Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File:                     JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier:          VrcKRv/lxkRqdXCUpo74yhKUZpDb3pX5jZXHGY9L91Y=
Subject key identifier:   24:6A:9A:05:5B:7A:1D:85:D8:2C:72:FF:26:FA:51:C1:EC:84:AB:A8
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0E34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number:          0E0C
Signing time:             Mon 20 Oct 2025 17:50:09 +0000
Manifest this update:     Mon 20 Oct 2025 17:50:09 +0000
Manifest next update:     Mon 27 Oct 2025 17:50:09 +0000
Files and hashes:         1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: QkoRZXmfC/Ic9VOmKov8eh/RtnSbJeV98tO+H18+RG0=)
                          2: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=)
                          3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=)
                          4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=)
                          5: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3636 (0xe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Oct 20 17:50:09 2025 GMT
            Not After : Oct 27 17:50:09 2025 GMT
        Subject: CN=68f67651-a6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:b9:14:b0:59:ab:8f:d6:2e:84:04:71:d4:
                    b3:c9:48:9a:da:af:a1:20:2f:0f:49:05:e0:89:72:
                    4d:49:c6:16:a5:78:e1:12:0e:00:15:3f:79:53:03:
                    b2:5f:df:4e:e2:77:50:3a:74:a8:f4:01:a0:e5:53:
                    df:78:f2:fe:2c:72:9e:37:b0:56:77:3b:fb:d9:07:
                    be:d8:8e:77:5d:2f:16:69:c8:37:cb:18:15:90:28:
                    83:fc:ce:01:ba:20:0a:f8:88:71:48:40:c4:92:25:
                    c9:70:a0:f7:ee:39:b0:06:0c:59:36:c5:39:c5:99:
                    89:09:bf:c8:a2:75:b8:fa:d3:82:25:13:67:10:75:
                    02:a6:ce:b4:14:1d:20:94:cc:ea:95:55:b9:78:56:
                    0b:34:fe:49:39:0f:46:71:05:2c:6c:2e:60:f7:39:
                    e6:36:76:7d:41:d3:e6:e9:eb:37:e5:90:78:d8:7c:
                    59:c0:27:20:7e:8d:db:f3:9f:6d:63:a0:c0:b1:e7:
                    f1:a9:62:e2:b3:b7:7b:2b:28:06:79:0e:4a:0d:8e:
                    bb:c9:b0:bf:9d:79:18:1f:a2:ac:f2:f2:a7:7d:2a:
                    27:e3:4b:12:85:3b:d9:5b:a2:30:5b:62:d8:74:f3:
                    1c:b1:98:51:52:ea:48:1f:53:7c:9a:16:7f:3c:6e:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6A:9A:05:5B:7A:1D:85:D8:2C:72:FF:26:FA:51:C1:EC:84:AB:A8
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:99:e0:a0:8a:1b:42:4e:76:42:6c:ab:03:3d:3c:bb:72:92:
         ad:ab:24:ee:81:97:22:9a:e5:9f:4e:f9:2c:71:d8:d8:9d:2b:
         15:4d:03:12:a9:4e:27:18:9f:8c:a1:99:c9:50:9f:e6:ae:a2:
         fe:4e:28:55:09:4f:9f:ff:47:fd:da:1a:9e:6c:be:98:7f:b8:
         22:58:55:50:0d:7b:b7:f8:22:4a:06:86:72:3e:98:ea:63:5b:
         df:48:5f:88:e2:00:b5:0e:0c:97:fc:f9:4d:d4:cc:28:06:18:
         99:2c:bf:c7:5e:65:4a:39:b0:90:8f:91:54:90:ff:7e:86:1f:
         da:77:80:83:79:db:57:02:b3:c2:83:62:04:cb:b9:ed:91:a6:
         98:25:70:b8:8e:04:2a:13:5a:56:e2:ca:1c:c6:d1:69:a9:f0:
         71:87:e4:55:6e:00:5a:ce:e9:39:11:80:b0:5c:1a:f3:6e:ef:
         73:58:c8:aa:c3:35:61:58:b1:fd:b9:79:75:60:de:b2:9b:82:
         89:c8:d8:5a:24:1c:9e:55:33:6c:5d:a2:09:64:85:10:c4:71:
         55:12:bb:34:ca:2a:87:3e:08:a3:33:ab:5e:96:1d:42:e7:aa:
         f2:87:5f:b7:31:c8:9f:67:3c:09:c3:be:f9:98:e8:6a:03:98:
         4f:cf:44:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE
NDBEQjA1QUUwHhcNMjUxMDIwMTc1MDA5WhcNMjUxMDI3MTc1MDA5WjAYMRYwFAYD
VQQDEw02OGY2NzY1MS1hNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DO5FLBZq4/WLoQEcdSzyUia2q+hIC8PSQXgiXJNScYWpXjhEg4AFT95UwOy
X99O4ndQOnSo9AGg5VPfePL+LHKeN7BWdzv72Qe+2I53XS8Wacg3yxgVkCiD/M4B
uiAK+IhxSEDEkiXJcKD37jmwBgxZNsU5xZmJCb/IonW4+tOCJRNnEHUCps60FB0g
lMzqlVW5eFYLNP5JOQ9GcQUsbC5g9znmNnZ9QdPm6es35ZB42HxZwCcgfo3b859t
Y6DAsefxqWLis7d7KygGeQ5KDY67ybC/nXkYH6Ks8vKnfSon40sShTvZW6IwW2LY
dPMcsZhRUupIH1N8mhZ/PG6xywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRqmgVb
eh2F2Cxy/yb6UcHshKuoMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx
QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS
R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4meCgihtCTnZCbKsDPTy7cpKtqyTugZcimuWfTvkscdjYnSsVTQMS
qU4nGJ+MoZnJUJ/mrqL+TihVCU+f/0f92hqebL6Yf7giWFVQDXu3+CJKBoZyPpjq
Y1vfSF+I4gC1DgyX/PlN1MwoBhiZLL/HXmVKObCQj5FUkP9+hh/ad4CDedtXArPC
g2IEy7ntkaaYJXC4jgQqE1pW4socxtFpqfBxh+RVbgBazuk5EYCwXBrzbu9zWMiq
wzVhWLH9uXl1YN6ym4KJyNhaJByeVTNsXaIJZIUQxHFVErs0yiqHPgijM6telh1C
56ryh1+3McifZzwJw775mOhqA5hPz0SB
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:38 2025 by rpki-client