Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
File:                     JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json)
Hash identifier:          OTv4VRcAxezKWMio/UFBWq21ZJQKz9RMeZrTzRjwJe0=
Subject key identifier:   67:12:DC:0B:14:86:EF:C8:2C:3B:CB:5E:6E:2F:1C:3C:2D:6B:3C:70
Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
Certificate issuer:       /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Certificate serial:       06A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
Manifest number:          06A4
Signing time:             Sat 18 Oct 2025 23:44:18 +0000
Manifest this update:     Sat 18 Oct 2025 23:44:17 +0000
Manifest next update:     Sat 25 Oct 2025 23:44:17 +0000
Files and hashes:         1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: WI7BmROuBBP7ltQlvDfo1x29Et2tlrGQam7ZRT07pIg=)
                          2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
                          rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
        Validity
            Not Before: Oct 18 23:44:17 2025 GMT
            Not After : Oct 25 23:44:17 2025 GMT
        Subject: CN=68f42651-8559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:c3:db:2c:84:51:d6:31:9d:67:6b:0c:4d:
                    78:d0:29:e8:b0:40:2f:96:d5:9b:fb:01:1a:ff:3f:
                    32:10:ea:11:12:45:f0:36:1d:05:f9:dd:9e:db:90:
                    06:e7:dd:8f:a2:52:42:65:82:9f:cd:ea:16:f5:2c:
                    94:d5:7a:15:c2:7c:33:7a:85:6b:c5:03:9d:be:5a:
                    bd:d3:9f:c4:11:f6:fe:cc:eb:e1:39:aa:bd:ba:fa:
                    3e:e5:bb:3e:5f:22:52:a5:94:75:25:98:fd:26:0d:
                    b7:1b:e8:83:9f:54:ba:2a:71:df:ee:53:1e:e5:ed:
                    cf:93:46:ea:b5:a0:91:d5:11:ce:aa:2c:c4:b1:a6:
                    50:8b:d8:77:7a:50:e6:bc:2d:9d:92:57:ac:fc:da:
                    14:25:df:30:4b:ba:74:71:9c:3f:eb:fa:91:aa:86:
                    5a:8b:99:99:67:26:3a:a2:d4:e0:2f:43:c5:5b:74:
                    8e:f0:93:fd:8e:03:d6:db:a5:c9:a4:a3:d0:37:6f:
                    13:30:23:14:fc:1a:3c:a9:44:ee:70:8a:ad:14:92:
                    91:a8:21:42:dc:9c:90:d1:39:f5:ef:de:8f:20:1c:
                    70:6b:c0:c2:dc:b8:3d:cb:a3:1d:af:2e:2a:d0:98:
                    dd:bd:1d:ff:4c:7d:0f:b6:69:7c:2e:d3:05:b9:8a:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:DC:0B:14:86:EF:C8:2C:3B:CB:5E:6E:2F:1C:3C:2D:6B:3C:70
            X509v3 Authority Key Identifier:
                keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:82:90:6f:6a:73:c3:90:d4:0f:73:b0:28:db:82:f5:b7:20:
         d5:cf:e7:15:29:2f:ec:5e:ce:1f:52:cf:c8:19:74:9b:32:00:
         e5:d1:f4:1f:f0:b6:a0:de:0e:4f:b0:96:6e:f2:60:cc:51:c6:
         aa:b6:ba:d9:92:c3:d3:f7:b6:3a:50:60:45:b8:1f:e6:de:57:
         d9:da:fe:05:86:7a:99:0f:e0:ce:86:86:5e:bd:30:34:c8:5e:
         69:22:e5:36:35:04:79:5b:ee:7e:43:ad:44:6c:62:37:2e:29:
         0d:f3:54:cd:70:af:eb:1b:a4:f6:72:f8:1d:db:52:12:ee:e2:
         e7:6e:53:8f:ac:54:6e:79:34:8a:ce:1f:11:5d:63:87:f1:9f:
         8f:36:43:52:36:71:44:b2:9d:b2:8a:c9:f6:dd:e7:08:c1:fe:
         49:95:84:df:ed:eb:ed:4d:2e:13:c8:4c:53:ae:8c:ac:83:4a:
         3d:ad:91:29:c8:cd:8f:41:23:62:20:ae:74:38:95:6c:54:6c:
         26:e4:1a:07:71:8e:95:98:11:3b:9b:0f:c0:f0:19:29:ce:90:
         81:75:10:ec:e5:79:f7:53:ec:0f:e0:2c:22:89:a2:ef:ad:98:
         a7:98:16:54:6c:30:10:e3:d2:d3:41:c9:84:09:ad:1c:87:ee:
         3e:47:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:44 2025 by rpki-client