Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          twnFm0uQGT0fyjqsCc3xRA0zQPOJIq5bp+sFSqDgSj4=
Subject key identifier:   28:2F:04:5C:AC:84:05:A9:5D:50:67:F7:1D:2C:AF:C6:2E:62:1D:91
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0D88
Signing time:             Sat 18 Oct 2025 18:37:17 +0000
Manifest this update:     Sat 18 Oct 2025 18:37:16 +0000
Manifest next update:     Sat 25 Oct 2025 18:37:16 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: PidTsINR5l6QFF5OdnOiCWz66GsylOjeVHEl1Oj/dSM=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: Oct 18 18:37:16 2025 GMT
            Not After : Oct 25 18:37:16 2025 GMT
        Subject: CN=68f3de5d-131f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:4b:b0:4f:4f:c0:ca:00:e6:63:02:ef:35:
                    3e:76:51:91:69:55:a4:89:fd:8a:a3:bd:0b:66:f4:
                    6d:88:39:bc:98:57:b2:29:ed:1c:f6:26:91:eb:da:
                    e0:a1:a3:10:2b:20:54:90:97:2e:64:8c:3e:bc:ff:
                    ed:34:03:47:e3:e3:a4:ad:81:98:ea:64:47:72:67:
                    3d:e8:23:5a:29:05:c7:ab:39:a6:9b:6f:d4:43:53:
                    a9:5a:a1:70:9f:f8:17:4f:73:e1:70:b4:ad:7d:46:
                    47:64:bf:e6:25:8d:fa:50:ae:01:cb:6f:82:ce:3d:
                    35:94:80:9c:8a:4e:34:f0:6e:5b:a7:94:80:b6:a7:
                    4b:df:b4:b4:f2:ba:a9:e9:19:0f:ec:e4:6c:ae:3e:
                    d6:8e:c0:2c:9c:83:67:1b:7b:ab:1e:6e:d4:dd:32:
                    a9:f1:2b:34:ee:3a:95:ce:65:c6:a0:ab:c0:82:60:
                    0b:39:f9:db:4d:32:4d:5a:08:c4:39:10:f7:c5:5f:
                    c5:07:6e:8e:0a:1e:13:54:b1:65:5b:4a:a7:91:89:
                    71:00:59:de:ec:86:63:47:0d:f8:95:c5:9b:53:35:
                    78:c0:5b:f6:bc:23:53:fe:46:c5:c7:c8:ca:ea:c4:
                    62:34:58:c3:cf:41:03:a6:58:68:2f:dd:92:9c:27:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2F:04:5C:AC:84:05:A9:5D:50:67:F7:1D:2C:AF:C6:2E:62:1D:91
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:bb:04:32:4a:c2:c9:8a:32:c1:01:67:b9:1a:54:27:d0:51:
         af:a4:b8:90:fa:0b:a0:65:fc:18:95:1c:c7:a7:56:1c:fe:57:
         6f:b3:86:a5:3b:85:a1:9b:9e:bf:f4:d6:08:27:75:2e:b5:9e:
         90:9f:56:64:08:fa:57:b3:28:46:df:23:19:5a:e8:47:26:c6:
         3d:aa:db:fd:81:19:f8:b7:62:0a:e3:fe:b2:63:16:ed:7b:bc:
         d1:f6:d2:87:4b:ca:d0:d5:81:bd:94:79:45:5f:1f:75:0f:aa:
         7f:76:b7:28:1d:20:77:2a:11:d8:3d:6a:f7:f1:a0:71:68:68:
         ce:d2:d9:0f:19:da:5f:62:60:7d:73:90:c4:dc:7e:85:74:67:
         ae:1d:f1:d3:02:6a:9e:1d:f4:46:79:5c:6d:50:66:68:72:6e:
         e1:5f:75:67:0f:b2:6b:0d:88:78:c2:34:96:12:33:7c:52:7b:
         5a:98:5b:f8:c0:0c:65:fe:f6:4f:73:b5:ad:1e:7a:58:05:26:
         c0:24:7c:4d:17:02:0a:22:65:84:af:66:59:97:01:99:de:c7:
         87:33:7c:cf:48:ef:d5:60:fb:9a:51:f4:fa:8e:67:4e:47:4d:
         57:1c:a9:3e:45:13:88:30:0d:ba:c6:83:8b:7a:41:1f:69:af:
         c6:88:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:35 2025 by rpki-client