Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File:                     JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier:          0jFy5pIb4w3k3z/ZV+CMZ5TL5D1PCU+PAu2SPUf+Wi4=
Subject key identifier:   20:9A:36:A0:C0:B7:A3:56:12:A2:E1:48:B1:64:9D:BC:0B:D3:6D:89
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer:       /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial:       0C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number:          0C84
Signing time:             Sat 18 Oct 2025 19:13:38 +0000
Manifest this update:     Sat 18 Oct 2025 19:13:37 +0000
Manifest next update:     Sat 25 Oct 2025 19:13:37 +0000
Files and hashes:         1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: o5hiC4fYTdlLVYSjeNnLiN0HmRIISKnoQ4xjnTq2WDs=)
                          2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 9iPRz/py3WiOljnKI7Jr3v4dx6W46Rk8EsivjaERwto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
        Validity
            Not Before: Oct 18 19:13:37 2025 GMT
            Not After : Oct 25 19:13:37 2025 GMT
        Subject: CN=68f3e6e2-53d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:00:0a:24:94:e5:25:aa:01:fc:55:47:0e:
                    32:ca:86:e3:ef:1c:9f:9b:fa:52:48:df:8e:6c:85:
                    08:27:4f:03:44:45:a1:26:75:69:fb:06:bd:d8:19:
                    fb:a1:3d:45:da:da:e2:87:56:27:9b:da:cb:ea:c0:
                    1f:f6:4d:77:fe:c1:a6:e6:44:91:31:60:e0:0a:00:
                    68:d1:1a:c8:3c:ba:6e:89:54:be:30:dd:60:04:ca:
                    67:f0:ee:24:3e:1b:6a:8e:dc:1d:a4:eb:a4:4a:2e:
                    ed:04:d7:9b:6f:56:f2:88:72:fc:f2:72:60:83:33:
                    8c:57:f7:9b:8f:09:28:de:f2:47:cc:f1:6a:4a:4e:
                    59:0b:b5:cb:53:81:46:cd:78:87:a6:af:8b:0d:16:
                    6e:e6:a8:74:80:a2:f9:dc:c5:fc:e4:de:8e:4c:4d:
                    0c:85:f7:a3:5f:89:58:5e:7d:bc:5d:09:82:70:94:
                    5c:f8:23:89:1b:85:26:57:dd:1f:8e:9f:13:49:85:
                    1e:c4:f2:9d:37:05:b9:13:12:85:65:18:be:29:47:
                    84:4b:80:aa:d3:79:b7:ce:10:08:61:a6:32:0f:e4:
                    ee:4c:d9:15:25:3a:2f:41:8f:39:94:1b:32:11:f6:
                    82:ea:60:aa:e9:61:cc:4a:a2:13:28:b8:db:49:5b:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9A:36:A0:C0:B7:A3:56:12:A2:E1:48:B1:64:9D:BC:0B:D3:6D:89
            X509v3 Authority Key Identifier:
                keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:10:27:1a:76:e3:ad:be:bd:79:c2:bb:9c:dd:06:e4:22:7a:
         ee:73:48:b8:21:6e:d5:86:91:18:40:a5:b3:56:fb:a9:38:74:
         b8:01:2e:7b:bc:9d:95:67:2c:16:72:b4:fe:00:51:e9:00:79:
         09:b9:6d:0d:0b:8b:f8:3d:22:6a:02:9c:0a:f6:3c:7b:82:7f:
         bd:d6:95:1e:3f:ae:d0:a4:3d:7e:db:4a:ca:6f:b7:a8:c3:8e:
         ee:bc:52:c3:4c:f0:be:0d:c1:ad:48:ee:44:64:24:76:cb:66:
         ad:a8:90:10:45:df:9a:0e:ee:f8:86:28:96:dc:4d:64:a0:6f:
         b0:27:cb:b1:e9:14:da:7f:96:b9:a9:05:c0:f9:f4:60:be:dd:
         47:9c:cb:28:17:98:48:5e:99:42:c4:33:b6:f4:ad:ed:b0:07:
         ce:48:a7:6d:f0:23:8e:74:37:25:60:b1:b4:0c:85:84:37:a4:
         ea:19:ba:01:2a:eb:f4:85:9f:df:5f:06:b8:d3:bd:49:5c:4e:
         69:0a:4c:a1:62:ea:c7:30:43:b1:33:0e:a0:04:69:06:b5:29:
         73:17:13:46:ca:2f:b2:c9:0f:6d:4c:85:7a:e2:e3:8c:4c:a5:
         5f:84:e9:5c:2f:89:ba:82:89:0f:f7:0a:b8:bc:a8:57:9f:13:
         f4:1b:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:32 2025 by rpki-client