Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          YOrLJqS/JSjYRa+HdI811pllp4G+Se1eYFZb8jZcxgw=
Subject key identifier:   A4:C9:A0:3D:26:A1:70:12:34:4F:0C:97:C6:9A:89:B6:41:6A:C8:0F
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          02ED
Signing time:             Sun 19 Oct 2025 03:22:42 +0000
Manifest this update:     Sun 19 Oct 2025 03:22:41 +0000
Manifest next update:     Sun 26 Oct 2025 03:22:41 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: EcWQBrHF4M+/ovNho/DY5OR5GfIrzEgZreXdA6lYKVk=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Oct 19 03:22:41 2025 GMT
            Not After : Oct 26 03:22:41 2025 GMT
        Subject: CN=68f45981-de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:98:03:28:c3:c7:0b:68:c6:df:37:67:8a:
                    0f:4e:2e:db:f0:35:8f:99:b2:0b:b3:fd:14:ea:e4:
                    96:16:ee:86:93:73:e6:57:af:f3:42:f5:17:f2:b6:
                    23:86:85:07:31:8b:e6:85:cf:4d:c8:79:12:70:9b:
                    5c:12:04:3a:38:b8:be:3e:5e:fd:59:71:5f:19:f4:
                    87:cf:be:4e:66:c7:15:7b:82:6a:4f:ea:1e:a1:59:
                    ca:4d:32:ac:39:9c:32:37:c3:3f:77:84:f7:a6:1f:
                    50:d1:95:f9:c0:14:10:4a:2a:e7:1f:26:06:c0:ca:
                    31:4f:1b:01:cb:24:3d:92:c4:ac:d5:d0:e6:ad:f3:
                    32:e6:de:8e:9a:79:81:91:54:a2:79:4e:6d:c3:0d:
                    94:86:fd:7b:a3:0e:5f:9a:0e:62:67:a3:fa:fa:9c:
                    07:47:9b:68:bb:a6:a9:76:b9:e4:9c:b4:f6:b8:24:
                    88:12:a2:eb:6d:c3:f6:56:89:19:7d:91:30:ed:fe:
                    e0:b8:9c:6f:e1:4a:7b:8a:0f:c0:10:9a:3a:12:c3:
                    8b:f6:39:53:85:0f:42:28:2e:e7:6e:4d:e6:fc:2f:
                    b2:6c:79:dc:bb:3d:4a:13:80:df:10:09:43:6f:b6:
                    63:90:63:35:f8:41:14:1d:49:b9:76:6c:90:75:d0:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:A0:3D:26:A1:70:12:34:4F:0C:97:C6:9A:89:B6:41:6A:C8:0F
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:50:3a:bd:b3:ac:5d:40:12:6c:84:80:3f:56:a2:56:de:61:
         71:93:b0:8b:bf:f9:3f:17:32:6d:61:b3:41:50:d6:63:35:80:
         ec:ab:70:c3:a4:00:b2:d9:a5:e8:f9:11:86:6b:bf:ad:76:c6:
         7e:d8:c8:68:36:ed:32:72:ce:00:97:da:f8:a6:26:9a:34:e6:
         ae:ef:44:f6:61:f4:65:4c:db:fb:3a:c2:0c:9d:59:93:c9:5e:
         67:60:1f:a8:f2:87:1b:13:25:2c:3c:a9:c0:b6:08:63:26:52:
         c1:26:32:89:2a:69:46:41:e5:b3:f0:cf:a4:0f:61:cd:f2:39:
         e0:af:0f:97:d1:f2:9d:55:df:3b:df:f8:0a:92:84:4b:09:5f:
         1e:dd:ea:7c:91:e6:6f:6d:a3:d0:3b:9a:07:db:0a:3f:3d:bd:
         35:e9:9e:18:e8:a5:d9:bc:eb:61:87:c9:3f:d0:9f:8f:8e:a8:
         b6:dd:a3:d8:02:00:54:47:b0:aa:98:c8:c8:19:a7:21:f9:63:
         e1:c8:46:ec:ac:72:70:f2:8e:3c:06:d3:c1:2d:97:eb:98:ac:
         58:1d:c5:27:37:55:14:b5:00:75:d4:b1:7d:ed:50:01:f7:4e:
         63:3a:f0:88:c0:61:44:6e:a4:b9:c4:e3:ad:dc:5e:ab:17:5c:
         94:bc:f9:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD
QzFCRTFDMzgwHhcNMjUxMDE5MDMyMjQxWhcNMjUxMDI2MDMyMjQxWjAYMRYwFAYD
VQQDEw02OGY0NTk4MS1kZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloOYAyjDxwtoxt83Z4oPTi7b8DWPmbILs/0U6uSWFu6Gk3PmV6/zQvUX8rYj
hoUHMYvmhc9NyHkScJtcEgQ6OLi+Pl79WXFfGfSHz75OZscVe4JqT+oeoVnKTTKs
OZwyN8M/d4T3ph9Q0ZX5wBQQSirnHyYGwMoxTxsByyQ9ksSs1dDmrfMy5t6OmnmB
kVSieU5tww2Uhv17ow5fmg5iZ6P6+pwHR5tou6apdrnknLT2uCSIEqLrbcP2VokZ
fZEw7f7guJxv4Up7ig/AEJo6EsOL9jlThQ9CKC7nbk3m/C+ybHncuz1KE4DfEAlD
b7ZjkGM1+EEUHUm5dmyQddA0QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTJoD0m
oXASNE8Ml8aaibZBasgPMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF
QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj
MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgUDq9s6xdQBJshIA/VqJW3mFxk7CLv/k/FzJtYbNBUNZjNYDsq3DD
pACy2aXo+RGGa7+tdsZ+2MhoNu0ycs4Al9r4piaaNOau70T2YfRlTNv7OsIMnVmT
yV5nYB+o8ocbEyUsPKnAtghjJlLBJjKJKmlGQeWz8M+kD2HN8jngrw+X0fKdVd87
3/gKkoRLCV8e3ep8keZvbaPQO5oH2wo/Pb016Z4Y6KXZvOthh8k/0J+Pjqi23aPY
AgBUR7CqmMjIGach+WPhyEbsrHJw8o48BtPBLZfrmKxYHcUnN1UUtQB11LF97VAB
905jOvCIwGFEbqS5xOOt3F6rF1yUvPmY
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:58 2025 by rpki-client