Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File:                     jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier:          pRYTjvr0HIpPfdFm0Cm129PWtSPw3Dvl15kfp5pfhtA=
Subject key identifier:   88:B7:FA:84:B8:B1:B2:34:18:78:70:E1:4C:55:64:93:B8:0A:43:4C
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer:       /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number:          0243
Signing time:             Sun 19 Oct 2025 04:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:59 +0000
Manifest next update:     Sun 26 Oct 2025 04:01:59 +0000
Files and hashes:         1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: sHPdMcUvMrssTmY1qL+Eq7XvYpyCpSwdYxPIvRV8+uo=)
                          2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: Q+xBXhtidbH61CzoWLEFSg+uEFF8i0uaB/q+T0AhmlA=)
                          3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: i/k+PMmPjEOn62f4++TqWacooyVJfp9CI/snYpM2THY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
                          rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
        Validity
            Not Before: Oct 19 04:01:59 2025 GMT
            Not After : Oct 26 04:01:59 2025 GMT
        Subject: CN=68f462b7-a5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:8a:d8:1a:08:06:6f:c6:03:18:8a:b1:b9:
                    56:3a:16:72:1a:3a:7d:93:8a:a0:ce:8c:04:27:2d:
                    29:e3:d9:ff:56:df:22:c5:29:76:cb:97:23:d3:9e:
                    a2:7b:88:65:a4:8e:be:05:c3:b6:cb:ad:80:53:87:
                    84:b0:1b:63:c1:d8:ca:31:e1:ac:27:45:a8:c9:ea:
                    63:94:ce:93:43:98:3a:5f:d4:f2:9b:49:89:79:a6:
                    c1:0a:ca:55:3b:9c:ed:f1:4c:bc:ec:ed:ce:6e:f8:
                    f1:7c:9f:26:9c:6b:de:17:15:24:ec:6b:04:bb:d3:
                    53:de:d5:45:0c:7c:fb:a4:45:cd:c5:4b:5d:cc:f9:
                    82:e8:84:1b:0d:59:c2:cc:2c:8e:d4:46:7a:10:ad:
                    3f:03:6c:84:fb:b0:ae:d7:cc:ec:67:c3:85:a9:5a:
                    bd:f0:ef:1c:97:dc:27:8e:d8:c7:18:5b:07:95:2e:
                    13:6a:5e:f9:5c:3a:a5:2f:f6:8d:bd:bd:03:ba:f5:
                    38:76:be:d6:97:d8:8e:f8:e5:80:43:cd:a1:dc:b3:
                    08:34:0a:90:8f:39:dc:5f:38:c2:7a:09:b7:a3:34:
                    97:63:fd:89:28:4e:46:6a:a9:1a:e6:9b:38:0b:12:
                    8c:27:56:6b:0f:8c:4e:97:d7:e9:a3:02:bb:de:86:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B7:FA:84:B8:B1:B2:34:18:78:70:E1:4C:55:64:93:B8:0A:43:4C
            X509v3 Authority Key Identifier:
                keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:57:2f:38:f7:44:b4:a1:c3:9f:84:7a:f3:9f:3a:e4:29:
         ef:a5:ed:5f:43:99:c4:b3:e7:d9:a8:42:11:32:ef:e9:a0:9e:
         46:ec:78:9c:5e:1b:ce:ec:e9:8c:2f:45:d4:b6:0b:fd:ec:a1:
         d3:13:5b:60:30:2e:9d:17:1f:94:ce:fe:9c:62:4c:f8:2d:98:
         25:16:8e:32:53:d1:23:f1:df:39:88:98:3c:9c:50:68:16:6e:
         26:ff:98:0e:ea:c5:98:8b:06:22:9a:e8:0e:c5:9f:43:18:1c:
         9d:4a:dc:ea:03:1e:ea:30:c0:8e:94:4c:0a:3f:5a:46:11:88:
         b6:7c:5e:8b:ee:c5:53:1a:e3:0e:0e:76:03:67:04:be:e8:1e:
         10:44:11:bf:49:84:bf:41:ed:ba:8d:50:8f:7f:16:e7:7a:80:
         f2:d0:ec:a9:a4:4c:01:01:36:20:01:be:34:6a:ed:d2:3e:d0:
         1a:37:e8:dd:b1:65:50:7d:06:98:14:2f:3f:01:5b:31:12:28:
         a5:34:d3:45:32:f8:b6:bb:40:8e:6f:ee:2c:75:7a:ee:6c:9e:
         15:cc:22:28:48:88:55:1e:b9:4a:82:fa:ca:8b:b4:70:dd:34:
         24:33:56:c8:3f:02:86:1d:cd:0d:2a:4e:69:d5:19:51:c1:dd:
         04:f8:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:59 2025 by rpki-client