:52:A3:BA:FE:87:B3:6A:04:98:EE:A3:79:B5:95
            X509v3 Authority Key Identifier:
                keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:b6:ef:94:01:bf:62:8c:30:46:ff:f4:f4:9b:24:51:95:
         c1:78:e7:83:0f:c2:5d:9b:6d:43:b1:95:c8:1a:ff:dc:78:07:
         44:81:0c:54:d7:62:f3:c8:1a:9e:3f:9a:7c:19:2e:35:bd:f3:
         4e:ac:54:c2:e2:27:94:b7:de:80:9c:42:b1:76:b9:80:64:53:
         61:2e:3d:16:e3:9d:d3:83:44:47:2c:4c:14:47:ce:d2:16:ff:
         be:ba:ff:78:bb:49:42:03:18:53:a6:07:41:7f:5b:a0:8d:da:
         28:cc:55:84:7c:6f:a5:ca:ae:a0:cd:8c:7f:6f:56:c0:0c:ce:
         e3:62:07:c3:de:dc:f1:eb:7b:47:a6:f9:a0:93:d5:99:ea:20:
         4c:90:ab:fd:06:2f:b0:08:07:71:b1:f4:ae:f1:81:43:3d:ae:
         5a:4f:55:4f:db:4e:06:bd:b1:4d:7d:01:e7:6b:03:71:86:b1:
         b2:a2:3e:ca:f7:36:f5:8b:0d:f6:c3:23:8e:fd:79:9f:1d:5f:
         bf:89:d7:8f:88:14:eb:d1:77:ae:6f:61:c8:50:aa:eb:59:6c:
         ff:59:e3:38:cc:57:83:7d:9e:3e:b5:1c:c1:94:cc:98:e9:8b:
         89:d5:94:5f:24:8d:c5:6f:2a:c0:81:b7:5e:d3:1c:59:57:3d:
         08:4a:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:11:28 2025 by rpki-client