Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
File:                     J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json)
Hash identifier:          199D/U0Y8NYu0+48xsbInexWpk9gQxupVWdhu1g2WB8=
Subject key identifier:   00:EB:12:AF:E0:51:DD:57:E4:75:67:BB:1B:16:A3:94:08:42:E4:FB
Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
Certificate issuer:       /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
Manifest number:          012C
Signing time:             Thu 21 Aug 2025 04:46:08 +0000
Manifest this update:     Thu 21 Aug 2025 04:46:07 +0000
Manifest next update:     Thu 28 Aug 2025 04:46:07 +0000
Files and hashes:         1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: iYUTCzLSi6ct6sIipDXnnNadIxxlkM6ZbhAyB/sy2n0=)
                          2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
                          rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 04:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
        Validity
            Not Before: Aug 21 04:46:07 2025 GMT
            Not After : Aug 28 04:46:07 2025 GMT
        Subject: CN=68a6a48f-cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8b:e6:4a:84:ae:3d:0e:9b:b4:1a:e2:cf:6d:
                    69:ee:0a:50:51:7d:c7:9c:70:e3:ba:28:d5:30:21:
                    4c:02:37:5b:d0:1a:6c:13:26:f1:24:25:3f:7e:8f:
                    89:7c:3b:11:ec:19:e6:67:03:eb:9d:9b:01:59:0e:
                    c9:41:f6:d3:b5:e1:69:56:f4:28:56:14:c7:2f:ad:
                    b2:cb:a2:52:d7:98:71:9b:0b:53:f0:25:4f:e4:b7:
                    45:fb:c4:07:3c:5f:d9:f1:cc:88:21:0c:92:5b:53:
                    1d:64:4b:72:80:33:50:cc:dc:a8:b1:19:a9:91:6f:
                    62:30:74:ad:6b:55:59:a9:3e:c3:1a:46:b9:2d:5d:
                    0b:88:25:2f:e3:7f:f9:c7:8f:41:e6:4b:04:64:8c:
                    df:83:b1:e4:d2:44:d3:7c:ca:1a:46:c1:bd:76:15:
                    23:b9:2c:6b:08:72:54:51:9f:d7:40:6c:8f:c4:a7:
                    63:cb:ec:8d:a2:29:9e:73:2b:b0:75:b3:70:f7:9b:
                    c4:33:a4:1b:6e:5e:aa:31:f1:30:82:48:68:49:f5:
                    9b:db:7d:19:a8:f9:bb:b4:9e:e8:df:1f:92:2f:eb:
                    25:8f:48:1a:08:b0:64:5a:07:72:7c:ba:50:f1:5b:
                    df:0f:c8:c6:05:8c:cb:e8:1d:f2:f1:70:7c:b4:9b:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EB:12:AF:E0:51:DD:57:E4:75:67:BB:1B:16:A3:94:08:42:E4:FB
            X509v3 Authority Key Identifier:
                keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:83:5b:38:23:c0:28:9b:e7:d0:59:12:c3:4c:7f:20:32:
         55:9b:bf:be:59:4f:30:c0:07:7d:7c:ce:4a:54:3b:f9:a6:f6:
         0a:1b:63:99:bb:37:9e:b3:b6:ae:ac:c2:35:dc:76:a7:a7:07:
         3f:5c:3a:20:97:37:05:87:0f:8d:0d:b1:37:b5:fe:12:b0:f4:
         1e:56:22:bc:4d:e0:88:a0:32:1c:19:95:8d:35:e4:90:8d:8f:
         60:63:7d:46:f7:0e:1b:cf:45:c2:30:93:12:0c:d2:2d:a1:bc:
         f7:85:ef:52:5d:9c:10:7a:a9:45:8b:61:6d:e6:82:01:ee:23:
         63:69:93:19:0d:12:7e:77:8a:2f:b4:29:6b:ae:a2:58:6d:ee:
         64:69:3e:39:8a:5e:d2:a8:13:e8:5a:96:b6:8a:6c:fb:97:a9:
         d2:98:9d:f5:b2:bb:46:97:f9:92:51:3d:1b:e6:0b:b5:30:42:
         c0:c6:bf:df:32:1a:5e:ed:de:67:5a:44:1f:eb:2b:39:7e:6c:
         cd:be:f2:e5:ca:22:4e:b0:d5:2e:87:bc:27:4e:1f:7e:3a:7e:
         7b:31:31:d9:86:38:86:7c:34:bc:a2:c1:4c:78:e2:15:9d:ee:
         b4:26:3c:c6:40:f1:f4:07:94:c9:df:dd:79:87:bd:4e:5a:dd:
         00:3c:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:31:37 2025 by rpki-client