Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File:                     jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier:          kvWW3mjSHs76ie7p6ITEXRlOqxW/ZUCr4o9JtUjzUzw=
Subject key identifier:   13:B8:C0:5A:26:7F:A4:36:BE:C5:87:D0:79:BB:2B:4E:30:BA:74:82
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer:       /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number:          092A
Signing time:             Fri 22 Aug 2025 20:23:15 +0000
Manifest this update:     Fri 22 Aug 2025 20:23:14 +0000
Manifest next update:     Fri 29 Aug 2025 20:23:14 +0000
Files and hashes:         1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: RUqHaFl1nWGbcPi+fco7umkILG8vgjkCR7mbhaw+ysY=)
                          2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: hBbziGq3cc8hGTM4JIZcIJ31hPsOyUFUIPkanCNnaOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
                          rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
        Validity
            Not Before: Aug 22 20:23:14 2025 GMT
            Not After : Aug 29 20:23:14 2025 GMT
        Subject: CN=68a8d1b2-300b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:d8:1a:34:36:22:84:83:7d:f8:7d:30:14:
                    5f:ca:f0:a8:2b:c9:84:27:47:39:c6:72:46:db:cf:
                    8b:09:32:30:45:ba:35:aa:9b:39:52:45:48:2d:6f:
                    f3:11:fa:a1:9e:4c:bb:2d:0c:fa:48:81:4c:21:bd:
                    f8:96:22:fe:b0:ce:f6:df:63:27:c3:9a:37:87:ad:
                    f8:11:5c:a2:0a:b1:50:96:cf:2c:99:00:a7:7b:b9:
                    38:23:7b:43:a8:ca:d8:4c:05:5c:45:7d:6b:d4:07:
                    c1:d9:57:9e:01:10:25:91:37:de:ec:7a:dd:8b:24:
                    0e:cf:7f:29:d9:ff:75:d7:1e:a7:3f:21:de:ed:24:
                    90:b2:f8:d4:3c:d1:e3:ec:c2:db:2d:3b:f5:fa:cf:
                    d4:62:30:f5:3f:ff:82:df:34:91:47:d2:bb:4b:17:
                    72:6b:7e:d2:56:6c:fe:4d:99:25:49:f6:a2:1c:38:
                    e8:10:4b:51:ef:a3:f9:8e:e8:c3:66:6b:a3:d8:0e:
                    21:53:57:1f:af:b0:0a:7e:71:f3:64:f3:df:93:b1:
                    31:7f:76:d3:1a:16:85:6a:d9:cc:cf:89:7e:b5:fd:
                    0e:74:ce:4b:48:ae:e8:c2:5d:e8:e1:40:24:34:24:
                    33:b2:31:84:52:36:cf:76:bb:87:73:78:a8:ff:3c:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:C0:5A:26:7F:A4:36:BE:C5:87:D0:79:BB:2B:4E:30:BA:74:82
            X509v3 Authority Key Identifier:
                keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:58:41:95:58:67:ed:32:0c:25:23:dc:bb:26:9f:18:d3:61:
         6a:d6:52:f7:61:aa:91:24:1d:0c:bd:65:40:dd:e5:25:4d:b7:
         ab:9b:9e:a0:17:cb:53:d7:1c:8b:1a:2f:a3:5f:d8:0c:03:ce:
         5e:cc:31:cb:17:ab:67:0e:96:b0:0a:3c:b8:d4:cb:26:47:b6:
         34:52:69:e1:75:61:fe:c3:4d:de:80:0e:6f:a4:9e:2b:b4:39:
         59:06:af:c6:d3:36:44:61:2a:a8:96:d7:a6:3b:c1:5f:ac:90:
         51:b3:0f:ef:75:cd:c6:e9:ce:41:68:fa:eb:88:37:22:bb:cc:
         72:86:17:59:00:cb:58:bb:ac:68:5e:05:16:cf:cf:fc:9e:29:
         c7:45:99:72:07:f7:e6:e0:67:a4:77:ae:ca:f6:c6:40:2b:82:
         bc:eb:6d:40:a5:b2:95:65:0e:9f:7c:39:8b:b3:0f:7c:57:98:
         88:5f:9c:df:4b:43:2f:a2:43:23:74:55:dd:29:62:69:a8:f6:
         ba:f2:67:5a:ea:28:0a:13:d0:6b:ec:dc:96:ea:0e:01:57:f8:
         5a:7a:f7:6b:9f:4c:90:bc:36:18:11:d4:79:9b:03:87:52:d8:
         7a:6b:4d:1e:f4:38:79:fb:70:4d:14:7a:d4:86:b9:84:c5:c4:
         bb:44:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:54 2025 by rpki-client