Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          1c8v6qNmehj0hGmYxaGkfq3PgCEuL/7dmIa9Uco4R9c=
Subject key identifier:   2D:76:3F:1E:F7:12:17:BB:86:5B:73:A5:69:A6:C5:55:29:37:55:9C
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          8A
Signing time:             Sat 23 Aug 2025 06:48:46 +0000
Manifest this update:     Sat 23 Aug 2025 06:48:46 +0000
Manifest next update:     Sat 30 Aug 2025 06:48:46 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: Tu5O/4KVqQcSkJMNDJK2n++dlm3WtoQnqtfrbWAqPfE=)
                          2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=)
                          3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=)
                          4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Aug 23 06:48:46 2025 GMT
            Not After : Aug 30 06:48:46 2025 GMT
        Subject: CN=68a9644e-b87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:84:21:74:4e:2a:0a:1b:1a:9b:14:50:ef:
                    9e:da:89:b6:fe:0c:79:42:8f:c4:f5:9f:c6:88:bf:
                    fe:18:08:fe:63:d4:27:6b:ab:19:ea:ac:56:1c:d4:
                    f8:b9:fb:cb:66:35:ec:44:ee:2d:ee:b3:26:a6:26:
                    82:10:3a:2e:9f:f2:e0:f4:b7:86:9d:f8:2a:e7:36:
                    cd:b8:fd:10:95:67:a1:a3:4c:2e:78:5c:e4:1b:96:
                    42:58:ab:bd:9f:de:b0:d5:eb:69:78:0e:c5:bf:70:
                    8d:49:36:48:15:f4:b2:a2:2c:01:e7:da:15:a0:a7:
                    c4:ef:06:29:a0:4e:14:79:c7:3f:24:00:6c:8f:7f:
                    0c:34:11:77:7f:a5:53:ba:29:3d:7f:2a:9e:c1:a7:
                    07:3c:15:59:09:28:78:0b:6a:9e:44:32:83:07:ea:
                    46:f0:bf:61:d9:70:8b:4c:0b:9e:8a:d4:73:11:35:
                    08:2f:51:6c:1a:65:59:bc:a1:09:f5:50:0f:68:27:
                    db:8c:04:7f:3e:5f:69:10:f6:8e:22:9c:d5:89:e3:
                    af:a8:f3:6d:84:63:27:a9:1a:31:f1:ba:3b:fd:b2:
                    61:9a:ca:f9:e0:de:b0:69:1a:df:a6:d7:fc:f6:4b:
                    cb:f3:93:cf:aa:51:c1:85:06:50:97:4b:7f:52:1b:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:3F:1E:F7:12:17:BB:86:5B:73:A5:69:A6:C5:55:29:37:55:9C
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:44:cf:52:11:4d:2a:09:65:dc:ac:97:bf:8e:b4:f6:50:6a:
         0c:77:f6:2a:bc:64:a5:a4:f1:0a:ec:f9:67:84:4d:00:23:be:
         e9:68:e3:5c:f8:79:ec:4e:49:77:39:ec:8a:90:2b:b4:4d:40:
         35:0b:a1:09:3b:10:5c:af:76:af:6f:cd:f6:7e:37:72:7b:7f:
         7e:dd:25:97:be:47:f1:bf:5a:29:ec:c4:03:eb:01:6f:49:00:
         8c:3d:72:9e:9d:59:b3:99:f7:16:62:38:44:c4:a5:36:cf:30:
         24:4e:a6:a3:10:4e:fd:f3:ed:7b:3d:17:58:de:c0:90:65:9a:
         c3:9b:8f:ba:df:83:73:9c:03:a4:b4:27:35:73:85:7f:6d:99:
         ea:cc:68:0e:08:ec:9f:7c:74:be:0e:a6:3e:6b:92:39:e4:dc:
         b9:7e:c1:dd:c6:bf:bb:9b:dc:b6:2a:9f:e1:c5:66:e6:3d:7f:
         e5:2a:a7:42:b9:4d:b7:2c:2c:f8:27:fc:08:3c:2d:dc:76:7c:
         73:87:d3:61:43:50:7f:d4:2c:20:bc:b8:38:31:36:26:6f:f7:
         94:16:3c:fc:b6:0b:55:6e:09:74:70:a7:e0:0e:9e:95:77:ad:
         4b:10:8c:54:0f:2d:aa:0b:0a:c4:5b:c7:00:94:6c:64:58:6d:
         5b:ab:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:28 2025 by rpki-client