Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File:                     JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier:          3MyNEMEod33/b9hrL9rBTjEGiacOiTBCaxGNWnOhj4I=
Subject key identifier:   08:C3:7D:A2:95:6C:0C:FC:D2:D6:1D:AA:38:30:14:5D:53:F5:7C:04
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       0990
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number:          097B
Signing time:             Fri 22 Aug 2025 20:15:58 +0000
Manifest this update:     Fri 22 Aug 2025 20:15:58 +0000
Manifest next update:     Fri 29 Aug 2025 20:15:58 +0000
Files and hashes:         1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: zUMFw3l59vpBb3FeP/7aRNCHfNYnTRx+99dWjngfvaE=)
                          2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=)
                          3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=)
                          4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Aug 22 20:15:58 2025 GMT
            Not After : Aug 29 20:15:58 2025 GMT
        Subject: CN=68a8cffe-52e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:e3:21:16:6a:f4:e9:89:46:4e:6f:09:83:
                    d6:0f:b6:4c:b6:14:63:fd:38:e9:f6:a3:81:14:7f:
                    23:36:c8:fe:e9:93:b3:c4:da:a5:20:44:fe:65:f5:
                    df:3e:77:98:bc:c5:26:25:48:68:73:53:8b:6c:69:
                    16:40:34:6e:0e:9d:6e:6f:88:d9:29:e3:1a:d4:89:
                    58:c5:1e:eb:1b:3a:2e:b5:09:39:5f:f7:2a:47:a8:
                    ff:9a:64:b7:ae:c9:04:f6:96:7c:73:7f:04:b9:f1:
                    43:1f:ff:8e:96:e7:15:f1:66:ea:c9:f2:f4:b8:34:
                    4c:ac:5d:56:d4:3d:25:c1:26:69:04:23:4d:68:4c:
                    3e:eb:38:6b:81:f5:d6:10:17:0e:31:9b:f8:14:98:
                    18:15:67:2e:be:58:6d:96:2a:e0:3a:f0:48:12:d3:
                    46:b7:2a:ef:2b:21:f8:69:17:df:0c:32:d4:1a:5d:
                    7e:10:58:88:33:6c:2d:0a:85:4c:c3:83:ca:d0:5c:
                    28:c7:30:2d:fc:77:bd:dc:57:e4:27:67:02:89:44:
                    13:eb:08:49:90:28:ed:cb:80:49:ba:4c:25:fe:95:
                    73:96:bf:92:8f:e4:e8:91:34:65:51:0f:a5:49:ce:
                    62:25:a0:f0:03:c3:7f:27:f4:e3:ad:e0:6c:3a:bc:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C3:7D:A2:95:6C:0C:FC:D2:D6:1D:AA:38:30:14:5D:53:F5:7C:04
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bf:f3:fe:4a:f2:6a:a3:09:7e:b5:29:7c:08:4b:f4:38:32:
         d1:0a:dc:cf:75:f4:54:3a:96:74:dd:6a:9e:96:e6:e5:a8:64:
         12:64:8b:41:ad:b6:2f:9f:a3:8f:52:68:94:96:eb:3b:62:49:
         89:23:d8:b4:6f:66:b0:60:14:b4:86:50:64:0c:7c:fb:90:de:
         b8:4d:03:30:07:de:6e:09:8a:33:58:b6:2f:f4:07:03:3d:91:
         c3:57:0d:33:35:0f:89:15:bc:e6:d8:7d:72:73:86:80:a6:73:
         77:c2:dd:a8:ef:93:01:f8:9a:68:22:8d:7b:2c:57:35:70:28:
         16:67:3d:66:70:73:2b:2a:89:f6:8f:99:d5:29:12:fa:ee:d4:
         d7:91:cb:f9:2c:9a:6e:20:81:62:b1:46:ca:d3:87:29:83:cb:
         c5:4c:51:af:fb:c2:04:28:2f:65:12:eb:94:81:d2:9f:30:e4:
         8e:18:3f:9a:53:e9:cc:c9:cb:03:be:33:ce:5f:be:6e:13:df:
         9a:2a:32:c3:62:dc:75:e3:1b:43:ed:4f:d1:7e:2c:1f:0f:c1:
         df:3f:f0:59:49:d8:ca:f3:95:cf:6f:08:94:a8:7d:7e:d3:fd:
         42:81:6b:94:4c:b4:5e:91:c8:0a:7e:75:a9:55:14:e7:95:70:
         2a:73:e2:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjUwODIyMjAxNTU4WhcNMjUwODI5MjAxNTU4WjAYMRYwFAYD
VQQDEw02OGE4Y2ZmZS01MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFvjIRZq9OmJRk5vCYPWD7ZMthRj/Tjp9qOBFH8jNsj+6ZOzxNqlIET+ZfXf
PneYvMUmJUhoc1OLbGkWQDRuDp1ub4jZKeMa1IlYxR7rGzoutQk5X/cqR6j/mmS3
rskE9pZ8c38EufFDH/+OlucV8WbqyfL0uDRMrF1W1D0lwSZpBCNNaEw+6zhrgfXW
EBcOMZv4FJgYFWcuvlhtlirgOvBIEtNGtyrvKyH4aRffDDLUGl1+EFiIM2wtCoVM
w4PK0FwoxzAt/He93FfkJ2cCiUQT6whJkCjty4BJukwl/pVzlr+Sj+TokTRlUQ+l
Sc5iJaDwA8N/J/TjreBsOrzhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjDfaKV
bAz80tYdqjgwFF1T9XwEMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX
V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnv/P+SvJqowl+tSl8CEv0ODLRCtzPdfRUOpZ03WqelublqGQSZItB
rbYvn6OPUmiUlus7YkmJI9i0b2awYBS0hlBkDHz7kN64TQMwB95uCYozWLYv9AcD
PZHDVw0zNQ+JFbzm2H1yc4aApnN3wt2o75MB+JpoIo17LFc1cCgWZz1mcHMrKon2
j5nVKRL67tTXkcv5LJpuIIFisUbK04cpg8vFTFGv+8IEKC9lEuuUgdKfMOSOGD+a
U+nMycsDvjPOX75uE9+aKjLDYtx14xtD7U/RfiwfD8HfP/BZSdjK85XPbwiUqH1+
0/1CgWuUTLRekcgKfnWpVRTnlXAqc+L+
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:46:19 2025 by rpki-client