Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File:                     JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier:          pbOpfVuY63jxARoZ28zAjGylZ2f9kEDnNkR0xbWis/k=
Subject key identifier:   91:F9:B9:A4:C4:4E:53:0C:26:96:66:0B:06:FC:40:80:03:24:2F:45
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number:          014B
Signing time:             Sun 19 Oct 2025 07:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:01 +0000
Manifest next update:     Sun 26 Oct 2025 07:01:01 +0000
Files and hashes:         1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: J/t3xGFuYEyyfGtJ3eTYSfRZWwewUh+Pn5za6wW4TGw=)
                          2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Oct 19 07:01:01 2025 GMT
            Not After : Oct 26 07:01:01 2025 GMT
        Subject: CN=68f48cae-fc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:b9:39:97:98:01:7c:99:4a:21:1e:9e:59:
                    0f:45:9a:85:1d:91:4d:e5:cf:de:03:9f:01:f9:37:
                    cf:87:f2:bd:23:22:0f:84:f9:69:c9:b1:38:5f:11:
                    12:1c:5a:86:13:6e:67:d5:b2:f6:af:82:b2:6d:b1:
                    87:df:a4:ed:af:d7:51:32:f6:e3:72:30:cd:2f:d3:
                    0b:e3:72:bc:bc:5e:80:66:33:d2:0a:10:9d:8f:42:
                    a3:90:2c:f1:61:c2:b5:03:6e:8d:ec:7f:de:37:d0:
                    ef:59:0f:09:55:e1:c6:2f:b3:f4:84:02:e0:06:98:
                    27:f2:95:96:76:b2:20:6b:d1:03:9c:15:e0:5a:79:
                    4d:63:73:1c:c3:9c:fc:90:df:9f:79:c1:70:44:4e:
                    16:af:24:85:7c:21:3d:84:43:5a:c4:83:13:15:bb:
                    64:e1:d8:6e:e1:d3:93:75:2a:a3:a6:52:fa:70:9f:
                    f1:0e:de:7f:fe:ac:80:eb:ba:53:59:22:c2:43:83:
                    ff:a7:19:6c:82:08:f5:3a:20:2d:d2:df:e8:32:84:
                    a1:f8:d6:5b:26:c9:02:c1:a7:16:14:02:4a:d8:07:
                    fc:9b:0b:d3:be:6b:67:d7:81:ca:d5:5b:cf:b1:e5:
                    49:82:1b:37:af:31:8d:08:7a:33:a4:ed:91:4a:9c:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:B9:A4:C4:4E:53:0C:26:96:66:0B:06:FC:40:80:03:24:2F:45
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:9d:fa:81:8a:62:7b:82:9f:4b:16:b6:13:6f:d2:6b:b7:
         d6:77:70:31:e1:f5:34:3f:d8:c5:13:1e:23:b2:b9:bd:22:a9:
         8f:90:60:60:4f:8a:6f:b7:ba:c7:cf:ea:ca:f7:56:90:ec:19:
         25:7c:06:d4:1b:ad:34:5e:86:a8:aa:3f:e9:96:c8:85:fe:8e:
         a8:45:8b:81:21:48:1c:0f:81:17:c9:05:1d:be:b1:f3:d0:50:
         56:ac:d2:30:15:95:df:1f:ac:38:f1:c3:91:d4:cd:48:0a:8e:
         ef:ee:ee:5e:6b:db:98:a4:4f:fa:e6:56:85:16:e6:69:7d:ed:
         d6:d9:11:62:bb:64:38:0b:f0:b3:a8:79:66:18:5d:7a:32:fd:
         9c:10:19:ad:b4:53:a5:b5:4d:1a:22:0f:06:6d:75:ee:9d:0b:
         b3:91:46:86:10:91:33:e9:87:8d:d1:bc:ff:e7:ee:61:89:80:
         7d:af:68:16:64:7a:63:c8:70:42:63:83:81:53:97:4f:dc:df:
         62:04:36:99:c9:9f:3d:31:c2:ab:89:e6:c5:c0:09:5a:84:5e:
         2d:1c:24:e5:d8:3e:30:49:c8:81:38:06:38:c9:e1:ea:7d:39:
         cc:b1:6f:df:86:87:9e:bd:dd:0a:5f:d8:c3:44:d5:a0:71:50:
         46:bd:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:39 2025 by rpki-client