Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          iUcLRwHoripner6kk7pO6KQiAQp5hGJcoxmmA5mXVN0=
Subject key identifier:   CC:0C:D2:5C:AA:17:0C:AF:2D:9A:8D:0A:3A:8A:64:17:64:F6:B5:E2
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2F67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2F54
Signing time:             Sat 18 Oct 2025 15:39:45 +0000
Manifest this update:     Sat 18 Oct 2025 15:39:45 +0000
Manifest next update:     Sat 25 Oct 2025 15:39:45 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: G/jw51jx8h9FOu4mIFYW8NLsAU1z1o8H+jJpNQKpei8=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12135 (0x2f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Oct 18 15:39:45 2025 GMT
            Not After : Oct 25 15:39:45 2025 GMT
        Subject: CN=68f3b4c1-20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:98:6b:32:12:a2:08:29:19:f9:3d:0b:f8:
                    4c:94:1c:c8:ec:02:30:1d:82:0f:f9:88:c2:e9:41:
                    ea:72:ff:df:e1:9a:79:eb:39:d6:81:9a:79:80:67:
                    c6:8f:96:dc:72:7b:0b:55:6d:bb:f7:5a:8e:6f:cc:
                    e2:87:c9:61:d2:4f:63:0a:2f:fb:37:b5:90:09:df:
                    91:e4:c8:ba:f2:0c:38:2f:54:7c:f3:70:af:66:ed:
                    87:cd:87:99:62:6c:a3:60:98:b7:e0:43:e4:25:28:
                    e9:cb:24:15:06:47:1e:3b:e8:a1:a6:58:cd:e8:b2:
                    c6:8c:8f:d4:17:97:00:c2:f8:2c:2b:ca:55:ab:26:
                    6e:4f:10:1c:1e:a7:d7:68:41:21:b5:6b:86:72:19:
                    78:43:5b:38:d2:fc:4d:c8:ad:67:36:c0:88:6b:3a:
                    b9:6f:2b:87:91:b7:b4:ca:0e:53:06:ed:78:90:ae:
                    1b:93:01:e2:9a:40:01:9a:a2:c8:e9:56:22:a9:8a:
                    72:ab:f5:23:3c:3d:ac:04:8a:fe:48:73:67:03:88:
                    f4:72:a2:df:50:33:85:15:9b:4b:71:2a:0e:80:ac:
                    00:ae:ac:f8:6b:96:a7:af:cf:11:31:09:77:05:2e:
                    b3:00:ce:e6:2b:c0:c0:b8:ae:3e:20:bb:1b:30:cf:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:D2:5C:AA:17:0C:AF:2D:9A:8D:0A:3A:8A:64:17:64:F6:B5:E2
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:82:fb:18:21:85:cb:04:1c:73:2d:0e:a0:fd:a4:10:ac:
         a2:28:a5:35:7b:08:1a:8a:43:ee:f8:7f:37:5c:5d:b1:e1:ac:
         04:20:a2:38:03:4c:09:d1:b5:cb:ea:aa:01:d0:e9:85:04:e7:
         05:a1:93:69:71:c7:9a:9d:6e:c4:4f:d2:f5:6f:70:88:80:29:
         75:b6:17:3a:8d:53:aa:88:7e:ec:d2:c2:0f:3a:ed:e1:44:16:
         7f:e9:48:fd:47:23:b6:c7:f5:b8:64:f7:ad:e6:51:35:ac:2c:
         bb:94:e5:a2:1c:51:2a:5c:2e:25:0e:d3:13:54:d8:5d:6d:91:
         09:fa:77:32:3d:06:24:6b:7e:7e:21:f6:1d:6d:74:90:62:d7:
         5f:41:9f:8c:57:6f:9f:fd:be:a3:aa:dd:b8:37:e9:91:1c:cb:
         87:b5:14:37:37:0e:5c:26:75:0c:9a:02:27:8e:22:44:41:d6:
         e2:b0:d1:d4:20:5a:15:dd:19:ca:e7:b4:75:51:b4:a2:0d:28:
         1a:45:28:c3:f8:36:b7:ae:3a:42:2c:73:94:db:f9:b4:7b:17:
         77:b6:cb:5c:a3:37:34:ed:8a:e9:2d:83:25:f7:b9:82:9c:2a:
         f7:57:21:5e:9d:ae:6a:54:2b:cb:3b:b4:b2:b4:80:9c:d4:6b:
         ea:79:cd:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICL2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC
MjBGNjIzRTkwHhcNMjUxMDE4MTUzOTQ1WhcNMjUxMDI1MTUzOTQ1WjAYMRYwFAYD
VQQDEw02OGYzYjRjMS0yMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0paYazISoggpGfk9C/hMlBzI7AIwHYIP+YjC6UHqcv/f4Zp56znWgZp5gGfG
j5bccnsLVW2791qOb8zih8lh0k9jCi/7N7WQCd+R5Mi68gw4L1R883CvZu2HzYeZ
YmyjYJi34EPkJSjpyyQVBkceO+ihpljN6LLGjI/UF5cAwvgsK8pVqyZuTxAcHqfX
aEEhtWuGchl4Q1s40vxNyK1nNsCIazq5byuHkbe0yg5TBu14kK4bkwHimkABmqLI
6VYiqYpyq/UjPD2sBIr+SHNnA4j0cqLfUDOFFZtLcSoOgKwArqz4a5anr88RMQl3
BS6zAM7mK8DAuK4+ILsbMM/1xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwM0lyq
FwyvLZqNCjqKZBdk9rXiMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0
ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G
WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnToL7GCGFywQccy0OoP2kEKyiKKU1ewgaikPu+H83XF2x4awEIKI4
A0wJ0bXL6qoB0OmFBOcFoZNpcceanW7ET9L1b3CIgCl1thc6jVOqiH7s0sIPOu3h
RBZ/6Uj9RyO2x/W4ZPet5lE1rCy7lOWiHFEqXC4lDtMTVNhdbZEJ+ncyPQYka35+
IfYdbXSQYtdfQZ+MV2+f/b6jqt24N+mRHMuHtRQ3Nw5cJnUMmgInjiJEQdbisNHU
IFoV3RnK57R1UbSiDSgaRSjD+Da3rjpCLHOU2/m0exd3tstcozc07YrpLYMl97mC
nCr3VyFena5qVCvLO7SytICc1Gvqec0g
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:45 2025 by rpki-client