Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File:                     JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier:          AgnKGeWSMqEXI7UF33dBWkORpQZ0x7nQsV78lrDXxBw=
Subject key identifier:   6E:5C:19:19:41:B5:A2:43:AC:D3:C6:CD:7E:DB:50:95:48:1E:E7:FC
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer:       /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number:          06D5
Signing time:             Sat 18 Oct 2025 23:33:51 +0000
Manifest this update:     Sat 18 Oct 2025 23:33:50 +0000
Manifest next update:     Sat 25 Oct 2025 23:33:50 +0000
Files and hashes:         1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: X/uFRPhbmvb3xNoXHDIRqFUeKCf064VEI5GD9Bd3U+I=)
                          2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: +e3HUlovKDRpOXqB7/PZlzff1isIhCZMYZe5Pc4VAfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
                          rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
        Validity
            Not Before: Oct 18 23:33:50 2025 GMT
            Not After : Oct 25 23:33:50 2025 GMT
        Subject: CN=68f423de-6a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:98:0f:06:41:fd:17:b0:00:b7:97:8b:8b:
                    89:ce:16:f5:2c:57:2e:0b:40:59:24:60:0a:22:b4:
                    84:71:bc:de:13:4f:f9:6d:b4:62:95:d7:bf:db:ad:
                    da:22:ea:5c:d4:56:97:88:2b:9a:b8:83:1e:df:c8:
                    4b:77:98:9e:d3:33:5c:e8:e0:28:48:f3:a1:c1:eb:
                    2d:ce:83:0a:df:58:6d:3a:8d:5f:e0:6e:81:8d:b1:
                    5e:60:7a:6f:53:6d:be:83:f3:2a:bc:54:ec:2d:31:
                    f8:1f:d9:1e:d8:d0:ad:d0:8a:77:4d:b6:f5:ef:95:
                    99:43:0b:9c:c6:df:6a:ec:bd:1d:f1:eb:de:e1:39:
                    f2:34:51:98:0a:ce:81:92:b6:82:81:62:7d:6e:0c:
                    83:a9:63:10:13:66:ad:69:c2:9a:4a:48:10:6e:db:
                    5c:6a:37:02:59:53:c9:d5:4d:87:cb:a8:75:71:37:
                    4c:6e:be:14:03:0d:76:93:f4:4d:bf:2f:d5:ae:4c:
                    d4:23:a7:4c:6c:e3:c9:15:89:87:86:25:0f:01:4d:
                    1e:24:11:bc:96:43:8b:d7:52:0b:07:67:66:c9:3b:
                    b4:30:63:0a:a9:01:a9:70:39:d4:42:2c:93:4f:0c:
                    ea:1a:fb:d3:b6:29:e6:a5:7c:c8:6b:74:50:3e:5b:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:19:19:41:B5:A2:43:AC:D3:C6:CD:7E:DB:50:95:48:1E:E7:FC
            X509v3 Authority Key Identifier:
                keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:35:7e:cd:1e:e2:b9:7f:81:00:55:b3:8d:10:1d:be:8d:
         4f:45:9d:81:df:7c:b9:71:cc:2e:50:0e:bd:f6:44:23:cf:8e:
         0a:b4:5d:63:8f:9c:fe:d1:58:b1:a8:c8:32:e8:60:4b:26:f6:
         17:3b:ac:35:fe:3b:fc:4a:37:14:f9:cd:14:08:d9:51:6c:6a:
         2e:18:28:89:e8:10:52:7c:f1:0a:9c:65:59:eb:00:96:af:7e:
         88:28:d9:89:4c:b1:d1:54:6a:80:7d:94:b9:18:76:90:d6:20:
         51:54:50:dd:7a:b4:ea:d9:1f:4f:2b:16:fc:f5:a2:8a:a8:53:
         d9:82:9c:6b:4c:cc:c2:a7:f6:82:dc:f5:75:33:28:32:f7:e8:
         19:18:37:ca:3d:90:ff:c6:0b:6f:10:ee:db:9f:64:cf:0a:cf:
         57:58:27:d1:aa:99:0e:cd:39:0a:ee:18:77:92:7f:20:ef:e9:
         ff:ca:88:35:be:c2:55:9b:7e:67:ba:9b:e3:94:77:4d:09:70:
         d0:c4:2d:26:30:bc:50:b3:9e:01:45:1e:4a:d5:33:43:ad:43:
         87:22:28:f2:34:c3:ae:2b:15:44:f8:cd:87:e3:53:65:70:b6:
         a9:1f:e3:48:0d:ae:ec:d2:24:36:2c:77:3c:c6:91:55:2d:f8:
         2b:53:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:30 2025 by rpki-client