Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File:                     JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier:          Ly775QcttdqKPXQZa5hU5P6j4kqNETVEHT+1AsnSd7c=
Subject key identifier:   AD:BD:B8:22:12:50:7E:39:0D:E0:0D:BE:C8:9A:23:9D:A0:20:37:7C
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer:       /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number:          4C
Signing time:             Wed 17 Sep 2025 08:04:31 +0000
Manifest this update:     Wed 17 Sep 2025 08:04:30 +0000
Manifest next update:     Wed 24 Sep 2025 08:04:30 +0000
Files and hashes:         1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: e4YUqcHF8RJhFjIdXfEkpMKgtTgwiBFSRTlkE5BgusE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
                          rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
        Validity
            Not Before: Sep 17 08:04:30 2025 GMT
            Not After : Sep 24 08:04:30 2025 GMT
        Subject: CN=68ca6b8f-eb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:ff:b9:1e:09:67:33:77:30:33:a0:93:2e:
                    c4:17:e0:f2:cc:77:44:57:49:fc:5c:b5:0e:37:ee:
                    df:35:fc:01:5b:01:0b:cd:9c:3a:8f:f5:45:e1:e8:
                    35:c8:8d:ff:43:f1:ac:1b:34:fc:77:ca:a3:b7:bf:
                    d2:e8:26:66:20:e6:cf:92:d6:ca:b8:b6:59:8c:dd:
                    a9:8b:e7:1c:81:2a:9e:1e:57:89:3f:d0:81:4a:c3:
                    ab:42:fe:0a:10:2b:89:1d:3e:44:9d:a1:47:72:ba:
                    e2:a0:48:5e:f6:d7:d2:c4:25:6c:fe:89:9a:e4:41:
                    c7:b4:32:00:42:0c:15:16:93:b9:eb:8e:ed:e4:a2:
                    c0:33:37:af:8a:f8:c7:b0:eb:30:0f:22:ae:92:98:
                    74:82:1c:e4:13:96:cb:f0:b3:ff:6c:f5:a8:7f:e6:
                    96:eb:bd:c2:d9:f5:f2:2c:48:ea:23:f7:37:41:0f:
                    ac:86:df:02:70:b4:88:7a:f9:38:80:16:0c:b8:7c:
                    37:f4:7a:5d:6e:6e:1e:e2:60:4b:f2:bb:23:52:a8:
                    20:87:ea:87:c8:b9:31:28:e5:7b:3c:9d:4d:13:0e:
                    03:bf:23:b5:29:09:60:dd:56:98:05:2a:80:f8:dd:
                    75:19:24:ee:90:9f:ed:a1:5b:e8:f2:3c:77:e7:5c:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:B8:22:12:50:7E:39:0D:E0:0D:BE:C8:9A:23:9D:A0:20:37:7C
            X509v3 Authority Key Identifier:
                keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:0b:ac:68:26:6e:42:46:78:6e:84:ab:07:27:df:85:d8:
         48:ef:6a:e0:e2:9c:c5:a1:98:a6:ab:32:0c:3e:9b:e3:a2:86:
         dc:fb:9c:cf:f3:65:e3:5d:ed:c0:a1:a3:e2:83:a6:b6:da:d0:
         f3:22:0a:50:bf:b6:3c:6f:2e:a2:04:18:f4:a9:c5:85:fc:66:
         4c:b9:49:23:e1:5c:52:19:be:ca:0d:f8:47:03:45:fe:8b:44:
         ac:92:d4:7f:ff:b6:89:95:bc:ed:c5:db:22:84:66:d2:6e:e9:
         a9:28:05:6d:8f:42:f9:93:f3:12:30:71:57:5b:08:cc:e9:9c:
         8a:5b:b3:5b:c5:dd:d2:88:63:28:0a:a6:4f:6a:84:13:7c:da:
         07:ce:2b:f4:e9:6d:a5:4a:94:84:aa:85:e5:a7:77:36:75:15:
         5a:55:37:7e:19:8d:6b:cc:95:f2:41:54:f9:18:b8:55:3a:7d:
         55:98:84:33:f6:c6:d0:4e:1c:11:a7:53:f3:62:af:fa:94:12:
         3b:96:33:cb:90:ff:54:f2:ac:49:e7:09:32:79:23:6e:6f:6b:
         f2:d7:e6:c1:ef:a4:13:b2:c9:7e:63:07:a7:45:bc:8a:99:3d:
         40:6b:5c:f8:97:dd:f0:57:6a:9a:64:fc:b4:87:41:f2:9a:2b:
         42:62:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:49:14 2025 by rpki-client