Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File:                     jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier:          uKd8rHwv/xyk5dupLa9kJbbLtoe17hUNemXgys/ODj4=
Subject key identifier:   3F:E4:14:2C:3B:3B:8F:03:BA:70:0B:88:D2:F4:D0:C0:F9:00:71:39
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       0B10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number:          0AF9
Signing time:             Sun 02 Nov 2025 19:21:27 +0000
Manifest this update:     Sun 02 Nov 2025 19:21:26 +0000
Manifest next update:     Sun 09 Nov 2025 19:21:26 +0000
Files and hashes:         1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: +Fxajj1hxHQe19jSw3s474Sc1INOzoz+D4dv9g45NzA=)
                          2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=)
                          3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=)
                          4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
                          rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2832 (0xb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Nov  2 19:21:26 2025 GMT
            Not After : Nov  9 19:21:26 2025 GMT
        Subject: CN=6907af37-6f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:03:b7:85:ef:00:f2:1f:c0:84:b1:fb:39:
                    67:62:1f:fc:f7:30:41:ab:a6:f0:82:10:de:23:82:
                    73:e3:b2:cb:9b:0d:81:41:53:c8:a2:4e:cf:29:af:
                    da:84:2d:5a:57:ff:30:05:e9:f8:f7:8e:87:c8:29:
                    e8:c2:61:12:b3:d8:68:15:c4:f2:1a:03:c8:0b:f4:
                    4c:d0:c7:87:f7:d4:42:d2:20:75:36:c8:34:90:88:
                    af:3e:cb:5d:20:08:be:02:65:25:6a:43:e4:25:47:
                    72:49:71:53:90:e4:63:d3:c3:19:b0:0b:87:89:d8:
                    a7:bb:bb:c6:62:cf:f0:33:32:2d:62:ce:80:d3:82:
                    9b:eb:c5:46:03:90:b7:38:c0:e7:a8:a0:1c:90:ae:
                    36:a3:dd:9e:50:30:78:ba:b1:65:88:1c:84:85:92:
                    09:7a:5e:4b:df:b5:7e:2f:29:bf:3e:e8:00:04:3e:
                    8c:bd:89:80:3b:d1:8f:7e:62:bc:ec:ec:d5:17:13:
                    b1:2c:62:7e:f2:e1:56:7e:b2:10:ac:49:ae:82:f1:
                    8e:c3:05:1b:ba:13:5f:7b:0e:95:8f:da:15:3d:c9:
                    3a:d1:52:ae:87:ae:4f:7c:09:e4:60:66:fa:c3:c7:
                    07:04:f6:9e:f4:e0:cb:cf:da:05:a6:f3:68:8e:ad:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:14:2C:3B:3B:8F:03:BA:70:0B:88:D2:F4:D0:C0:F9:00:71:39
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:1f:81:47:5b:db:59:78:65:ab:78:30:e9:4a:63:96:3d:
         47:d0:e2:7c:15:dd:8c:ef:04:07:73:e0:26:64:0b:77:0e:78:
         03:ae:9a:26:3d:8b:91:c4:c9:d6:ce:d4:71:6d:b6:a8:4e:0d:
         2c:28:04:f2:3c:b5:ef:ac:d2:61:e9:d0:a9:19:f9:76:a5:f8:
         2c:7b:37:ef:d3:a0:b6:32:39:70:e7:6b:43:35:12:54:11:b6:
         d7:5d:38:5a:77:9b:11:cd:88:e1:e3:63:62:42:05:0a:f8:e5:
         ab:2b:fd:b5:96:ec:17:76:c1:5e:57:34:f1:9e:77:a6:11:65:
         d2:6b:59:f2:7c:a4:02:b2:b8:ef:94:12:7a:42:6c:ef:b5:55:
         5e:f9:75:11:48:59:de:9e:48:cf:08:8f:47:40:0a:05:a4:b2:
         51:62:07:2a:0b:1a:4f:9f:7b:bc:b0:01:0e:f3:b0:4c:a8:d6:
         1f:fc:4f:c9:a6:19:13:6e:1a:50:0a:b6:dc:71:b7:b4:0d:5a:
         ae:f8:d2:4d:3c:58:75:a1:f9:33:69:0d:15:7a:de:e5:ce:68:
         ee:9f:96:02:0c:43:b8:d5:8f:18:e5:73:5c:50:67:0c:c7:2c:
         31:ad:05:95:84:d2:4c:df:9e:6d:c2:55:31:99:4a:4e:4a:9b:
         5c:88:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:38 2025 by rpki-client