Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          FeAwpl6ANIF7sEGlwpN1Rc3k3Nz+w4E6EabvlNAHugE=
Subject key identifier:   9A:BA:74:0F:2F:13:A5:0C:FC:BA:EC:FB:62:67:D9:AF:12:FF:A8:C0
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          01FD
Signing time:             Wed 05 Nov 2025 02:31:50 +0000
Manifest this update:     Wed 05 Nov 2025 02:31:49 +0000
Manifest next update:     Wed 12 Nov 2025 02:31:49 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: w8HWIY2TKsKvwc1cpG20iv1zAEoO2I9I8m2U3C9pT+Y=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Nov  5 02:31:49 2025 GMT
            Not After : Nov 12 02:31:49 2025 GMT
        Subject: CN=690ab716-19b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:fe:63:6d:95:e2:c8:6c:92:d0:d9:10:04:
                    a5:6e:09:9f:73:f0:f7:7b:c1:84:f3:47:55:ae:30:
                    82:1c:b1:6f:e6:33:1a:26:b2:48:23:8a:7a:30:22:
                    0d:b8:da:8e:3b:49:14:91:a9:8d:79:f1:6e:9b:d5:
                    3e:6d:58:1d:67:7b:51:fa:5d:90:17:e3:fd:93:64:
                    c9:98:e3:9d:7a:21:01:de:61:ec:6a:4a:ed:6a:c0:
                    73:5f:2c:aa:59:9f:5d:cd:af:ae:8b:fd:b4:4e:e9:
                    4e:98:7a:9e:de:8a:a7:4d:63:6d:3c:c2:89:2a:93:
                    96:18:b8:ca:ac:f7:e8:aa:ae:14:f5:bd:ce:ab:c1:
                    ea:eb:51:ec:1b:37:a2:92:74:92:20:05:2e:e1:9b:
                    18:6d:a9:f5:df:5a:2d:1b:4e:c9:09:2f:9e:8a:fa:
                    ee:09:bc:b3:72:de:76:33:f6:a7:4d:78:48:76:8f:
                    5c:25:4c:c9:5b:83:05:46:08:51:91:01:ef:4e:63:
                    71:2a:27:4c:11:d7:03:73:0e:ee:8c:34:7c:fe:45:
                    9f:b4:a0:f1:38:c0:73:f5:b0:39:c5:16:dc:21:2a:
                    fa:b1:0f:7c:57:15:ff:c4:6e:df:8c:72:2c:6a:9c:
                    4e:3b:fb:1f:71:b0:fd:b2:a1:90:c3:4f:51:72:78:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:74:0F:2F:13:A5:0C:FC:BA:EC:FB:62:67:D9:AF:12:FF:A8:C0
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:69:ef:11:96:05:01:38:f5:f4:02:97:b1:26:4a:43:4b:
         12:9e:fd:60:32:f0:d3:59:34:59:bd:8c:f8:f7:03:95:b0:b6:
         03:01:a1:80:c0:29:2d:ad:b9:67:25:fd:94:20:1c:ee:2b:8c:
         3a:a4:2e:1a:56:a6:f3:55:c1:99:13:6f:ed:e8:b1:63:3d:ae:
         99:70:48:b7:5d:ca:14:cd:9c:80:35:40:18:80:48:b3:e8:b7:
         e4:3d:1e:55:2e:af:cd:25:e1:65:a0:bf:57:3a:21:24:6a:56:
         90:ec:e6:ca:5c:43:48:1b:ee:53:de:27:7a:31:43:3b:70:f7:
         c2:c8:94:06:e3:7f:ea:29:45:a5:4b:b6:06:fa:bc:62:6f:3f:
         f2:81:54:a7:39:89:1a:87:d8:59:65:18:9b:cb:6d:b6:25:ec:
         aa:f4:6f:79:7f:8e:47:0a:98:20:69:64:89:be:9b:da:9c:84:
         56:e5:63:04:c9:77:77:d5:da:bd:e0:2d:03:e3:af:be:ce:61:
         90:31:6c:83:7e:c2:e6:ac:10:20:b7:ff:27:62:cf:e9:59:7c:
         48:35:d1:16:d9:cb:73:06:c5:d5:d6:55:b5:53:9a:e7:22:c9:
         91:fe:c0:6d:45:ce:a7:9a:c0:65:5f:c8:b2:27:6f:8b:c0:29:
         f7:17:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:35 2025 by rpki-client