Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
File:                     jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json)
Hash identifier:          oaAU83S7BVHBbxMuvlfMmGuEJfKXXyxeEjC5qGkSUpk=
Subject key identifier:   12:C3:98:6B:23:75:C6:BC:A8:A0:73:2B:CE:51:F5:67:AC:F4:A2:62
Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
Certificate issuer:       /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
Manifest number:          25F6
Signing time:             Sat 18 Oct 2025 16:39:58 +0000
Manifest this update:     Sat 18 Oct 2025 16:39:57 +0000
Manifest next update:     Sat 25 Oct 2025 16:39:57 +0000
Files and hashes:         1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: aP7x7zwk9FxulBZToC23tU8ESqUj6X6K1o/MSjleZRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
        Validity
            Not Before: Oct 18 16:39:57 2025 GMT
            Not After : Oct 25 16:39:57 2025 GMT
        Subject: CN=68f3c2de-3fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:2e:07:69:dd:44:23:3f:97:9f:ad:cf:82:
                    7b:8c:ef:6a:34:05:b0:46:d4:90:94:79:c7:11:27:
                    a7:81:fd:4b:ae:ad:96:fe:7d:28:28:f6:5d:08:ed:
                    71:a8:fd:64:07:89:67:ec:8a:0c:cd:2a:8d:74:7f:
                    e0:a5:b4:36:aa:1d:5c:03:31:2c:12:bf:e8:2f:de:
                    07:e2:42:02:21:dd:0c:25:e4:ec:50:e6:82:75:d8:
                    a5:0f:88:54:de:dc:14:d5:14:8c:7e:5e:98:1e:8b:
                    7c:fa:c1:66:da:07:5c:db:98:db:0c:a6:8d:e8:8f:
                    3a:8c:1a:06:0b:e5:05:bb:d5:df:41:cf:05:3e:5e:
                    5e:40:b2:8b:dc:9d:3f:85:81:8b:da:79:ba:9f:04:
                    a5:48:ee:44:28:bc:9d:88:c8:b1:9a:f1:da:32:56:
                    c8:13:ad:65:39:0b:78:bf:6e:b9:0c:2b:96:4b:7b:
                    8e:57:37:58:a2:8f:5b:58:50:81:ca:b1:ec:76:30:
                    c5:c3:e4:67:20:7d:d8:f2:ee:d1:53:11:80:ff:51:
                    a2:de:fe:99:8e:23:30:ec:9d:34:2c:d8:53:2b:f2:
                    8b:b0:92:de:2d:cc:04:6b:ec:3e:be:7f:0c:17:ea:
                    70:93:44:0d:a1:cc:86:da:30:5c:c1:6b:2d:17:f3:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:98:6B:23:75:C6:BC:A8:A0:73:2B:CE:51:F5:67:AC:F4:A2:62
            X509v3 Authority Key Identifier:
                keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:02:f1:cf:c0:61:5e:2a:5e:02:a3:7b:94:98:4b:5e:54:46:
         21:53:6d:4c:26:15:9e:a1:53:0a:aa:69:1c:de:11:60:70:a9:
         39:25:bd:06:46:d9:bc:df:e6:66:d2:aa:5b:14:84:f7:da:fa:
         f8:e6:57:01:a6:27:ee:bc:a5:67:0d:89:91:35:dd:62:42:d2:
         fb:17:04:d5:bf:7c:a7:fe:e6:a9:ce:bf:52:e2:1f:25:66:76:
         69:c9:25:7c:55:cd:0f:20:5f:80:ad:98:54:97:6d:db:87:ec:
         7c:48:9f:2e:d6:16:42:6c:f9:6a:7d:6c:8c:c2:9d:89:fc:e2:
         12:98:64:6d:14:99:79:58:87:6f:aa:ed:93:a3:92:a1:df:4a:
         53:23:05:0e:1f:1c:e9:51:59:be:ea:74:1f:30:90:e8:f9:1b:
         d3:0b:6b:9a:75:7a:1d:00:97:2a:0c:c4:bb:bc:e2:be:31:02:
         1e:1f:d4:d4:b3:b8:ac:96:dd:00:22:4f:41:2e:fd:a2:c1:c8:
         ff:ed:3f:03:79:34:70:c3:0f:60:b4:76:fd:ee:db:31:25:91:
         77:bd:76:fa:3f:51:16:1d:7d:96:8a:cb:34:f7:2b:e2:ed:46:
         f4:6b:5e:b0:61:eb:c9:92:84:97:ee:b1:6d:91:12:9a:d0:7c:
         64:f0:37:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDhEQzlDRjI2RjlENEZEREMxMTE0NUQzM0MzQkQwNzk2
MkQ2MjdCQjgwHhcNMjUxMDE4MTYzOTU3WhcNMjUxMDI1MTYzOTU3WjAYMRYwFAYD
VQQDEw02OGYzYzJkZS0zZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwEuB2ndRCM/l5+tz4J7jO9qNAWwRtSQlHnHESengf1Lrq2W/n0oKPZdCO1x
qP1kB4ln7IoMzSqNdH/gpbQ2qh1cAzEsEr/oL94H4kICId0MJeTsUOaCddilD4hU
3twU1RSMfl6YHot8+sFm2gdc25jbDKaN6I86jBoGC+UFu9XfQc8FPl5eQLKL3J0/
hYGL2nm6nwSlSO5EKLydiMixmvHaMlbIE61lOQt4v265DCuWS3uOVzdYoo9bWFCB
yrHsdjDFw+RnIH3Y8u7RUxGA/1Gi3v6ZjiMw7J00LNhTK/KLsJLeLcwEa+w+vn8M
F+pwk0QNocyG2jBcwWstF/NtKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLDmGsj
dca8qKBzK85R9Wes9KJiMB8GA1UdIwQYMBaAFI3Jzyb51P3cERRdM8O9B5YtYnu4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9qY25QSnZuVV9kd1JGRjB6dzcwSGxpMWll
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9qY25QSnZuVV9k
d1JGRjB6dzcwSGxpMWllN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHAvHPwGFeKl4Co3uUmEteVEYhU21MJhWeoVMKqmkc3hFgcKk5Jb0G
Rtm83+Zm0qpbFIT32vr45lcBpifuvKVnDYmRNd1iQtL7FwTVv3yn/uapzr9S4h8l
ZnZpySV8Vc0PIF+ArZhUl23bh+x8SJ8u1hZCbPlqfWyMwp2J/OISmGRtFJl5WIdv
qu2To5Kh30pTIwUOHxzpUVm+6nQfMJDo+RvTC2uadXodAJcqDMS7vOK+MQIeH9TU
s7islt0AIk9BLv2iwcj/7T8DeTRwww9gtHb97tsxJZF3vXb6P1EWHX2Wiss09yvi
7Ub0a16wYevJkoSX7rFtkRKa0Hxk8De1
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:59 2025 by rpki-client