Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
File:                     JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json)
Hash identifier:          Ui88Cqt0tEeYMKZdHiurFrg2w812ccLb1C0i11uNd+4=
Subject key identifier:   7A:2B:84:3D:7D:DC:2A:6C:55:97:08:C7:BC:74:7E:DB:7C:29:12:FB
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Certificate issuer:       /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
Manifest number:          013A
Signing time:             Tue 09 Sep 2025 04:29:15 +0000
Manifest this update:     Tue 09 Sep 2025 04:29:15 +0000
Manifest next update:     Tue 16 Sep 2025 04:29:15 +0000
Files and hashes:         1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: mheTlgdXJHhblFgNRIUUK57PARkeSjC2ADDHWMDzXK0=)
                          2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
                          rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 04:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB
        Validity
            Not Before: Sep  9 04:29:15 2025 GMT
            Not After : Sep 16 04:29:15 2025 GMT
        Subject: CN=68bfad1b-1820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:33:3d:f8:bf:45:02:04:1a:a8:1c:ff:d0:
                    97:9d:53:15:9d:22:fc:10:b3:70:42:66:c6:6a:6a:
                    85:04:24:69:ee:ea:e3:7c:64:49:b1:0c:8a:0a:21:
                    c2:e5:09:ab:dd:9f:f7:eb:ef:c6:3d:11:cb:77:05:
                    96:a3:3d:77:ac:5c:15:fd:c7:3a:92:b0:46:87:af:
                    33:e3:35:9e:ec:f0:96:53:33:14:86:10:a3:f7:15:
                    2d:dc:8d:32:48:de:40:04:f3:4a:76:06:fc:ed:3d:
                    91:52:8c:a7:99:37:b6:ae:36:6e:71:84:68:0b:35:
                    9c:ce:11:f1:a5:e8:f8:a8:02:fa:ec:82:03:b8:45:
                    71:fe:e1:39:dd:67:c7:a1:5e:27:9a:9b:93:62:52:
                    2c:33:7b:69:dc:f2:e6:1a:a5:d3:67:ad:28:08:66:
                    ae:09:d1:d3:ff:cd:41:5b:a4:94:41:55:f5:fe:3b:
                    2f:19:4f:0d:03:22:47:c5:11:54:b3:8e:bd:91:5b:
                    5b:73:f9:e7:a2:fa:15:69:a5:22:80:78:08:38:89:
                    c0:39:fb:d6:3d:72:24:cb:ae:10:69:e7:59:cb:d3:
                    00:e4:53:e8:7c:65:66:13:ec:9a:22:25:d2:59:48:
                    35:ba:70:3b:eb:b5:f7:78:a5:61:ea:7e:5c:3a:18:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2B:84:3D:7D:DC:2A:6C:55:97:08:C7:BC:74:7E:DB:7C:29:12:FB
            X509v3 Authority Key Identifier:
                keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:70:31:3f:19:93:8c:11:23:81:b8:18:76:36:91:6c:74:
         d9:8f:37:a5:b4:42:01:98:c6:ff:45:b4:d6:d1:48:93:cd:dc:
         30:98:bc:a6:3b:23:c5:3f:cd:13:a4:f4:64:24:34:bc:99:0e:
         ee:ee:70:55:f9:62:f4:19:ae:95:91:39:d3:f7:ee:b7:eb:cf:
         00:f0:a3:25:68:92:60:e6:0d:52:e7:92:ea:24:0e:e2:ad:83:
         c6:8b:a5:29:3e:78:5e:ac:0b:8a:35:53:f6:83:3c:91:d4:71:
         2a:b7:7c:38:4b:f4:29:a8:18:17:b9:0a:af:57:7e:84:46:19:
         cd:03:f0:76:3d:4b:dc:46:e4:3a:87:39:29:db:f4:01:eb:0a:
         2c:42:b8:bc:08:37:35:ef:7b:f2:1f:09:d2:b4:94:06:fb:f1:
         e4:c0:5f:ae:c3:2d:32:cf:2c:15:74:6a:42:fb:d9:e0:fc:37:
         33:fc:f6:44:23:fb:2c:1f:8f:ed:65:35:75:56:d2:1c:fa:bc:
         6b:54:9e:90:a9:be:45:fc:fc:5d:13:4e:6e:cd:45:92:ce:74:
         80:99:94:9e:27:a8:4a:50:4d:3d:4e:ae:da:5b:17:db:e9:ac:
         d4:47:69:e1:3e:4c:cb:04:48:a2:98:25:0b:6e:d8:90:0f:79:
         25:f5:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:35:33 2025 by rpki-client