Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          zIiIkPCfoy/WH1uZD4fXfByhkq8d7Elf5uVpEBmvDto=
Subject key identifier:   4C:2F:F1:C5:A5:0B:BE:CB:CA:20:E4:7F:8E:18:CB:9B:90:B6:FB:DF
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       14BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          14B2
Signing time:             Mon 08 Sep 2025 16:53:15 +0000
Manifest this update:     Mon 08 Sep 2025 16:53:15 +0000
Manifest next update:     Mon 15 Sep 2025 16:53:15 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: WP3cRNopZzjZ8kmkZnwsFHVl8VtNNgfHLW9x81v9QMo=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5308 (0x14bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: Sep  8 16:53:15 2025 GMT
            Not After : Sep 15 16:53:15 2025 GMT
        Subject: CN=68bf09fb-f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:97:d8:fe:d6:0d:38:6a:b1:80:ca:fd:6b:
                    bd:de:bd:09:53:2d:1c:48:d0:d7:de:3b:73:b4:82:
                    a9:db:79:f1:22:a8:53:0d:16:5c:58:c6:82:8b:da:
                    07:26:a6:ee:59:fc:df:ed:b7:c8:1e:cd:ea:38:a7:
                    bb:a2:e5:98:94:8d:60:6e:75:9b:d4:cb:8a:81:92:
                    43:c3:8d:cc:93:76:97:75:78:2e:61:16:fe:cf:a2:
                    b9:17:a5:c0:e0:53:36:83:90:e5:71:f4:d6:8a:68:
                    20:43:d3:e8:f3:2b:17:a4:b8:ea:0c:fa:ab:91:50:
                    80:05:5d:8c:f3:84:18:78:06:47:26:2f:83:c6:6c:
                    d9:8a:d1:df:f4:8d:95:23:7f:dc:c0:e3:8c:4d:01:
                    18:e2:d0:b7:97:b9:d8:67:13:11:4d:97:e0:14:c4:
                    c6:18:38:f6:da:35:0e:ba:6c:97:61:99:05:8f:5b:
                    fc:02:79:d0:b2:75:7b:bf:bb:34:90:3a:64:34:49:
                    91:63:22:3c:7b:2c:9f:4c:58:0e:bf:a0:2e:77:aa:
                    84:f2:ca:63:02:dd:cc:0a:d4:eb:fb:eb:42:85:96:
                    2f:df:75:0b:71:dc:0b:8d:0d:00:66:26:e9:28:6b:
                    01:b4:81:5f:86:ba:fa:5e:47:bd:ed:7a:c4:75:dd:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:F1:C5:A5:0B:BE:CB:CA:20:E4:7F:8E:18:CB:9B:90:B6:FB:DF
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:36:23:5e:c9:df:f2:88:f1:a7:24:86:64:5f:da:58:42:
         64:71:64:29:14:68:c9:8d:03:da:01:10:d5:d3:54:bf:aa:04:
         29:46:d4:5a:09:d9:5b:68:ce:67:44:98:eb:41:00:b5:16:73:
         68:3a:09:7e:d7:60:8e:21:a4:b7:ef:b8:30:84:9f:c4:a0:31:
         7d:68:83:6c:01:23:bd:f5:c0:9d:1c:58:c7:a1:bb:1a:ae:c2:
         40:6f:df:8c:0d:d5:ca:9a:0e:d1:6e:77:cd:06:46:fa:07:1b:
         0a:f0:51:b9:f4:05:be:03:04:83:b1:f0:33:a0:75:e2:49:f6:
         df:6e:9f:46:8b:0a:7c:af:ca:47:fb:0a:c1:52:45:5d:58:16:
         3a:f0:2f:43:80:9a:c4:0c:dc:00:de:2e:3c:76:e2:4e:c4:e6:
         ab:8c:0e:26:87:5c:6a:c3:29:02:dd:16:36:a8:4c:8e:8b:ea:
         4c:8e:2a:b5:2a:f3:30:ac:f3:c3:5e:4a:a7:b6:cc:80:2d:7a:
         28:36:d6:f5:e9:b3:8a:f7:24:9b:34:3b:c9:d2:df:4b:33:e6:
         eb:19:26:70:63:0a:d6:91:60:d4:46:54:14:ae:16:66:ce:1d:
         be:ec:79:2f:01:9d:80:62:66:82:65:78:e1:93:85:1a:aa:ef:
         c1:78:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:19:45 2025 by rpki-client