Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
File:                     jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json)
Hash identifier:          WZYvq8kPZkmrghGlmgyUQ/15dVbHyQGSzbCnk64vo2s=
Subject key identifier:   73:24:D0:81:AB:E5:D7:AD:2D:AA:80:56:47:C7:10:4F:07:9A:35:4E
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Certificate issuer:       /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial:       0C6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
Manifest number:          0C65
Signing time:             Tue 10 Jun 2025 18:13:57 +0000
Manifest this update:     Tue 10 Jun 2025 18:13:56 +0000
Manifest next update:     Tue 17 Jun 2025 18:13:56 +0000
Files and hashes:         1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: zZ4zy4BNC2JbBtfkax5ZE30QJsrYKPPTJnl/4/T2W6w=)
                          2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 18:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
        Validity
            Not Before: Jun 10 18:13:56 2025 GMT
            Not After : Jun 17 18:13:56 2025 GMT
        Subject: CN=684875e4-7682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:8f:ec:d3:7e:db:f7:8b:85:2e:69:36:49:
                    1d:6e:3a:3e:90:8f:4e:79:25:28:85:e1:cb:c9:7e:
                    e5:49:fd:a3:f7:90:38:8b:20:51:4f:83:da:b2:32:
                    a5:57:bd:8d:fd:e2:7b:a8:01:8d:82:fa:40:95:19:
                    4e:91:a6:1a:53:40:0f:63:35:43:79:45:b5:b0:08:
                    4a:5d:1b:98:9c:59:ab:58:ec:31:3a:47:f4:55:ae:
                    8d:0e:e8:23:ba:a5:3d:fb:20:2c:95:d0:69:87:d4:
                    bc:aa:f5:96:49:0f:c2:47:bc:09:bc:4e:9e:1a:80:
                    cf:08:64:23:84:dc:1b:9d:f6:43:1d:7a:75:0e:ee:
                    ae:7e:07:d2:04:40:05:cd:c5:ed:a6:7f:3c:12:88:
                    66:70:03:1c:62:f5:e4:35:03:dc:47:0c:1e:ae:4f:
                    e2:4b:01:86:79:2a:b4:80:e7:ee:d9:4f:ce:5d:39:
                    25:8b:44:87:ad:ce:0b:35:10:11:bd:91:dd:3a:77:
                    a9:3e:a2:c3:8f:b5:13:b6:bb:81:99:ae:31:f6:1f:
                    0f:c1:fb:28:39:5b:80:cc:29:7c:3d:4f:0e:ed:93:
                    0e:b5:fd:25:fd:ba:af:7f:85:5f:f7:06:a2:72:32:
                    2b:d4:a0:89:35:f1:29:18:0e:d9:20:21:55:bb:c0:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:D0:81:AB:E5:D7:AD:2D:AA:80:56:47:C7:10:4F:07:9A:35:4E
            X509v3 Authority Key Identifier:
                keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e9:6d:d1:d8:f6:f8:bd:b2:c3:87:f0:85:d4:3d:d6:01:08:
         45:e7:8a:a4:92:2a:82:e4:02:58:3a:38:7c:e5:96:a0:ea:58:
         b6:5d:f9:e7:a8:d0:de:62:75:e0:a0:2e:b8:e9:7f:dc:16:e7:
         1d:31:d4:33:1c:76:98:74:08:d5:66:58:37:f1:6e:28:1f:9d:
         c6:40:69:f1:9a:dc:e7:55:b0:7d:49:0b:01:29:6e:e1:ae:35:
         ef:b0:eb:af:74:11:f8:a0:07:08:f1:f4:38:42:06:6c:8a:02:
         8d:86:06:c2:ba:3e:16:cc:15:8d:20:39:6c:df:5a:1f:2f:e9:
         61:1e:83:c9:24:79:5b:05:0a:92:fb:99:f5:71:bf:7b:08:70:
         b4:e5:38:f1:bb:a7:fe:56:4b:69:cb:07:26:21:4f:e1:a2:18:
         0e:d4:90:6f:4a:53:8b:ec:99:8f:2a:11:3c:0a:68:02:e4:59:
         88:6e:80:b3:df:61:b0:18:96:d3:86:5e:5e:b9:5a:b1:1e:c1:
         27:10:75:bc:6a:d3:bc:26:c7:9a:99:99:52:32:63:a7:87:92:
         60:04:00:e8:a4:35:94:6b:2a:43:9f:6d:d0:ac:82:7e:9e:43:
         9c:02:6b:c1:ba:42:4f:f6:36:67:8d:6c:7b:63:f0:b9:80:23:
         16:94:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:29:06 2025 by rpki-client