Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File:                     JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier:          Djvj6g6nTx7+4GHI2SapuEQ9cf/AJToZ3SzljL3HKFg=
Subject key identifier:   31:62:51:A0:AB:6B:5C:EA:78:2B:23:0E:FC:A5:AC:86:04:26:1B:DB
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer:       /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number:          0221
Signing time:             Sun 19 Oct 2025 04:17:47 +0000
Manifest this update:     Sun 19 Oct 2025 04:17:46 +0000
Manifest next update:     Sun 26 Oct 2025 04:17:46 +0000
Files and hashes:         1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: ELsGCWx3U5xmnPs7MLPu4gM9RfDdTc7z81FsLTOmAE0=)
                          2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
                          rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
        Validity
            Not Before: Oct 19 04:17:46 2025 GMT
            Not After : Oct 26 04:17:46 2025 GMT
        Subject: CN=68f4666a-6f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:04:a0:82:7a:88:7e:88:04:aa:07:d2:35:
                    f0:08:c6:5d:af:aa:ee:49:75:f6:3e:e4:db:6b:be:
                    56:a9:76:bc:7f:d5:14:bf:cf:ee:29:c1:6f:d1:81:
                    f1:10:7f:fc:55:cd:bc:cc:4d:04:32:96:b3:3d:67:
                    d5:ad:d8:1f:fc:18:c6:81:6e:37:a2:7d:64:81:d6:
                    8e:0d:0c:15:03:59:02:25:19:6e:17:b0:95:52:c4:
                    6a:8b:bb:d4:54:7b:bd:a5:88:30:a9:dd:6d:a2:84:
                    59:6f:23:08:c0:45:94:b2:ae:97:b2:08:6d:9b:07:
                    23:ce:2c:7b:c9:1f:ce:de:db:bb:8e:24:72:1b:8a:
                    f8:dd:0c:f3:49:f4:05:f7:98:21:db:a4:e4:5a:35:
                    c2:13:06:08:95:d8:29:d7:f0:5a:d0:fe:1f:22:2f:
                    0a:86:ab:67:29:12:38:6e:04:eb:1d:fe:14:d5:61:
                    f6:8c:6b:e8:e3:ac:97:dd:77:c2:1a:aa:27:47:41:
                    d0:6a:4f:dc:b5:d7:8b:89:43:8c:cc:0e:6b:54:88:
                    b5:40:39:1a:c3:de:9b:ba:c8:dc:de:f8:80:4e:30:
                    0a:02:c9:70:ba:ee:2e:d4:3b:05:84:59:c1:ed:32:
                    f4:a1:29:ff:1c:df:53:82:29:2c:27:a1:d3:3e:15:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:51:A0:AB:6B:5C:EA:78:2B:23:0E:FC:A5:AC:86:04:26:1B:DB
            X509v3 Authority Key Identifier:
                keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7c:99:c3:2b:79:7a:23:b3:88:e3:8f:8d:a6:03:c5:d4:3d:
         74:6f:b7:a1:71:ff:a4:b5:32:fd:d3:b6:db:11:75:4b:c3:5f:
         ee:61:a3:af:74:93:3e:f8:95:7b:aa:88:52:78:32:76:34:a1:
         de:d4:00:ce:10:5c:e1:88:63:99:19:0e:cc:2e:03:9a:24:2e:
         bb:d7:76:c4:1c:8e:93:9d:d5:da:67:27:73:00:0d:84:81:3f:
         8a:6d:2e:d3:cf:74:ac:25:d0:0e:6c:f6:25:17:e0:a7:d9:2f:
         ae:59:17:3b:bb:27:25:90:ca:8a:d5:df:4b:0f:64:87:ee:70:
         c0:80:41:13:89:60:25:e1:da:b7:d9:62:47:ff:de:76:e2:f5:
         63:43:bb:d1:b6:45:56:3f:4e:7e:95:8b:f2:5f:3d:ed:c6:f2:
         4d:1a:bd:81:60:ac:ef:d0:87:51:4b:c8:2d:f5:2c:cb:0b:58:
         29:d4:aa:70:87:a4:ca:76:95:97:b3:e8:d8:47:6d:d5:f7:ec:
         0e:30:bc:22:fa:db:0d:51:52:67:3d:7f:c9:1f:a4:c2:16:84:
         7b:d3:d5:a8:15:75:8c:63:0f:d1:19:6a:bf:ad:68:24:36:92:
         cb:8e:de:c2:56:ba:c7:e0:99:63:1e:76:c0:27:30:ca:53:16:
         1e:29:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:45 2025 by rpki-client