Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
File:                     rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json)
Hash identifier:          Fi88e3GpvDrE6Qg2Ip/ukeG4OwY2Fif+ZzCmgD2k1T0=
Subject key identifier:   C2:9F:2B:03:8E:86:18:0E:99:90:89:72:A9:AA:D4:F4:34:44:84:85
Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
Certificate issuer:       /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
Manifest number:          057E
Signing time:             Sun 19 Oct 2025 00:57:25 +0000
Manifest this update:     Sun 19 Oct 2025 00:57:24 +0000
Manifest next update:     Sun 26 Oct 2025 00:57:24 +0000
Files and hashes:         1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: VwNxQD3k9KZnOFCUGZvsu/oLX+IUZKWPWNXmA2J79Nc=)
                          2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: 9SVnSE07orKUrYj7Q2p5dxBkM3PRfBRsEx0gwE9+iMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl
                          rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
        Validity
            Not Before: Oct 19 00:57:24 2025 GMT
            Not After : Oct 26 00:57:24 2025 GMT
        Subject: CN=68f43775-0a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:a7:69:1f:df:49:94:33:cd:4b:20:e2:ad:
                    99:ea:56:8d:40:1c:9a:5b:5f:f1:1f:86:4e:3d:e2:
                    9b:32:3c:73:c5:92:dd:be:bd:63:9f:09:c3:44:af:
                    07:97:13:1f:c4:0a:5a:7d:66:c5:f7:3e:ae:51:1d:
                    0a:16:1d:b8:c7:65:38:2c:ec:1a:3e:e0:45:95:ed:
                    1f:6c:ac:f2:4a:78:b3:2b:18:3d:d8:48:03:33:a0:
                    e3:fa:db:41:45:f6:1b:63:74:1e:cd:5e:80:de:1c:
                    95:fd:d6:f6:5f:b0:4c:a1:e7:09:4e:7c:15:06:a9:
                    59:11:fb:2b:ba:06:76:44:a5:aa:fc:ef:14:01:9f:
                    7d:d0:5d:94:24:9d:5a:8e:61:01:35:38:d6:10:9b:
                    22:1c:b9:15:51:91:fc:11:05:d0:49:bc:2d:31:e9:
                    8f:4d:20:f3:8c:22:29:ff:7a:cf:2f:60:43:21:c3:
                    7f:d8:38:15:2a:ca:42:d7:6f:10:8f:c8:b2:43:d4:
                    ab:79:78:50:c6:bd:49:d9:38:c7:05:fe:98:d1:6f:
                    ed:a7:ba:e2:63:c6:92:3c:4a:9e:72:b5:34:36:52:
                    bc:fc:77:6e:c5:2a:2e:3e:68:f4:9d:7e:7a:c9:43:
                    04:11:06:b1:d0:b7:14:6d:a8:0b:23:82:01:81:b7:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:2B:03:8E:86:18:0E:99:90:89:72:A9:AA:D4:F4:34:44:84:85
            X509v3 Authority Key Identifier:
                keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:91:38:bc:dd:b4:96:fc:01:c7:4e:ed:25:41:df:4b:04:
         da:40:24:02:c4:5d:fa:e3:64:d9:e0:01:92:e4:a6:b6:85:7d:
         95:de:20:ee:45:a3:2c:53:c5:47:38:d2:38:f3:a7:91:d3:c9:
         24:30:ca:d6:d0:84:30:04:5e:1a:df:ab:e2:2f:5d:b4:10:9d:
         18:47:65:02:f3:c3:0e:a4:a1:4f:dc:44:ca:96:d5:a1:57:39:
         d2:a5:3e:27:18:19:40:e1:33:a7:fa:95:98:f7:75:7c:49:12:
         83:73:9d:e8:95:bf:b2:ed:3c:d4:ce:09:0f:28:ae:6a:13:d1:
         8c:68:65:00:14:85:7f:19:0c:c9:29:00:0d:01:f3:19:bf:d1:
         e0:5d:4b:5f:d2:0a:14:fc:34:4f:c1:e4:34:68:29:bd:cb:84:
         d7:ee:81:87:2b:d1:68:c5:92:29:a7:f1:ef:cc:f9:4b:57:d7:
         bc:37:cd:36:05:df:a5:c4:12:08:e9:38:c4:2f:8d:29:c7:fc:
         9f:65:1f:b2:78:e5:d4:5d:73:e6:2e:82:ce:06:89:26:c9:55:
         87:56:25:cf:77:c2:9a:5d:bd:9b:4d:da:1f:a6:9f:3b:9f:53:
         35:bf:97:76:18:2d:14:4c:26:c0:b9:56:1c:31:61:91:ae:87:
         43:6e:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:17 2025 by rpki-client