Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File:                     Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier:          RHNW5YEXawrZoVYYE6wCa6O2NBHIjkpLxTnIe63Zodw=
Subject key identifier:   99:2A:5F:36:7F:82:2B:E5:9B:C9:98:F1:79:FC:FF:A5:DB:46:E9:1A
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       0510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number:          0508
Signing time:             Sun 19 Oct 2025 01:23:29 +0000
Manifest this update:     Sun 19 Oct 2025 01:23:28 +0000
Manifest next update:     Sun 26 Oct 2025 01:23:28 +0000
Files and hashes:         1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: WwCmPmiv9en86wvMDYx1rewSIlSEW0XJenFWyTP/hH0=)
                          2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=)
                          3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Oct 19 01:23:28 2025 GMT
            Not After : Oct 26 01:23:28 2025 GMT
        Subject: CN=68f43d91-eb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:76:1b:b9:91:13:d8:2a:47:3a:98:5e:91:
                    53:7e:b0:5a:e8:c9:74:60:c6:0e:36:1a:f0:c5:27:
                    61:c8:f4:2d:af:01:47:c0:dd:81:cd:8a:b0:0f:a3:
                    51:ad:1e:5d:f9:42:55:8b:10:c6:5a:e1:8a:64:99:
                    bc:76:70:fc:82:c6:a4:87:27:fe:f0:66:9d:4e:90:
                    ba:83:58:0f:2a:cf:38:d6:18:dd:c8:43:06:94:dc:
                    0b:a5:89:7b:6f:ee:87:99:7e:44:30:89:85:73:d3:
                    68:77:62:07:58:e1:6c:aa:a7:43:ba:3d:d3:fe:c3:
                    c4:46:41:9e:24:f8:b3:84:17:b8:36:ce:cd:3c:86:
                    42:d4:48:cb:e0:0a:71:1b:06:81:9d:f3:f2:2b:a2:
                    ea:57:5a:66:7d:57:d9:f9:bb:22:57:f5:8b:40:4e:
                    fd:ba:ac:05:8f:4a:c6:92:64:31:3a:a5:17:66:53:
                    33:91:88:63:b3:77:1d:f2:be:56:a5:eb:b7:72:96:
                    cf:37:b8:2d:c4:63:e6:39:59:40:53:84:95:c4:5c:
                    24:59:c6:53:c6:86:9c:c7:b3:b1:d6:57:6c:54:f5:
                    80:32:19:77:63:68:9a:68:52:d7:d3:3f:f9:34:3a:
                    c3:82:e0:d1:98:cc:b7:a2:99:ce:e8:fa:79:0d:18:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:5F:36:7F:82:2B:E5:9B:C9:98:F1:79:FC:FF:A5:DB:46:E9:1A
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9f:5b:4f:d3:df:41:aa:18:0a:4b:3b:dc:f8:22:16:94:d4:
         fe:b8:0c:01:4b:a3:22:eb:4b:7e:93:d8:3c:27:60:a9:d1:7e:
         77:db:26:67:ea:69:40:e3:93:dd:ee:ec:ac:f5:04:67:1f:b8:
         75:e3:c4:34:15:2a:93:ea:2a:20:c3:fd:12:57:16:ef:b5:51:
         75:2a:05:18:74:63:67:3c:31:65:4a:92:3b:1c:16:70:28:ba:
         82:67:4c:39:53:0f:ea:6c:8e:32:34:96:f5:f5:d4:e9:d1:cf:
         77:9f:76:ba:3a:1e:df:bc:69:84:e6:75:20:4d:18:ad:46:b8:
         0b:86:99:3e:ed:47:66:4d:a2:42:e7:e9:25:d3:7c:fa:a4:cd:
         46:80:fe:78:ac:f9:e5:5c:11:38:51:0d:45:bd:f4:46:2c:9b:
         05:97:fc:db:87:59:9e:db:59:80:09:5e:ee:6b:fb:05:40:b5:
         a5:5a:ed:78:7e:77:3b:a8:ec:d3:01:7e:97:93:7f:b4:7c:53:
         03:38:b1:26:27:4d:04:4b:6d:ac:ab:08:e2:a5:57:8e:d9:26:
         4c:d2:cf:8a:08:c6:e5:f3:3a:c6:c0:77:ae:37:8a:02:cc:b1:
         2a:27:7d:29:09:cd:1e:89:55:75:57:e9:41:9d:15:74:e5:8f:
         05:ad:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:34:03 2025 by rpki-client