Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
File:                     JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json)
Hash identifier:          7V+3NXn0xO7dTbKWT+nhLZuPNTFlgOkCo3jJDRhyRZ4=
Subject key identifier:   DA:1D:97:F8:8D:9B:6B:57:CC:35:35:F7:11:0A:95:7E:EC:5A:94:C7
Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66
Certificate issuer:       /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
Manifest number:          0875
Signing time:             Sat 18 Oct 2025 21:47:09 +0000
Manifest this update:     Sat 18 Oct 2025 21:47:08 +0000
Manifest next update:     Sat 25 Oct 2025 21:47:08 +0000
Files and hashes:         1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: x+fnkKhnFUWF9OpaIK0WXmBzWZSTMqMHHfQjcaQN2Y4=)
                          2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: iVfJEeg3Wgdof0gIfzSRbq9faDNqlEFVPNcvpNlnmRA=)
                          3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: w4WjZepte0rY+jWEuTZEQB8JcDFa63LXhrBQUJaEGlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl
                          rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466
        Validity
            Not Before: Oct 18 21:47:08 2025 GMT
            Not After : Oct 25 21:47:08 2025 GMT
        Subject: CN=68f40add-e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:91:fd:08:9c:af:5a:7f:b2:90:a9:61:fb:
                    08:b1:8a:e4:49:48:b7:11:38:3a:9d:39:c2:7a:aa:
                    80:f4:39:85:35:a3:7f:e0:c3:8c:56:c9:1d:d3:6c:
                    15:c0:9e:a4:c5:70:bf:42:63:dd:bc:20:24:c5:2d:
                    16:44:2c:e8:af:ce:18:dd:b2:2f:3d:fb:13:96:40:
                    94:f2:09:7f:dd:a0:94:06:42:37:1c:fe:c2:3d:b6:
                    f1:83:c4:d4:71:bc:f0:64:a4:32:61:bf:75:e3:18:
                    e6:7b:eb:32:06:7b:ec:13:28:ca:31:e4:1b:a7:16:
                    8d:50:75:23:09:ad:5f:11:55:66:9f:76:dd:b6:fd:
                    48:9b:48:c7:67:f2:c6:2a:01:f6:17:11:f4:cc:64:
                    e1:e3:00:22:46:ff:b6:cb:ff:c7:95:4c:56:d8:85:
                    d3:84:a1:2c:d7:67:19:fc:e4:17:6e:c8:78:11:3d:
                    7e:53:84:36:8d:c9:8b:54:ea:3c:4d:6f:cd:2c:a0:
                    07:fb:3f:6a:e3:44:93:ee:b1:d2:4a:d3:27:18:e0:
                    d5:3f:b7:6a:30:5e:19:25:c7:62:89:36:83:e2:69:
                    5b:4a:41:d2:ed:a4:5c:5e:ec:11:af:b9:86:19:20:
                    42:ff:04:9b:66:b1:36:10:0a:25:26:e5:39:75:4c:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1D:97:F8:8D:9B:6B:57:CC:35:35:F7:11:0A:95:7E:EC:5A:94:C7
            X509v3 Authority Key Identifier:
                keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1c:a9:0a:4a:d8:0d:1f:97:50:81:4e:02:5f:61:1f:c8:45:
         d4:1f:fb:ad:62:15:c6:f6:97:9c:3e:3d:74:93:30:e7:81:0d:
         00:94:83:3c:7c:4a:3c:bb:75:73:fc:7b:e5:8e:77:e6:27:fc:
         5a:0a:ab:30:f9:84:f0:03:74:85:6e:0e:1b:00:cc:19:dd:03:
         cd:8c:ae:eb:d5:5d:13:1e:f2:af:95:44:26:90:77:72:c1:a3:
         ef:7f:ba:0c:39:2c:f1:36:2f:5e:95:57:7f:cd:f2:93:dd:5d:
         4c:b7:c9:40:6a:38:63:f2:6c:53:01:2e:91:76:bc:47:53:fa:
         f2:98:1e:cc:b8:49:0f:4d:df:bd:05:ca:ab:d4:de:ec:fc:c1:
         6e:b7:90:82:24:b6:40:54:93:2c:5d:11:32:59:a2:a0:89:2d:
         b5:47:a4:58:a9:23:ed:e1:f5:69:ce:f2:1a:38:9b:70:73:f0:
         1e:7f:ec:89:cb:c3:44:b5:c5:70:7f:46:e2:73:21:74:9f:7d:
         ba:0f:b9:f1:35:73:44:6e:3d:e9:93:c1:2f:7c:0c:06:c7:bf:
         24:8e:0e:fb:07:46:06:69:eb:7c:c1:8b:23:11:7c:27:34:0e:
         a5:c3:7c:dd:9e:ed:df:15:4e:4a:60:9f:e1:ea:2a:4f:43:c3:
         7b:f6:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:09 2025 by rpki-client