Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File:                     jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier:          Rd7+3VeUdd2iEYWMH6rWL10TD1E3xzI2K4z25yqq91c=
Subject key identifier:   A6:84:15:D8:23:0F:0D:1C:CE:1E:C3:64:A0:B7:91:C4:78:2B:36:7B
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer:       /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number:          A5
Signing time:             Sun 19 Oct 2025 09:26:28 +0000
Manifest this update:     Sun 19 Oct 2025 09:26:27 +0000
Manifest next update:     Sun 26 Oct 2025 09:26:27 +0000
Files and hashes:         1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: Ovl5HquYh0VVKbM7a218L9zy/aWhHMXshe8BwIwfuQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
        Validity
            Not Before: Oct 19 09:26:27 2025 GMT
            Not After : Oct 26 09:26:27 2025 GMT
        Subject: CN=68f4aec4-df5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:f1:82:3a:81:c9:48:bb:4c:63:58:c2:5b:
                    e7:7d:00:57:2a:4c:17:86:08:38:c7:78:97:69:eb:
                    7f:0a:28:01:ee:27:aa:e9:2d:2a:33:07:1a:76:50:
                    f5:f3:ed:3c:42:59:1a:2e:08:a7:6e:e8:bc:96:f7:
                    c8:69:8a:71:db:1d:73:b0:45:da:67:12:99:af:60:
                    22:b7:dd:5a:aa:35:c0:41:89:f7:6a:ad:de:08:6e:
                    9d:5e:02:fb:f3:36:33:bf:45:b4:27:52:31:19:3e:
                    d1:01:d7:9f:06:4c:01:38:aa:8c:78:01:b3:1e:ec:
                    aa:6d:67:27:4c:38:8f:ec:15:5c:9b:cc:cc:ef:f8:
                    e9:55:44:0f:80:d9:21:ad:98:d0:0e:fc:d2:c9:d2:
                    da:28:63:80:81:f3:c1:fb:96:92:01:4a:ee:0d:1d:
                    f9:e9:ad:fa:3c:b8:1b:ff:63:0f:8d:1e:f4:9c:4f:
                    47:08:b3:c9:de:2f:4d:39:93:1c:da:6c:39:50:cd:
                    62:3a:15:cc:0a:0f:fa:de:e0:ec:a8:ff:45:68:89:
                    76:d3:dd:df:ed:59:03:f4:db:ca:92:d0:c5:85:69:
                    81:a6:d9:0d:d0:2e:5b:b2:5b:13:d5:79:e8:f0:08:
                    c5:72:d7:d7:90:f4:81:42:c7:76:ec:ca:8e:2f:64:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:84:15:D8:23:0F:0D:1C:CE:1E:C3:64:A0:B7:91:C4:78:2B:36:7B
            X509v3 Authority Key Identifier:
                keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:95:5f:5b:d5:c4:72:15:44:f1:bb:2a:a5:cd:20:af:70:b8:
         f4:2b:9b:9b:5e:0d:4e:c5:ee:24:84:a3:f8:10:c6:78:12:e3:
         0a:17:d6:07:6e:10:f5:3e:89:9d:ec:cb:44:16:88:f6:c1:db:
         a7:ed:7c:b7:df:4b:c7:8b:d0:d3:d3:0c:a1:99:15:7f:8a:b0:
         f1:dd:62:a8:5c:25:9d:12:c2:22:b4:9b:ae:86:b2:3c:1b:f2:
         2f:c6:4c:48:d6:c1:44:33:95:48:06:6f:34:cb:7b:2a:e1:a8:
         8d:f0:e9:ef:57:f9:c8:6d:5d:69:6c:95:cd:9c:dd:13:f7:e6:
         b3:a0:1b:8f:c1:cb:28:b5:21:fa:00:0f:e6:d6:77:54:73:e3:
         ff:93:73:20:95:9a:20:49:7a:fb:7a:b7:51:1c:3e:b9:a6:f9:
         ea:80:30:06:80:fb:0f:15:da:f4:0d:de:c5:3f:1e:a5:77:68:
         28:5d:56:66:bd:e5:ae:16:dc:03:a5:ec:cf:93:4e:90:21:dc:
         13:99:c1:ce:ea:7c:b8:8a:83:a9:33:09:cc:ef:f7:e3:08:e5:
         b9:f2:f4:fd:ba:31:86:6b:2c:28:23:ed:5e:75:f3:a6:4b:57:
         a6:14:27:ec:ae:a8:ae:2d:a3:18:26:e2:2b:69:a0:94:18:11:
         c0:3f:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:14 2025 by rpki-client