Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File:                     JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier:          gtwxCx3u7K/RNaxL5JEQDwu+UxHc0v9THs2X+WE2Gns=
Subject key identifier:   15:EB:0B:AC:1E:0C:E1:D7:A4:8E:04:B5:4C:E7:10:BA:EF:D5:A6:39
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer:       /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number:          0238
Signing time:             Sun 19 Oct 2025 04:11:31 +0000
Manifest this update:     Sun 19 Oct 2025 04:11:30 +0000
Manifest next update:     Sun 26 Oct 2025 04:11:30 +0000
Files and hashes:         1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: IzPLA/t4ben4akXC776vURB5XfE6AmMJJw9Gip83VxM=)
                          2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=)
                          3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=)
                          4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
        Validity
            Not Before: Oct 19 04:11:30 2025 GMT
            Not After : Oct 26 04:11:30 2025 GMT
        Subject: CN=68f464f3-f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:aa:f4:33:5e:a1:fa:60:3a:eb:d3:da:6e:
                    d3:96:e7:50:32:5a:55:c8:ed:92:80:de:7c:42:cd:
                    bb:60:74:81:c7:bd:53:81:07:30:d8:b3:31:a5:88:
                    89:45:5f:07:0c:b2:0c:07:5a:44:9f:f2:8e:6c:ea:
                    0a:87:d3:3f:97:f1:a1:eb:76:e6:4a:91:34:4e:92:
                    4b:3d:56:e1:69:d4:ab:23:0f:fa:3a:65:d4:42:34:
                    8d:35:75:56:9a:70:2a:ae:54:f4:da:36:60:06:ed:
                    20:4d:49:62:7f:b5:aa:a0:23:e1:f9:50:9e:1a:2c:
                    1a:ba:84:f4:47:4e:64:09:7e:a9:dd:7c:7b:d3:f0:
                    fc:95:59:00:f7:8e:a6:19:c2:59:00:4d:ea:37:aa:
                    14:d9:c3:7a:11:7e:46:f9:da:c5:3d:91:9d:40:95:
                    3e:bd:a4:a5:e8:55:ca:db:ee:35:f4:f3:fa:b8:5b:
                    de:fc:70:9c:63:79:04:5a:38:4c:34:13:ac:18:dc:
                    96:4d:72:f8:85:fc:9d:b6:0f:75:49:eb:98:86:d8:
                    d6:ab:0b:ca:4e:b6:f4:57:a6:5e:07:70:32:ba:71:
                    5f:14:9d:08:10:d7:f7:87:bd:aa:4a:39:fa:b1:8c:
                    34:42:8e:98:58:a7:b6:0c:81:ad:67:86:1b:95:b3:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:0B:AC:1E:0C:E1:D7:A4:8E:04:B5:4C:E7:10:BA:EF:D5:A6:39
            X509v3 Authority Key Identifier:
                keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:73:e5:f1:92:18:a3:f2:59:89:ec:8d:89:26:37:6c:76:
         86:44:84:bd:aa:04:50:49:8f:0c:3e:52:ab:42:52:2d:7a:e9:
         9f:c3:36:ed:5d:0c:7c:1f:bb:89:a6:a9:d7:c2:6d:ca:7b:68:
         f9:e0:12:30:5f:ff:79:6d:63:57:3f:25:3e:67:31:b4:07:9a:
         4d:c7:c6:43:d2:96:bd:8f:53:de:74:8f:1f:0e:3a:6a:a6:5e:
         19:b7:75:7f:10:6c:be:a4:f7:ce:08:5e:82:76:a0:e8:e7:df:
         73:e1:08:0b:b9:a6:d6:6c:71:f9:89:50:a0:53:d3:e6:41:95:
         50:f9:7c:2d:11:4d:fc:94:52:e6:0e:44:af:cf:f4:d8:a5:fa:
         37:53:e6:35:b1:2a:6e:b6:3a:aa:3b:2c:39:32:78:5d:58:f8:
         45:0f:e0:01:a5:44:1b:65:69:d1:b9:3b:4e:d8:a8:9a:46:20:
         57:81:af:4b:88:6f:bd:19:6e:65:a4:a9:2e:3a:7f:85:30:af:
         1b:14:e4:49:75:86:02:e5:a8:8b:af:ce:af:ec:d7:8c:d0:ec:
         a0:15:3e:87:12:37:df:9c:aa:54:55:43:d0:99:a5:33:9c:7a:
         28:c7:2e:76:89:9c:38:bc:98:b2:b5:a6:5f:5d:9a:ee:16:5c:
         98:14:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:23 2025 by rpki-client