Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          8t1JMHHTxcTtbOfIEsbnVgjwup/FuKn3K7ZSiRBF/34=
Subject key identifier:   EA:80:92:F4:45:75:5C:90:AD:A5:DF:AA:D9:7C:1E:E8:76:FF:C0:42
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       34DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          34C9
Signing time:             Mon 08 Sep 2025 14:36:27 +0000
Manifest this update:     Mon 08 Sep 2025 14:36:27 +0000
Manifest next update:     Mon 15 Sep 2025 14:36:27 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: RqV3ilojRjXOmd4rDelTyhJBV2CcQlJe1IgX4zChTHI=)
                          2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 14:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13534 (0x34de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Sep  8 14:36:27 2025 GMT
            Not After : Sep 15 14:36:27 2025 GMT
        Subject: CN=68bee9eb-c066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:44:a6:2f:e9:99:51:80:5b:ab:ff:29:dd:
                    69:c5:80:85:41:a6:af:c1:a6:2a:de:4c:00:62:f0:
                    a5:9e:75:20:6f:8d:d0:ff:67:93:98:b9:17:1d:dc:
                    41:50:74:8e:ed:74:b0:22:ce:28:d3:2d:25:4b:94:
                    69:0d:90:94:7c:d8:29:1a:7d:a2:2b:e4:47:c7:7c:
                    c0:2b:b0:dc:73:0d:29:80:8a:72:e7:ab:d8:d1:9a:
                    24:b0:26:58:ca:81:a0:91:c7:c0:9d:68:d4:cb:77:
                    68:3b:44:cd:0d:42:89:0a:0c:28:b4:c9:24:cc:58:
                    53:49:24:c4:dd:ec:26:1f:5c:06:13:76:85:2c:8d:
                    84:97:32:6f:bc:39:f0:fd:88:ce:08:5d:9b:2e:ee:
                    e4:f8:10:41:fd:a5:e1:7b:d8:34:3c:37:64:48:b4:
                    b8:5c:76:91:15:28:bf:b9:d3:b9:2a:2f:a4:1c:37:
                    28:70:92:4f:68:a0:7e:33:0f:02:ea:4b:84:b9:f4:
                    2b:19:53:f4:66:14:e1:46:7d:8a:b6:e9:0a:43:7c:
                    d9:3c:aa:5b:26:c4:f2:ac:3b:04:a3:21:00:08:bc:
                    d2:d3:13:a8:29:09:9b:fa:e5:dd:50:b9:f7:06:12:
                    b4:fd:a3:46:8d:32:1f:80:35:c9:c2:63:65:28:62:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:92:F4:45:75:5C:90:AD:A5:DF:AA:D9:7C:1E:E8:76:FF:C0:42
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:82:37:55:f2:85:dc:6a:0d:55:9f:6d:a8:46:06:f0:d0:
         a6:9f:31:2a:b0:27:aa:bd:16:20:b8:16:8e:bd:47:d9:86:46:
         a9:f6:0b:ee:f3:6f:95:73:eb:79:6f:bf:81:80:62:f0:1c:e4:
         33:0a:d1:1e:ae:fa:92:ab:d9:7c:51:6d:cb:2b:45:d2:ec:a1:
         dc:1f:48:c7:49:f8:3f:44:88:d2:29:d2:52:40:15:db:02:ab:
         eb:7c:3f:0e:84:93:9e:6e:0e:e4:3d:a8:cc:57:68:e0:c6:31:
         51:57:3a:eb:ec:95:d8:93:d9:51:a4:0f:51:f7:d2:1d:8f:35:
         21:80:d2:ee:fb:13:a5:12:91:d0:d5:03:50:9d:30:80:20:32:
         9a:52:ef:39:38:47:bb:c7:29:71:86:18:b5:99:fc:77:3b:c2:
         53:80:3a:11:9d:d4:22:17:38:c0:91:bc:20:c4:7b:1a:59:3a:
         34:51:0e:a6:82:3d:c2:7b:09:b0:59:79:8c:15:46:0d:43:02:
         62:4d:61:ee:77:fc:bb:2a:9d:2c:a0:bc:39:46:db:65:9d:88:
         31:62:62:91:17:0b:48:72:9f:70:5c:26:14:6e:71:a6:75:5a:
         3c:58:69:ee:68:66:71:8e:7d:ff:1e:4e:6a:14:45:45:8f:54:
         9a:90:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:43:21 2025 by rpki-client