Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          CANOQOg/GCU86cs50VGi3Yqomsn5iW7XqPWrM6SOVWY=
Subject key identifier:   D0:53:08:F5:F8:B0:D1:67:4A:82:D3:6D:AB:01:45:20:20:2C:AC:9B
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          019D
Signing time:             Sun 19 Oct 2025 06:00:22 +0000
Manifest this update:     Sun 19 Oct 2025 06:00:21 +0000
Manifest next update:     Sun 26 Oct 2025 06:00:21 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: LJCoJA4qajkR9a5x0padZMAZ5vfdhflU9B/ysl1x5BM=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: Iuws9NrVtp4Hp18jNO1d1Y0TiH8At1P1mnw1eI9JeUU=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: WV1AYVH+VxYegf7IkYCFOtt6eabKoa8E7Gk8VCZklvI=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Oct 19 06:00:21 2025 GMT
            Not After : Oct 26 06:00:21 2025 GMT
        Subject: CN=68f47e75-49b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:02:3f:06:fb:43:ff:30:d5:c1:1a:69:20:
                    47:69:3d:a3:65:f9:07:dc:1f:9f:c4:ff:9b:88:7c:
                    04:f2:a7:52:da:6b:77:8f:ce:1c:d3:b3:2c:93:14:
                    fc:09:d2:5e:ed:da:10:99:d1:2b:21:23:73:39:4d:
                    e4:bf:fd:5c:dc:ce:75:6e:b0:dd:09:e1:f2:17:04:
                    91:ca:1c:53:17:70:9c:d9:11:ee:f1:02:4c:7d:cb:
                    5f:7f:a8:29:92:24:7e:c9:3d:af:69:15:cc:27:8e:
                    f4:31:3a:af:b3:b5:cb:0f:7b:fe:25:5f:7e:b2:1e:
                    37:af:1a:fc:de:7e:3c:d0:b9:6e:17:fe:66:7b:47:
                    88:2a:fc:37:95:a2:32:6c:c1:36:0b:7c:36:05:97:
                    99:d9:06:5d:5c:bc:61:05:e6:bc:02:e2:a8:8d:90:
                    59:cd:2a:48:f1:af:4e:e5:83:de:69:b2:2d:ee:80:
                    d7:b7:f9:e5:77:52:d9:ec:b4:0f:98:f0:ef:12:9f:
                    f1:1b:77:89:dc:81:af:ed:c5:38:87:cc:03:83:9d:
                    76:6c:bb:4c:bf:0f:49:c4:38:9a:72:5e:73:28:6d:
                    22:8e:0b:a5:5d:e4:9e:10:76:64:d0:3c:01:c7:36:
                    c2:c6:3e:5a:89:99:2f:75:75:56:55:b0:00:ee:1e:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:08:F5:F8:B0:D1:67:4A:82:D3:6D:AB:01:45:20:20:2C:AC:9B
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:41:b8:bc:6e:33:47:84:0d:8b:8a:63:94:f8:d7:bc:01:
         b9:78:ae:47:d1:20:ae:1d:fc:e4:fd:2d:0b:3d:3f:ee:46:e6:
         38:c0:df:68:b3:89:c9:87:06:7d:3a:5e:2f:64:20:1d:1a:8f:
         b1:ba:50:55:46:d2:0e:c0:49:d1:59:ee:1a:5f:f8:35:d2:e4:
         fe:2c:00:73:ab:c4:6b:e8:da:98:25:70:65:f7:81:0d:f1:bb:
         12:21:fe:3f:9e:c1:cb:a3:7b:5f:e1:74:03:37:7f:09:70:65:
         20:01:b3:bb:62:da:21:91:df:c5:0f:e3:eb:25:12:27:0c:7a:
         f1:cd:58:52:a7:71:21:7f:5e:b9:a2:87:42:84:ce:1b:03:23:
         21:62:39:66:47:fe:27:c9:da:35:74:b1:79:32:da:1a:b9:7b:
         cf:7a:55:aa:c5:45:2d:50:35:41:29:0a:0d:ff:ea:25:fc:8c:
         83:e8:6f:a7:37:17:fd:9c:e8:cb:67:97:ff:ea:8c:7b:97:89:
         8c:6e:2d:1a:f9:5a:63:7d:50:1a:3b:18:e2:7a:be:40:76:e9:
         5a:f5:ea:f2:60:6d:75:7c:ba:11:d8:f4:cf:52:07:02:ab:5e:
         44:73:e3:c2:52:d4:53:c0:60:77:05:3b:35:62:0d:7c:ad:fd:
         bd:34:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:38 2025 by rpki-client