Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          yp6MWhj2WQ3kslG64q65FStEQ6lCXaE8MvCi5QhZ0yk=
Subject key identifier:   A6:FF:7C:62:EE:9F:B1:CD:79:FC:8E:C0:82:C6:BA:25:70:D6:F5:7C
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          86
Signing time:             Sun 19 Oct 2025 09:54:34 +0000
Manifest this update:     Sun 19 Oct 2025 09:54:34 +0000
Manifest next update:     Sun 26 Oct 2025 09:54:34 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: kDh5LSNyILMxDdzSSwvUztGGVQAlq/ogk/s8SX5nXU8=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Oct 19 09:54:34 2025 GMT
            Not After : Oct 26 09:54:34 2025 GMT
        Subject: CN=68f4b55a-63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:28:36:23:00:c8:69:5e:38:83:d9:50:3c:
                    3a:f6:c2:96:fb:d5:10:49:e4:20:ab:ce:06:77:05:
                    ff:80:ce:9d:b3:35:2a:f5:9c:be:1e:a6:8e:9f:a2:
                    25:37:19:c7:36:69:97:4b:4f:f0:ea:11:64:fa:83:
                    15:a6:0c:3e:d9:fb:71:67:6c:1a:0f:c6:f8:f3:ba:
                    bf:63:66:c0:9b:ec:ec:5d:50:98:50:3a:e0:1b:be:
                    29:47:86:39:9b:03:e9:31:27:c8:2d:85:02:3a:9e:
                    c4:5c:63:e3:d4:51:81:a5:0e:57:43:2f:5a:1d:37:
                    06:d9:13:8d:b2:48:51:d2:44:df:7d:70:6f:9f:c8:
                    a7:11:8b:83:8c:bd:9f:e0:88:0c:45:68:f7:9d:c9:
                    97:94:ff:2a:98:b8:40:e4:e8:81:17:0d:6f:43:b3:
                    72:6c:e7:ec:98:e0:c8:8a:66:a1:ff:1c:8b:cf:7c:
                    34:50:2e:3b:7d:f9:6c:a8:ab:61:66:f8:65:28:0e:
                    e3:49:82:b7:e2:6a:e6:25:1f:e7:ad:51:c5:41:c2:
                    8e:2d:ce:ef:5c:c2:8d:3b:3a:54:ca:38:44:a1:7a:
                    93:77:48:c0:54:35:cb:04:b3:51:45:53:fa:28:c3:
                    92:77:d4:3a:f9:82:52:1d:a4:92:0a:92:be:32:51:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FF:7C:62:EE:9F:B1:CD:79:FC:8E:C0:82:C6:BA:25:70:D6:F5:7C
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:a1:86:c6:72:ac:51:0c:d3:78:ad:0a:24:e5:60:66:e9:
         c6:9c:e3:75:bf:ae:b0:dd:b0:bf:96:e8:67:9a:50:c1:ad:87:
         31:36:35:09:46:a7:af:ae:d4:89:75:c8:f1:fa:df:e0:7e:66:
         3d:67:04:0c:5b:c1:e1:07:09:1d:ea:be:11:45:bf:17:e5:b4:
         e9:34:b4:07:93:03:fc:04:7e:0e:e2:0a:51:07:00:c2:4e:db:
         1d:1b:dd:2c:ec:dd:ad:ce:a1:b9:aa:e4:70:65:00:40:d5:b6:
         52:55:a7:21:60:e8:db:4f:e2:e3:60:c5:df:4e:45:21:dc:38:
         2c:8e:40:7e:7d:2e:bd:f4:45:3c:ec:d3:a9:ec:ed:75:b4:19:
         81:33:5e:48:4c:8b:2c:b9:06:17:52:3e:6d:c2:95:cf:ef:30:
         b2:fe:d7:29:18:db:0b:5a:db:4d:b9:3e:d8:73:72:c7:66:24:
         26:9c:25:e0:50:7b:bd:eb:f9:f4:eb:aa:78:c4:ca:29:2f:b5:
         5a:81:ef:f9:f7:87:38:46:06:e4:80:a4:63:03:bb:65:b4:99:
         ad:86:8f:a5:52:5c:4f:7d:2c:83:5d:1f:a9:f9:71:27:2c:08:
         38:f9:ad:16:e1:de:11:d8:cc:6b:b8:6a:cf:3b:22:e6:04:fc:
         01:e1:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:48 2025 by rpki-client