Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
File:                     jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json)
Hash identifier:          24xvRpn2qnaBb75DpYA1J1WJW539YYnnGF2Zp/KIJNQ=
Subject key identifier:   0E:DA:59:AE:C9:68:51:3A:29:BA:3B:A9:F0:98:3A:5D:49:72:87:E5
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Certificate issuer:       /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial:       0C6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
Manifest number:          0C66
Signing time:             Thu 12 Jun 2025 18:09:15 +0000
Manifest this update:     Thu 12 Jun 2025 18:09:15 +0000
Manifest next update:     Thu 19 Jun 2025 18:09:15 +0000
Files and hashes:         1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: q23tpy+aL562PJ3oa4uTOq8maLwZZq7vDztOo54y52A=)
                          2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
        Validity
            Not Before: Jun 12 18:09:15 2025 GMT
            Not After : Jun 19 18:09:15 2025 GMT
        Subject: CN=684b17cb-fef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:ee:46:b5:16:84:ec:06:76:df:c7:22:fa:
                    1f:9a:05:b2:cb:3a:df:95:6f:a9:fc:c3:77:a2:46:
                    5c:6d:04:1b:21:34:d2:b1:21:0b:da:b8:0e:14:9f:
                    64:e3:17:fd:42:ab:f2:24:a0:94:23:cd:e0:13:79:
                    87:21:bb:39:f3:01:c5:8a:d5:8c:e9:61:b1:9f:f5:
                    50:40:2a:5b:b2:81:d8:fd:43:d6:43:aa:ba:1f:b5:
                    b9:b0:8f:3a:ae:82:4f:28:12:82:be:4d:7c:0d:ad:
                    ab:aa:30:9a:dd:38:21:0c:45:be:c7:cb:a8:96:10:
                    d7:5c:a5:0a:8b:2d:e2:39:e5:45:d4:21:89:75:d5:
                    ec:e4:73:60:90:af:da:52:04:39:11:f0:5a:80:8b:
                    0f:82:be:ca:f1:d2:3f:65:7e:4d:69:e3:11:e1:eb:
                    0e:86:ad:c7:92:e0:70:e1:dc:13:2b:bd:62:25:9a:
                    77:98:25:fc:5f:13:84:87:65:11:bf:fc:48:5c:a1:
                    e9:77:3f:3f:04:ac:d4:4b:39:59:a0:f6:db:1f:a7:
                    22:fe:ef:92:07:a9:78:0d:bd:b6:c9:93:da:6f:30:
                    61:b7:83:9c:37:00:45:a4:44:d5:30:6c:a7:29:7c:
                    dd:96:10:bb:65:53:ca:ee:37:87:39:49:c6:98:b7:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DA:59:AE:C9:68:51:3A:29:BA:3B:A9:F0:98:3A:5D:49:72:87:E5
            X509v3 Authority Key Identifier:
                keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:65:fc:20:db:c5:66:bd:ac:6b:81:70:5c:3a:ab:46:e3:fd:
         03:82:5d:65:af:9e:ec:61:21:21:18:da:23:35:31:66:ec:6d:
         1d:10:20:64:cd:63:91:be:22:9f:8f:22:55:a2:36:f7:97:9a:
         ed:fe:11:b6:ac:29:bf:0d:58:cf:8a:4c:b7:40:5c:15:34:28:
         92:e4:25:9d:04:1a:9e:d6:e5:9e:75:30:ad:3e:7c:f8:ad:e7:
         a8:0c:22:3e:c5:97:5c:33:db:a1:d5:ca:db:f9:50:6d:02:78:
         86:85:0e:62:cf:02:d3:3d:52:83:ef:ac:ff:7f:ba:af:4b:f4:
         83:6d:7d:2e:33:b2:08:c0:2b:b8:ce:ae:ca:eb:0b:4b:47:e8:
         56:32:24:b6:28:3c:a8:13:db:59:80:70:e7:6b:f9:20:a7:48:
         2a:5f:76:47:b5:19:1b:6c:43:80:5e:e7:07:dc:2d:39:3f:db:
         b4:94:5c:49:67:b8:38:f0:93:6e:b1:77:2d:62:62:d9:c3:05:
         e5:e5:6f:9f:26:b8:35:ed:12:13:f3:94:57:b2:d3:6c:ea:a2:
         29:49:1b:ec:44:ce:e3:e9:09:5a:b9:ae:d0:12:40:16:7d:9b:
         c1:67:ec:55:fc:b4:10:e3:b7:8d:88:df:66:b1:47:32:30:6b:
         63:ab:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:00:46 2025 by rpki-client