Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
File:                     jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json)
Hash identifier:          NRhFqfNyzniDJ4J8FibWGnlgDpdxiJjhn2MLoUv34uc=
Subject key identifier:   80:92:94:11:0C:2B:00:4C:A6:E1:F1:41:2E:18:34:21:E8:CF:0E:7E
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0A83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
Manifest number:          0A77
Signing time:             Fri 22 Aug 2025 19:45:14 +0000
Manifest this update:     Fri 22 Aug 2025 19:45:14 +0000
Manifest next update:     Fri 29 Aug 2025 19:45:14 +0000
Files and hashes:         1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: PYMbj4SkTUx8tsYs41mv9igdbSpNOdw6UjrTPYTgCMo=)
                          2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=)
                          3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Aug 22 19:45:14 2025 GMT
            Not After : Aug 29 19:45:14 2025 GMT
        Subject: CN=68a8c8ca-2f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:2f:fc:d3:10:64:dc:7e:fb:7d:b8:ad:b6:
                    6c:07:cd:22:49:e7:31:ec:8c:f7:88:3d:1b:45:c1:
                    26:a4:66:a4:e9:8d:93:0d:78:87:f9:17:66:e8:94:
                    58:62:db:53:ca:31:d1:e8:05:e2:cb:73:29:2b:6f:
                    f5:00:8e:3a:63:42:b9:58:02:15:98:01:8e:38:87:
                    e2:35:98:8e:b1:f1:31:d5:69:1a:fa:cc:9c:05:a8:
                    83:2e:82:30:cd:30:c0:f3:0f:fb:3f:30:6f:f8:0d:
                    da:30:56:79:85:f4:55:21:ca:62:0c:83:1e:2f:61:
                    32:a7:11:04:7d:66:87:3c:e5:4b:51:a2:b1:22:fa:
                    6f:2b:f8:cf:42:24:41:0c:e3:ad:99:23:bf:63:94:
                    02:1b:d5:71:74:48:bd:44:3f:35:96:8a:8d:42:c0:
                    40:8a:4e:92:c2:76:82:9f:98:17:99:65:3d:8e:67:
                    79:47:41:99:57:c2:b2:62:2a:f9:c1:fc:47:92:7b:
                    91:8c:e0:19:db:00:ae:d0:ef:54:18:ec:cb:af:44:
                    e7:4c:1c:d2:74:7d:58:5b:cf:40:e1:59:ab:88:b8:
                    d3:e0:86:29:ee:14:ad:43:6d:e5:9a:17:01:09:e5:
                    8d:4d:8a:7a:84:12:06:11:a5:23:fb:87:f9:d0:bf:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:94:11:0C:2B:00:4C:A6:E1:F1:41:2E:18:34:21:E8:CF:0E:7E
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:17:55:88:cf:bb:4c:2a:da:7a:68:8a:db:dd:52:1f:86:30:
         ca:dc:9b:72:01:4a:1f:bb:8a:eb:60:87:47:fc:07:00:82:65:
         e5:78:60:dc:ba:74:5a:f2:8f:b5:8b:54:de:58:a2:10:a5:df:
         26:2b:82:5b:71:dd:aa:66:08:48:9c:e6:0b:8f:a3:cf:66:f4:
         bb:76:95:7c:53:df:b6:c5:33:35:30:0b:29:8d:b9:e8:7c:56:
         42:86:3a:b3:8c:90:17:c6:a8:7d:20:1b:81:70:5b:eb:45:98:
         43:50:db:94:37:ad:32:8f:35:1a:9e:6e:3b:12:02:25:96:6c:
         cf:c7:e7:8b:bf:f9:49:95:1c:d1:7b:1a:01:02:5b:da:2c:fa:
         db:01:ec:f0:41:3c:f6:98:ae:d4:b3:5c:e4:f3:16:e5:66:54:
         87:12:fe:3b:12:c2:44:45:ec:ac:66:88:7d:39:b5:ac:38:42:
         e4:3a:b5:34:0b:ec:51:ca:14:09:36:2e:e8:a7:e5:ad:7f:d6:
         ee:70:2f:d3:ad:89:b0:ba:ea:d2:f9:b1:c8:c3:db:1e:7b:68:
         6e:5c:e6:f8:b3:7b:66:6c:c2:10:32:17:7a:e4:be:94:b8:3b:
         25:a8:18:c9:b2:70:6f:e9:71:f8:5a:2c:68:bb:18:45:2b:e9:
         1a:79:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:15 2025 by rpki-client