Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          6+Odxrp5ebASFc1jxX6eBxjzWxZf0LSjSHosd2JUaOo=
Subject key identifier:   94:CC:6D:E3:92:66:52:E6:EE:23:D8:50:5A:0C:AB:F6:29:F9:0D:27
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          F4
Signing time:             Sun 19 Oct 2025 08:09:55 +0000
Manifest this update:     Sun 19 Oct 2025 08:09:54 +0000
Manifest next update:     Sun 26 Oct 2025 08:09:54 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 79GelOymRGFjRIRUE5TTaygwT/d4iN4uk4WKVY0S/9Y=)
                          2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: ZMHJbDurrQwg9LuHdJ4fXoBTwDMXXjxbFZ/gpf/dfBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Oct 19 08:09:54 2025 GMT
            Not After : Oct 26 08:09:54 2025 GMT
        Subject: CN=68f49cd3-ba0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:bf:60:c7:fd:e1:66:87:2b:91:f4:2f:d2:
                    c8:d0:cc:8d:62:19:5c:c4:5b:e5:57:44:5a:a3:ac:
                    cb:95:5b:00:f0:06:6e:81:f5:1d:42:92:3b:0b:53:
                    81:23:9c:51:71:b5:ff:20:92:9f:a4:84:2b:51:d8:
                    a8:87:43:e8:74:2c:59:be:37:7d:ee:89:81:d9:fb:
                    3a:ef:2d:64:df:8f:4b:55:8f:72:bc:f8:d0:98:6b:
                    00:95:ad:c0:45:91:52:ef:e4:f8:43:91:cf:d6:a7:
                    0e:87:4a:29:50:20:1e:1e:90:00:5d:d7:75:b5:56:
                    d3:13:3d:9c:c8:42:56:ea:18:13:aa:f7:f5:da:a0:
                    6e:9a:3c:80:6e:b6:4f:d4:df:7c:6c:8d:7b:78:bd:
                    9d:a2:fa:a9:ae:49:ea:bf:0e:1e:c6:0a:05:e0:87:
                    a4:10:73:46:a4:28:26:cb:c0:32:ee:16:fc:d8:87:
                    6d:61:6f:fb:d7:60:6a:85:50:8b:4c:b3:67:15:be:
                    5f:f8:4b:89:a2:43:82:87:b3:04:00:eb:fe:f2:fb:
                    60:6e:dd:f5:ed:5c:04:3f:e1:ad:a7:d7:66:ca:e5:
                    98:34:42:ed:92:d8:c7:b9:41:23:a8:45:c7:0d:c2:
                    9e:87:b5:34:27:4b:1f:4d:1a:bb:b8:e5:bd:f1:cd:
                    2f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CC:6D:E3:92:66:52:E6:EE:23:D8:50:5A:0C:AB:F6:29:F9:0D:27
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:bb:30:1a:82:fa:2b:70:58:70:20:b3:01:0e:3b:b2:26:
         15:92:b7:08:fb:57:fe:64:fd:09:ef:be:c7:1e:c7:0e:08:46:
         36:77:6c:63:9f:06:f1:e7:14:1f:d4:4a:12:63:0e:de:c8:bd:
         43:e4:dd:c0:62:bb:4a:be:60:db:18:ab:1b:bb:fe:de:09:7d:
         4d:31:4b:5a:e9:a4:75:25:ae:01:ca:13:7c:10:f8:34:1b:36:
         ab:70:3c:f2:34:b7:4e:77:eb:9c:fb:0a:8c:db:84:ea:f1:df:
         03:fd:1b:8c:4b:82:13:62:2c:8c:c0:11:ca:10:18:07:b8:61:
         44:8a:1e:a4:77:41:09:c4:32:76:4d:29:d8:0d:1f:a1:eb:a2:
         e9:64:79:70:6a:4e:7f:40:0e:14:cc:0e:20:1c:46:4b:d1:29:
         af:ad:43:b6:ba:23:fb:59:50:3e:13:52:df:74:52:27:4c:3e:
         65:91:f8:99:62:86:19:d5:ec:b5:1c:25:79:e1:d8:72:b9:e7:
         a8:cd:b9:ca:fe:2a:27:81:31:01:50:18:a8:fb:ab:63:54:6a:
         1b:56:46:4e:b8:91:3f:34:c2:a6:4d:f8:ff:46:1d:da:19:c1:
         2b:cf:91:38:a2:5b:30:39:23:96:10:78:21:4a:bc:a5:44:7a:
         16:14:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:02 2025 by rpki-client