Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
File:                     jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json)
Hash identifier:          0ockySB1L09IPlVUoxt2Lkg8SB70A6cOTkq+FkisDEE=
Subject key identifier:   3D:62:03:75:2C:47:AF:BB:84:DC:E8:B3:69:CF:01:96:38:DC:D4:71
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Certificate issuer:       /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
Manifest number:          0E
Signing time:             Sun 19 Oct 2025 11:36:18 +0000
Manifest this update:     Sun 19 Oct 2025 11:36:17 +0000
Manifest next update:     Sun 26 Oct 2025 11:36:17 +0000
Files and hashes:         1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: K2Q76MWjZpdJV+6dwzp6hu6189WfKrPwRyT1Ff+y8QQ=)
                          2: 658118DC9DD511F0B7B21741C4F9AE02.roa (hash: rVG2mMMlI46nAQV2wjCxVFoXhNfbyWdlWS1Fu6xYQuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
                          rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
        Validity
            Not Before: Oct 19 11:36:17 2025 GMT
            Not After : Oct 26 11:36:17 2025 GMT
        Subject: CN=68f4cd32-b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:a5:9a:81:06:bd:ec:88:be:b8:0e:28:87:
                    db:5a:5a:5e:8e:96:3c:a1:ec:f6:7e:41:7e:f2:92:
                    94:61:43:83:fa:a2:b9:2a:2c:64:48:cd:87:b3:73:
                    bd:a1:bd:82:60:a4:f1:02:dd:11:50:11:46:6b:34:
                    ec:13:ee:d3:da:20:95:c4:d2:1e:4f:84:79:c4:e9:
                    d4:45:81:fb:c4:ef:c1:3d:89:c1:4b:0c:2c:1c:99:
                    a1:35:e7:2b:9e:43:02:95:ac:ef:93:72:aa:23:fc:
                    fc:d8:e1:59:a5:2f:9e:85:8a:0a:d2:e8:1f:60:68:
                    b7:5c:ef:23:8f:a9:82:35:6e:93:f6:7f:6f:37:58:
                    ea:6b:8b:8a:f6:80:54:df:42:bd:6d:64:1d:33:eb:
                    bc:31:41:54:a1:da:cb:d5:37:6b:04:06:24:86:9b:
                    14:de:c1:40:cc:7f:ce:b2:71:21:b6:13:fa:f9:a5:
                    f7:e6:52:be:fb:15:41:f4:f9:ac:25:4a:72:ee:be:
                    c2:2e:6c:79:ca:1b:1b:a5:12:18:f9:22:cb:9e:e8:
                    c5:5b:78:45:58:fb:4f:42:3f:26:3d:87:8d:d7:23:
                    ca:ea:7b:9a:ba:66:e2:9f:2b:e2:60:91:25:e5:96:
                    03:d0:84:52:64:f7:2a:69:6c:45:66:36:ee:e6:1c:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:03:75:2C:47:AF:BB:84:DC:E8:B3:69:CF:01:96:38:DC:D4:71
            X509v3 Authority Key Identifier:
                keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:7a:43:da:d2:db:92:2e:a9:42:ae:8e:e4:ef:2c:5a:68:
         b1:06:f3:dc:a9:a3:8c:fb:34:fd:57:49:a3:a2:3a:18:94:f2:
         00:f1:36:de:a8:53:23:b9:cf:d8:91:10:53:e7:5e:0c:5c:b8:
         11:62:47:45:8d:56:f6:bd:23:00:17:23:04:39:6f:42:97:46:
         42:66:fc:8d:54:17:80:dd:7b:1b:15:09:86:3d:43:96:33:0e:
         36:93:26:41:a0:33:1f:5f:d4:4b:40:1d:b0:f1:d2:ce:df:2e:
         a2:e2:63:b6:cf:a1:a1:55:b1:d0:c1:21:a6:66:96:48:e9:d2:
         be:8e:0e:6b:b5:6a:3d:b8:e5:97:8f:51:6d:89:b9:30:bb:af:
         f0:77:94:a0:5a:0c:52:cb:35:40:fc:fa:32:7f:ff:f6:b7:f7:
         f1:dc:b7:53:82:12:2a:19:67:bc:15:dd:42:38:86:34:3e:e4:
         f3:ad:4a:88:b7:b4:86:2b:79:37:69:48:f0:4c:6c:76:07:ee:
         16:ef:02:03:8f:54:f3:6e:4d:db:9e:92:df:14:e9:50:96:17:
         9c:d3:e7:41:9b:9c:c4:98:5b:1e:e1:6e:39:5f:36:41:2d:e6:
         57:0e:db:9b:83:55:a8:b1:14:5a:43:14:62:b9:2a:cf:0e:df:
         11:47:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:22:32 2025 by rpki-client