Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File:                     JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier:          pqppsryNrm975JUvdYGTpzUWv/tVvSx8I8RH4N+/6UI=
Subject key identifier:   BC:FF:DA:CD:96:39:9B:A3:38:6B:C9:B1:FC:D5:E1:8E:6A:77:99:8C
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       0819
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number:          07FF
Signing time:             Sat 18 Oct 2025 22:15:09 +0000
Manifest this update:     Sat 18 Oct 2025 22:15:08 +0000
Manifest next update:     Sat 25 Oct 2025 22:15:08 +0000
Files and hashes:         1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: P/hbz/IQf15LPwEO9xmg5+gv92aJkpkgZ5MeU4icnXs=)
                          2: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=)
                          3: DE46CA6A97A311F08969C53CC4F9AE02.roa (hash: 7554mFxBVOIG3xrGK5/XH9r15TjJMKV/ts6aEHUGI6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Oct 18 22:15:08 2025 GMT
            Not After : Oct 25 22:15:08 2025 GMT
        Subject: CN=68f4116d-be75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:11:2b:10:97:96:36:c3:26:a2:44:f7:72:
                    a8:85:7b:a4:8e:c2:c3:72:45:8b:42:db:45:b6:fe:
                    01:4c:6e:93:b8:ea:61:db:fd:57:d3:f0:90:5c:9e:
                    0a:a3:c8:93:f0:26:1b:c2:ef:aa:62:42:d8:e7:d3:
                    42:6d:d3:10:6e:50:49:3f:bc:7c:3d:7c:7b:fb:54:
                    8a:68:4a:8a:91:4f:54:64:02:11:06:af:f6:2d:1e:
                    35:b2:5f:29:c3:60:0d:07:fb:0e:0d:37:c2:ce:ef:
                    ac:fe:0e:5c:16:f5:cc:63:76:d0:84:2a:87:27:9b:
                    e7:ce:0d:a0:29:e5:66:88:93:8d:52:2b:9e:da:88:
                    eb:c9:bd:7d:a4:fd:87:5d:e6:6c:f4:51:6f:96:58:
                    b6:6d:cc:b1:67:d4:84:e5:88:78:2a:1e:75:7f:9f:
                    bf:44:f2:77:bc:d8:48:aa:6e:fe:b7:db:29:b0:74:
                    2f:2f:94:6e:ec:25:25:12:e1:57:33:4c:91:3a:ea:
                    32:22:22:b1:95:39:6b:c1:cb:78:d7:7e:2e:5d:a8:
                    81:c7:27:30:58:01:2c:a3:27:b4:2a:e1:97:0d:1a:
                    c8:35:0a:d2:12:b8:1d:8f:d6:e7:78:97:85:05:36:
                    e7:3c:6c:93:79:8e:f7:0e:e0:f3:89:7d:43:65:37:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:DA:CD:96:39:9B:A3:38:6B:C9:B1:FC:D5:E1:8E:6A:77:99:8C
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:8b:7b:c3:2a:fd:ef:b3:2c:9c:42:c3:a8:a0:14:34:ec:
         1a:7b:6e:4c:18:5d:20:81:9f:5b:73:4b:81:16:d6:ae:b5:9b:
         7c:c9:2e:5b:b4:dd:4b:8a:d9:24:e7:c6:d4:a9:a5:49:1f:47:
         e4:0d:9c:7f:ff:44:80:a8:b8:fc:45:b0:25:94:1e:15:f4:d3:
         bf:c8:a2:7f:3a:28:26:89:71:24:8d:a8:a4:5f:40:39:da:c5:
         de:3d:98:92:95:3c:59:cf:b0:9a:7b:77:99:7c:6d:38:8d:4d:
         ac:3c:96:e9:73:44:da:f5:c1:02:ad:61:ae:63:6f:48:a1:52:
         ba:60:52:12:dd:13:b4:55:b1:5a:14:e5:50:28:de:b7:7e:11:
         5d:7f:cb:11:0f:c6:bc:17:97:a3:84:f2:c9:12:46:61:2d:e5:
         73:ca:e1:7a:84:a1:fc:50:55:ff:93:f4:fa:1f:a9:45:82:f3:
         f1:ad:48:b6:cd:68:8f:b4:01:9a:4e:0b:62:c6:d5:7f:3d:d2:
         4f:9e:ce:68:12:fc:84:34:c1:f7:9b:de:c4:7f:80:8e:fe:10:
         e5:79:9d:fd:07:c7:86:dc:be:11:00:21:ba:a6:ab:49:91:e7:
         8e:fb:03:a8:2b:8e:3c:ca:57:6e:cb:b6:45:d2:d0:d4:b5:23:
         83:61:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:52 2025 by rpki-client