Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          Rx1fDNCTf3XtmRKKDVR893KGX317LwAOeGzvqGNk+uE=
Subject key identifier:   DD:B8:64:8E:95:CA:4E:B1:35:97:71:42:4D:66:33:79:59:5B:FA:87
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          0208
Signing time:             Sat 23 Aug 2025 02:24:41 +0000
Manifest this update:     Sat 23 Aug 2025 02:24:40 +0000
Manifest next update:     Sat 30 Aug 2025 02:24:40 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: BPUsi0r5vJcpR1JqqYHjL05FzBekUYNrcS+C6vHMG1c=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: +VcgRf6z1VT/qmLUhorkYqe7TBDudTQ2zcHHrZKRu3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: Aug 23 02:24:40 2025 GMT
            Not After : Aug 30 02:24:40 2025 GMT
        Subject: CN=68a92669-f9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:6a:7d:31:8b:c6:39:8b:21:4c:ad:0d:1d:
                    e1:83:f3:ac:50:af:19:ee:ff:16:6e:03:7a:60:ea:
                    e6:81:4d:d1:8f:75:58:19:6f:16:17:8e:f0:56:33:
                    20:77:89:52:0e:1c:9c:76:6f:2f:15:6f:61:2b:c2:
                    67:e0:17:d7:75:41:32:0e:a3:7c:78:76:b6:1a:3c:
                    d7:5e:00:ef:af:8f:b1:d8:0e:1e:88:f0:ee:fc:88:
                    c0:2d:3f:25:39:b5:b6:22:c2:5a:72:cc:ac:47:bb:
                    89:0d:38:6e:6f:cc:45:9e:40:72:5f:54:52:9c:da:
                    5a:6a:c8:98:b9:25:78:d6:95:f4:e6:87:ce:81:35:
                    30:23:e4:52:fb:e0:97:73:2b:aa:37:85:f1:8c:a8:
                    25:81:5c:8e:6f:e8:8e:13:c0:fc:fd:26:d2:2a:41:
                    73:cd:78:4c:9c:19:07:ff:d3:cf:4f:4f:4b:ad:34:
                    55:00:8b:bf:ad:ae:3e:46:63:16:41:22:94:49:fb:
                    f2:b1:ea:d5:12:25:36:5d:f9:95:b8:57:32:ea:7a:
                    ef:e2:26:4c:35:83:22:5d:dd:66:30:9a:95:b9:79:
                    1a:3d:9b:f4:9e:78:b6:85:03:cf:4a:89:95:87:a4:
                    37:98:18:93:d8:93:2d:9a:1b:2e:3b:54:63:00:9e:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B8:64:8E:95:CA:4E:B1:35:97:71:42:4D:66:33:79:59:5B:FA:87
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:43:fd:64:fa:52:1c:e3:b0:ab:20:f8:26:09:77:2f:4d:
         da:c2:e3:92:3f:b7:a1:30:2e:f8:a8:2d:63:e9:07:d5:a1:5a:
         7a:4b:c8:ae:31:ec:f6:d7:7c:78:89:07:fc:15:5f:70:68:48:
         1f:e4:68:88:9c:3b:56:af:bd:98:60:5f:fa:50:3a:86:4e:62:
         8d:53:5a:b2:13:70:5a:32:e9:0e:de:4b:4e:dd:2e:9a:77:23:
         86:5a:4a:63:b5:3b:a2:ed:25:25:cf:db:7f:9b:88:d7:1e:c1:
         d6:b9:94:b4:64:11:15:0d:b7:3e:ca:40:7f:64:bf:bb:48:67:
         1e:99:e8:1e:a4:f9:30:4e:bc:e6:a3:0b:53:2c:40:09:a3:54:
         a6:c6:97:52:61:bf:ab:cf:88:27:71:1e:18:85:c2:d0:02:f2:
         b0:2a:88:e5:c4:22:bd:4e:e8:d6:07:42:c2:69:82:f6:fa:45:
         6a:8b:86:04:6c:8d:41:cc:85:a9:0d:31:49:e3:8e:94:12:e5:
         f9:8e:de:10:b7:10:32:58:e8:90:ab:d7:2c:05:69:5a:fd:16:
         51:1d:ff:3c:df:0e:21:63:58:e4:2f:86:ef:8d:58:3d:73:f3:
         34:20:0b:af:20:46:ea:d3:67:24:82:f3:80:6c:27:da:41:b4:
         c4:44:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:22 2025 by rpki-client