Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
File:                     jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json)
Hash identifier:          znxTmIRs3dtmGD5CnAzsaB8alBuhRzxrQqyX3gvJ5U8=
Subject key identifier:   47:63:A0:00:01:38:A0:BF:8D:28:92:A0:83:FF:05:24:0F:B6:21:2E
Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19
Certificate issuer:       /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
Manifest number:          05DC
Signing time:             Fri 30 May 2025 23:10:15 +0000
Manifest this update:     Fri 30 May 2025 23:10:15 +0000
Manifest next update:     Fri 06 Jun 2025 23:10:15 +0000
Files and hashes:         1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: FgNIn0sdkP917PARxo36B6W9hY9vTvTGl2mlqLvoI4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
        Validity
            Not Before: May 30 23:10:15 2025 GMT
            Not After : Jun  6 23:10:15 2025 GMT
        Subject: CN=683a3ad7-6df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:7f:76:69:b9:6c:ef:f4:4b:cf:ad:9d:5b:
                    51:ae:8b:fa:20:1b:e1:ca:7e:3d:5e:6a:b9:3a:5a:
                    5d:57:14:2b:63:21:50:a6:1d:7a:ad:21:d4:e7:74:
                    c7:8c:85:be:13:71:fe:b4:0b:d9:ce:5a:93:6c:5c:
                    c8:4c:05:2b:70:03:70:83:ff:4f:2c:f9:a6:10:9e:
                    62:00:8c:d2:78:e3:b9:f7:ec:f8:6c:b0:f1:c5:21:
                    38:db:c4:31:8f:80:ea:63:fe:e6:f9:26:9d:8e:37:
                    e7:c6:ba:54:d7:27:b2:96:84:3a:ee:a6:d7:f7:b5:
                    f3:84:89:90:36:85:a2:d1:e2:5a:f8:a3:dd:44:b0:
                    74:31:a1:35:3a:c6:ea:b7:40:3c:ae:e3:b4:1c:49:
                    10:97:f5:aa:23:eb:d0:d5:5c:92:b9:08:80:3c:9e:
                    8c:b8:cb:b2:9b:5a:41:93:87:d1:69:9a:2e:d5:83:
                    ac:1c:ae:d4:0b:7d:8e:e1:e4:55:a0:34:72:34:f7:
                    11:30:95:36:2f:f5:97:f0:89:ca:2e:6f:34:da:99:
                    db:82:da:68:a0:b1:00:62:1d:bc:3c:bc:eb:66:27:
                    0d:01:15:da:b7:f1:db:2b:d2:11:6a:5d:93:6f:bf:
                    bd:9a:95:d5:3d:30:60:5c:68:5f:c4:41:4c:50:31:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:A0:00:01:38:A0:BF:8D:28:92:A0:83:FF:05:24:0F:B6:21:2E
            X509v3 Authority Key Identifier:
                keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:ab:3a:44:46:14:46:4c:82:53:e4:c2:6f:c5:0b:40:05:
         ba:42:e3:a2:01:ee:58:a0:f8:27:bf:cc:8c:c2:94:fc:f4:1e:
         58:d3:d0:10:4e:43:47:d5:06:05:06:6f:0d:88:20:af:5e:ca:
         a4:cf:c4:1d:be:64:5c:a1:5b:b1:d8:30:96:5c:92:59:94:cd:
         5f:79:63:72:72:7f:29:77:0d:e4:02:c8:9c:fe:a2:18:ab:00:
         3a:da:18:51:99:7b:90:7c:aa:46:18:aa:37:c3:57:b8:a1:ee:
         a0:2b:6d:a8:0d:e1:b7:59:31:9a:12:ff:1c:46:92:43:86:16:
         b2:83:52:cf:93:f8:f9:56:af:84:fa:08:2e:d3:a0:10:e7:eb:
         cc:12:1d:fa:b0:37:7c:5f:da:68:18:76:0f:cb:a0:48:9d:d6:
         78:4c:18:d0:d2:d0:05:15:20:86:6c:7a:ce:da:38:6d:f7:ff:
         da:f1:4b:05:e3:d5:00:4e:dc:c0:0e:ba:bf:1a:14:56:c7:87:
         ac:bc:20:46:d6:e0:db:fc:a8:59:1d:72:41:8f:bf:6b:55:f8:
         a2:9e:b5:1f:57:6a:dc:47:48:1f:8d:d9:80:b6:e2:23:50:79:
         81:22:e3:87:d9:cd:f9:6e:60:18:2a:6c:12:25:f7:a9:ec:3c:
         d9:b5:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:39:52 2025 by rpki-client