Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File:                     JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier:          aUup1aOOYrUnRUji5B9tubpAoQ59seBTRGyPRYJ2Ixs=
Subject key identifier:   37:FC:1A:50:2F:89:4C:FE:46:89:FC:13:A3:49:D4:F2:A9:70:AF:86
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer:       /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial:       0B72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number:          0B69
Signing time:             Tue 10 Jun 2025 18:58:57 +0000
Manifest this update:     Tue 10 Jun 2025 18:58:57 +0000
Manifest next update:     Tue 17 Jun 2025 18:58:57 +0000
Files and hashes:         1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 2RzWOcG7cHSUJ0TpmuBjZq4zQeSV61PIIJ06nDAgR1s=)
                          2: A540A624378611EABE283384C4F9AE02.roa (hash: wqMWiXdgCu3cScL0mYpc0UCwGRMk2VdkUHOf3iWaHHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 18:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2930 (0xb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
        Validity
            Not Before: Jun 10 18:58:57 2025 GMT
            Not After : Jun 17 18:58:57 2025 GMT
        Subject: CN=68488071-27ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:a8:4c:fa:b4:e3:14:8a:26:ff:47:25:f9:
                    83:3b:80:3e:b4:0a:01:36:dc:3e:5f:b6:3d:70:9a:
                    cf:0a:16:07:0d:0c:8a:ee:32:a0:e7:c6:93:96:87:
                    08:fb:79:02:36:ac:bd:f7:50:23:2c:f1:27:e8:e3:
                    38:69:2c:94:ec:29:05:48:e2:f2:1b:34:40:04:f5:
                    99:0d:19:65:69:19:29:74:ca:95:39:cf:b8:73:3f:
                    7a:90:c8:c9:ef:35:21:db:40:91:91:95:3c:87:ff:
                    8d:b4:1a:f6:bf:d4:46:ed:b1:d0:4f:b1:1d:57:8b:
                    0e:4f:f4:52:eb:07:a0:8d:f0:38:f5:01:13:17:3d:
                    b3:84:47:d8:1d:8b:14:ae:d8:2f:f7:a9:1b:f7:7a:
                    06:1a:02:ce:d9:7e:3f:aa:68:98:dc:e0:a7:e0:25:
                    5c:5d:f4:b1:a1:6b:fa:da:25:75:7d:58:02:15:fb:
                    72:3e:dd:4a:f1:da:70:20:ac:f4:a7:53:5b:0b:31:
                    8b:b7:b5:1f:eb:f0:5a:fd:4c:6c:ba:f1:4e:87:99:
                    ff:55:b0:30:74:93:5f:34:8b:ff:34:75:6d:c8:6d:
                    a0:8c:82:26:74:2a:24:31:47:3c:63:6f:b3:6f:9b:
                    89:54:c2:cc:42:34:d5:16:f0:be:cb:99:db:d3:20:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FC:1A:50:2F:89:4C:FE:46:89:FC:13:A3:49:D4:F2:A9:70:AF:86
            X509v3 Authority Key Identifier:
                keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:8e:00:07:52:1a:5b:3f:36:5e:e1:39:1c:4b:e1:fb:59:
         5c:91:ba:52:3b:a4:c8:88:20:c1:8f:4d:d8:29:48:8e:ef:1c:
         9d:05:f6:f4:94:6d:70:ab:ed:d9:38:d4:7a:d8:5d:d8:da:55:
         62:4a:eb:13:eb:1a:f7:aa:ad:f6:ca:14:b2:77:0d:a0:57:1c:
         3a:60:6e:4a:c0:db:f9:49:0c:32:88:6b:0f:11:8a:f9:6b:c7:
         40:53:3d:34:fc:43:23:5a:ef:88:44:76:c7:f2:7a:a2:90:b2:
         f7:32:46:f9:cd:f1:22:2a:aa:88:82:45:00:19:ab:88:e0:46:
         6b:eb:69:9d:2f:ec:8d:f7:54:8c:c2:56:da:93:cf:11:a5:db:
         b9:c8:d4:66:35:50:c1:9a:db:be:ea:13:f5:45:70:50:87:b8:
         0c:23:22:c0:52:ac:7f:c1:ae:0e:b2:ea:31:8f:c1:df:a4:1e:
         87:61:64:44:a9:e5:07:fe:ee:e9:69:9b:ef:e7:c2:b0:9d:28:
         44:66:42:92:77:d1:01:bc:6a:c7:f5:92:0a:4a:24:8f:19:a8:
         f7:ae:56:84:51:9b:14:d0:12:0d:17:13:69:0a:68:4a:82:be:
         37:f0:d8:c2:54:d0:7d:09:06:e8:aa:6c:cd:4d:76:52:8e:2e:
         ba:12:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:05 2025 by rpki-client