Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
File:                     jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json)
Hash identifier:          G86ujK4Qg9vU43HoYX1qJGYHE5hglwL9I0N1soqMT9Y=
Subject key identifier:   83:F9:A3:19:79:A7:91:D1:89:91:F6:5C:15:CB:84:9C:9E:DC:6D:99
Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6
Certificate issuer:       /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
Manifest number:          84
Signing time:             Sun 19 Oct 2025 09:55:15 +0000
Manifest this update:     Sun 19 Oct 2025 09:55:15 +0000
Manifest next update:     Sun 26 Oct 2025 09:55:14 +0000
Files and hashes:         1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: BpAfStSv8JPExd3rH//ttJWxgKwimb5Bimu9cQanYtU=)
                          2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
        Validity
            Not Before: Oct 19 09:55:15 2025 GMT
            Not After : Oct 26 09:55:14 2025 GMT
        Subject: CN=68f4b583-03cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:f0:42:be:41:92:18:3a:14:55:02:74:d5:
                    7b:e5:6f:38:20:ce:61:7d:61:8f:91:86:2e:02:0e:
                    ad:e3:40:fd:d1:0e:6c:a1:73:8f:51:b2:ed:46:91:
                    17:2b:92:a0:48:5e:5e:a9:49:14:83:21:2b:bd:0c:
                    e1:16:79:a8:be:73:1c:6b:ff:94:71:59:2e:49:c5:
                    0a:43:5c:5c:6d:9f:b9:e4:db:4f:4d:26:9a:2f:48:
                    41:e2:c7:c8:4f:3f:3b:a9:01:cf:fd:9f:70:f5:fa:
                    cf:09:67:67:0f:e9:28:34:83:8f:e3:22:ee:c0:d9:
                    65:2c:e6:94:9b:7e:a7:c3:9a:c8:38:d1:07:c4:bf:
                    10:7d:90:20:02:e7:df:7a:cd:ca:d2:3e:97:35:28:
                    ad:ea:14:18:16:61:d5:b3:3a:85:2d:6f:f8:e3:a7:
                    ba:ba:1e:09:68:f0:88:39:a1:86:29:bb:79:04:21:
                    ff:df:bf:da:4d:f6:3e:bb:65:2c:2c:de:fd:0f:84:
                    40:59:f5:fe:88:3b:26:b0:11:3f:b9:38:ed:b8:9a:
                    80:e3:66:11:c0:f5:27:64:88:1d:a5:ce:78:8a:76:
                    4c:5a:46:f7:e3:64:0f:32:87:6f:54:d0:be:8a:7a:
                    c5:e9:97:a6:76:14:61:ae:4b:4a:50:4b:9b:ad:d8:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:A3:19:79:A7:91:D1:89:91:F6:5C:15:CB:84:9C:9E:DC:6D:99
            X509v3 Authority Key Identifier:
                keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:9a:c7:23:21:7d:a9:07:31:35:73:b7:0d:4d:72:8f:83:
         07:33:bf:e0:8b:c3:49:69:62:33:4d:b6:ff:32:d6:a8:a7:e3:
         af:0b:58:73:b5:76:19:17:79:5a:2b:4c:c9:59:a7:9a:28:90:
         db:d5:5f:d2:76:f7:41:92:f4:a5:7d:97:23:ab:62:63:b7:56:
         f5:bc:6e:6d:2c:7e:06:b3:e0:83:73:3c:b4:1f:25:d2:5f:59:
         ce:96:86:b4:51:f6:f5:58:c1:ad:01:f8:29:95:4f:7f:b0:71:
         3f:d7:5f:de:72:2d:d0:fb:3e:33:30:10:87:a3:13:42:8e:4b:
         ed:6a:a7:d1:96:cc:ec:c7:c2:ce:be:28:2c:12:db:86:65:58:
         e3:7b:8e:78:15:3e:7f:f7:03:8f:f9:6b:2e:4a:71:10:20:87:
         62:d8:18:4c:34:f8:00:8e:c1:55:a9:98:c7:a7:b1:fe:45:73:
         34:40:65:b6:fc:4d:ce:e2:c0:46:e7:7d:61:fe:74:ba:02:15:
         c4:a3:55:6a:3c:f5:83:4a:67:5b:38:78:bd:ab:02:a7:63:f4:
         7c:2b:dd:00:58:f7:03:f5:3a:1e:9a:01:95:ee:92:d9:9c:7c:
         2e:94:72:72:ad:cb:5a:d9:b5:b2:37:60:60:d0:10:f7:4d:b6:
         4a:f3:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:18 2025 by rpki-client