Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File:                     JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier:          alia0XNUYQHt0lb1eXto3sQwwh4e/ju64hwKli+5p/g=
Subject key identifier:   40:17:36:1C:7E:58:73:AF:77:90:8B:DB:54:71:BF:97:B2:D5:F4:F6
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0E16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number:          0DEE
Signing time:             Fri 22 Aug 2025 17:31:00 +0000
Manifest this update:     Fri 22 Aug 2025 17:30:59 +0000
Manifest next update:     Fri 29 Aug 2025 17:30:59 +0000
Files and hashes:         1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: 5LSFX9JW4UFxF3q94GecbGPHwHLlDA0D3wbxIURz6rQ=)
                          2: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=)
                          3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=)
                          4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=)
                          5: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3606 (0xe16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Aug 22 17:30:59 2025 GMT
            Not After : Aug 29 17:30:59 2025 GMT
        Subject: CN=68a8a953-9462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:57:02:be:bc:e2:41:cf:27:61:5b:14:26:
                    c8:fa:8e:dd:6a:19:5e:4a:17:ad:50:05:ca:7a:df:
                    24:26:96:bd:38:e9:5c:a5:f7:a3:64:6e:e1:20:ad:
                    d1:96:4d:a9:0d:d2:97:89:65:3a:30:ac:34:2d:ee:
                    29:b8:7a:cf:43:55:5e:c4:54:3f:2d:00:85:ab:79:
                    fb:99:8b:cf:b0:8f:59:bf:2d:78:a5:e7:84:c3:f2:
                    54:93:9f:c5:10:26:95:17:41:a4:0e:b0:05:57:61:
                    84:09:68:05:ce:8f:d8:fe:84:3b:c2:48:20:8d:20:
                    eb:a8:9b:81:3e:73:f1:c2:bd:0f:d6:33:f6:0b:7d:
                    c4:a9:95:28:32:45:d9:9c:05:97:87:ac:ee:32:c3:
                    1b:c3:73:83:42:30:d2:5f:92:00:f3:98:aa:50:29:
                    1e:52:0d:2f:7f:4a:09:e8:a8:cc:b7:5a:85:a2:db:
                    6e:45:4e:d2:3d:5b:33:91:70:fc:af:1a:a0:12:c0:
                    95:e9:2b:76:16:20:67:8c:c4:db:a8:49:77:ae:6d:
                    54:39:b8:d0:42:f9:96:65:93:87:62:83:31:69:e5:
                    d5:9e:f3:05:9b:38:63:8b:27:a4:2c:5e:94:8d:ee:
                    a3:7e:9d:e4:95:b1:ca:a2:9b:ba:df:78:64:cd:ab:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:36:1C:7E:58:73:AF:77:90:8B:DB:54:71:BF:97:B2:D5:F4:F6
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d1:be:58:43:48:1d:9c:46:4f:b5:0b:a3:c4:3a:a5:57:03:
         01:a1:18:e8:f3:4d:a6:7c:42:b2:e3:2d:cb:4d:f9:83:87:02:
         25:cb:36:7c:e6:a5:fe:54:5a:e7:a7:05:13:6f:da:fc:32:7d:
         e7:d2:ad:5c:10:59:ae:28:c4:b1:b3:61:2f:24:c8:fb:9e:d3:
         41:04:de:83:59:ca:7d:86:8d:3d:bd:61:04:de:0d:d6:eb:a5:
         90:79:fa:27:12:28:d3:53:ae:c9:e0:cb:33:77:1f:3f:a5:77:
         fb:65:9e:0d:08:df:b0:73:13:fc:65:18:99:39:fb:03:0f:43:
         a7:d0:35:be:21:ad:e5:48:09:95:d2:c9:14:a9:5d:a3:40:4f:
         6f:a9:4c:be:e3:e5:fe:9f:f6:0d:75:4a:ce:e9:82:78:2a:88:
         56:ac:19:8d:53:3d:4e:49:49:84:59:76:b2:9a:6a:3a:dd:68:
         f6:20:71:89:f2:7c:da:b2:98:aa:18:5f:84:cb:a6:30:0d:fe:
         82:22:9f:46:48:9d:25:ad:27:ed:e2:47:4a:32:e7:09:e8:5f:
         67:0b:d5:af:68:c6:b0:ba:fe:45:58:0d:1a:49:db:3b:bc:e5:
         d5:81:de:95:ff:8c:ed:e5:d6:05:48:f8:07:b6:c1:68:29:3c:
         22:5d:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:14 2025 by rpki-client