Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          q0NN9MbKAET54IJrqG1eUTkOcOus5waaUmM9h+eTIps=
Subject key identifier:   67:B2:57:0E:B9:9B:2A:00:86:E6:6E:3D:CC:80:D8:C0:D9:22:BA:76
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       08D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          08D1
Signing time:             Sat 18 Oct 2025 21:32:30 +0000
Manifest this update:     Sat 18 Oct 2025 21:32:29 +0000
Manifest next update:     Sat 25 Oct 2025 21:32:29 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: pZm8hjDUcCDEI8SCOQAFGxknQ56J0yu27XXJ6R+4vFM=)
                          2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Oct 18 21:32:29 2025 GMT
            Not After : Oct 25 21:32:29 2025 GMT
        Subject: CN=68f4076d-597a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:02:b2:10:05:ad:da:40:3f:9e:7d:ff:ef:
                    06:34:59:53:01:a0:50:3c:bc:ec:5c:31:b6:84:46:
                    a0:80:b5:60:3f:5b:bd:98:ef:20:a5:50:4e:cb:80:
                    2d:8c:54:e8:42:05:a4:a7:b6:aa:5b:49:dd:f2:2e:
                    f3:46:b0:c5:28:11:12:16:2c:10:e7:18:43:1e:c8:
                    ee:43:34:f3:c7:56:16:62:8f:55:3c:bc:3d:0d:fe:
                    fd:5d:61:b6:01:b7:5a:79:07:cb:6f:55:d2:a8:29:
                    f6:7f:49:2e:5e:d4:6a:1d:c7:06:79:3e:a6:97:9f:
                    47:85:28:0c:91:18:2a:2c:29:80:68:70:d9:e2:e7:
                    fb:5f:46:07:b6:f7:9b:fd:01:10:35:66:0a:0f:db:
                    47:c6:e7:f6:41:cd:28:80:fa:79:de:cf:23:26:9b:
                    d3:59:67:89:57:3d:2a:e1:c2:da:7b:70:9a:92:ad:
                    6e:45:bb:b1:65:cf:fc:82:24:82:e6:98:8a:11:22:
                    c5:76:e2:5e:8e:e8:16:54:ec:90:1a:6e:1d:c0:ef:
                    7d:1d:fa:9e:a5:c0:b9:62:12:8b:3e:7d:08:17:c2:
                    c2:65:2e:5a:4d:3f:fd:4e:96:0c:c0:da:b1:da:75:
                    12:a7:e8:e0:c8:ba:76:95:a1:b1:a4:c5:f7:c1:cf:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B2:57:0E:B9:9B:2A:00:86:E6:6E:3D:CC:80:D8:C0:D9:22:BA:76
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:eb:c5:ec:e5:d2:81:2b:54:94:b5:fd:44:78:d4:b4:ee:
         b3:41:ab:d3:0f:de:d5:48:7d:21:f9:de:33:99:62:80:90:5e:
         dd:ca:45:5e:5d:93:67:2a:97:8d:8d:66:62:68:4f:07:31:b4:
         aa:79:47:14:8d:fb:84:7d:02:30:dc:26:43:15:00:3f:ef:93:
         9e:29:2f:45:54:c4:79:86:81:72:39:28:45:72:f5:69:eb:a4:
         a6:b3:53:f9:1f:43:85:e6:2e:3e:64:07:e9:48:7a:55:06:14:
         86:56:f1:58:6d:8d:f8:6c:aa:ae:85:5e:94:b6:38:f1:63:cf:
         57:40:98:b7:a5:0e:5b:75:89:7f:5d:1d:1f:07:7b:f6:85:d4:
         39:34:83:29:3d:6d:6f:09:e3:8a:d6:f7:b3:e3:6f:a5:a3:77:
         d6:b3:d1:3a:53:1c:79:c3:2e:01:64:22:93:e9:6b:0b:0b:38:
         0e:5d:32:4b:ba:e6:19:34:17:c3:8f:4c:98:18:e5:11:63:19:
         4f:90:57:17:8b:77:7d:30:fb:d3:8e:db:94:e6:70:64:94:cf:
         f8:50:b6:82:f8:80:19:72:4c:67:13:21:ec:30:f1:da:c8:45:
         fd:c1:1c:4e:9f:73:1d:9b:92:81:8a:b8:56:52:bb:10:1a:0b:
         21:8c:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:16 2025 by rpki-client