Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
File:                     J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json)
Hash identifier:          0eGzBUdP55cWNko7LVw5IcJ0baJIx2+xzSa8PyT+hzw=
Subject key identifier:   65:88:51:E4:4F:8C:EE:73:C3:81:9F:7C:67:73:49:15:DB:31:74:A7
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Certificate issuer:       /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
Manifest number:          0224
Signing time:             Sun 19 Oct 2025 04:15:27 +0000
Manifest this update:     Sun 19 Oct 2025 04:15:26 +0000
Manifest next update:     Sun 26 Oct 2025 04:15:26 +0000
Files and hashes:         1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: WkjC+S0vgvWfZlxr4GSnI1u419EVVP1zjiXg3Q47f1w=)
                          2: 35C34054633911ED97F86846C4F9AE02.roa (hash: j9opGfbttUeCxSnD6dInpPsqFcL3+tDfpef/BimCS4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
                          rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
        Validity
            Not Before: Oct 19 04:15:26 2025 GMT
            Not After : Oct 26 04:15:26 2025 GMT
        Subject: CN=68f465df-e03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:1b:7a:5d:0a:15:75:96:59:af:5d:6f:d5:
                    63:a6:34:6c:1c:53:58:a6:db:7f:61:01:6d:14:a5:
                    27:47:d7:b6:ec:4c:d7:4f:39:f3:cf:6d:49:8b:4a:
                    c9:d5:64:b5:b0:8f:fe:c0:03:76:3d:ac:42:19:ac:
                    5e:88:31:89:c0:b0:24:ca:b5:49:01:a4:29:12:ef:
                    de:81:bb:4d:be:95:c7:1d:ba:8a:8c:8c:1d:21:bd:
                    22:fa:2d:06:00:db:d8:d2:92:64:3f:60:e7:86:ae:
                    90:24:4b:1c:fa:61:ca:b5:1c:2b:12:83:87:8d:26:
                    26:8b:5b:aa:a2:5c:0c:a0:56:3a:77:39:dc:f8:26:
                    16:08:81:01:ed:48:e0:16:8e:23:ff:83:7c:44:32:
                    1b:29:4a:87:31:0e:30:da:a8:7a:b3:df:ee:ba:8c:
                    67:99:96:93:19:a2:09:f6:bd:b7:be:d7:62:34:f8:
                    34:14:70:14:82:d7:96:d7:42:54:2a:f5:08:5a:53:
                    ce:36:96:03:f8:68:dc:4d:70:66:aa:8c:da:4b:ff:
                    09:ef:8f:78:6f:ab:d5:4f:fd:88:55:bd:e7:80:84:
                    79:74:dc:f8:5a:31:3c:79:ed:b0:1f:b0:5c:f3:11:
                    4f:66:2f:d3:e9:46:a7:d9:8f:e9:bf:c6:fe:6c:da:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:88:51:E4:4F:8C:EE:73:C3:81:9F:7C:67:73:49:15:DB:31:74:A7
            X509v3 Authority Key Identifier:
                keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4c:0f:6c:04:43:91:8d:d1:26:3a:17:28:d7:ea:10:e8:58:
         2c:c8:f1:63:52:1a:16:c6:a0:9a:fb:12:8d:45:81:70:68:b9:
         10:5f:77:d0:15:02:96:1a:c1:1a:c6:65:88:43:5f:fd:90:b3:
         6a:f8:6f:aa:d8:63:a9:bc:13:3f:45:3a:93:c4:80:fc:b1:49:
         53:09:81:4f:0b:b8:58:b8:7c:c4:26:3d:8a:33:11:e5:f9:8b:
         18:f4:0f:8b:0c:71:b3:fb:0b:1a:a3:a7:80:5c:25:10:44:f4:
         90:ce:3b:74:ee:b7:4e:15:05:9f:e1:52:54:1f:91:43:a5:b7:
         81:27:05:7f:0c:f4:e6:35:d1:eb:a0:c8:1d:ea:72:60:d0:30:
         36:a2:73:f3:d2:cb:d7:05:ab:67:73:66:17:a7:95:0b:3d:5e:
         73:f6:6b:88:a9:93:97:f7:33:6c:e9:3d:07:db:1e:9f:ca:4d:
         db:ff:d6:84:0f:46:c1:b5:6e:45:0f:f3:86:4f:bd:c9:87:66:
         bb:e4:1f:32:9d:9d:3a:69:16:40:21:e8:c6:d5:67:ff:f8:38:
         99:93:8d:b0:0d:e2:6b:65:f9:7e:de:ef:24:61:9c:7f:c1:16:
         96:d9:23:eb:66:1b:b7:0a:98:23:7e:b0:2a:8e:d3:15:d2:4f:
         21:ad:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:01 2025 by rpki-client