Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          RoGShSF4psNJ4RuBtlxXZAeRJB5kMKCL7XaUXehR6p0=
Subject key identifier:   28:A8:AE:31:53:12:6F:8A:DD:39:DC:AE:65:CE:A2:6C:C3:72:69:87
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          02EF
Signing time:             Sat 25 Oct 2025 04:25:00 +0000
Manifest this update:     Sat 25 Oct 2025 04:24:59 +0000
Manifest next update:     Sat 01 Nov 2025 04:24:59 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: QDAMV/xcr/9KXcWcBFAM3p1+29jAO8LSUoQGNbONzLM=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 04:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Oct 25 04:24:59 2025 GMT
            Not After : Nov  1 04:24:59 2025 GMT
        Subject: CN=68fc511b-c5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:7f:ab:44:f5:1e:cb:bc:2d:d2:9f:ff:78:
                    d6:e9:fc:4b:64:88:54:aa:cb:00:78:d7:e3:a5:1a:
                    9c:6c:ed:95:74:b1:1f:1a:be:1a:02:47:2f:1f:df:
                    aa:50:42:c6:40:c3:b5:f6:89:37:21:10:c1:ec:f6:
                    ef:88:91:ad:a1:65:cd:98:38:f4:c8:ca:a7:0e:4f:
                    f5:5e:9b:b0:70:56:25:97:88:51:ae:1f:d3:c8:40:
                    a4:cb:7b:e9:25:1b:f3:1a:8a:12:16:f5:7c:18:a3:
                    7b:16:af:16:08:36:b8:9d:63:93:7d:b0:24:00:a9:
                    79:e4:fb:3e:7f:ba:c2:49:15:ac:4e:01:8a:3f:43:
                    b3:e5:70:e7:c7:91:84:0b:54:22:b4:73:4f:5d:ca:
                    94:c9:09:ac:c6:a7:63:f3:5c:56:3b:9a:9a:7a:d6:
                    c9:8a:c4:90:1f:ec:2f:ed:e4:73:ad:dd:5c:47:f9:
                    65:bc:38:b3:fa:8c:b9:5f:ed:a8:16:4e:75:58:77:
                    56:46:1e:e6:23:9a:84:08:63:77:0c:34:66:d8:51:
                    57:49:3a:32:97:ea:b3:e7:b9:b8:ea:87:7c:25:bf:
                    64:e3:7a:d1:85:bd:a2:14:7d:1c:fb:bb:46:b2:ea:
                    06:cb:76:78:a1:2f:2c:06:0c:d0:85:4e:9f:86:21:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A8:AE:31:53:12:6F:8A:DD:39:DC:AE:65:CE:A2:6C:C3:72:69:87
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:e5:b3:99:b6:a4:60:10:86:98:0e:7a:8a:bd:ee:ab:46:
         f6:93:7a:bf:8b:32:0f:68:a6:4a:69:2a:37:f2:bd:ed:c9:84:
         4a:c8:b9:6a:a2:ab:6a:a2:16:be:9d:c0:89:00:59:28:46:a6:
         f5:1c:0a:4f:9f:25:4c:83:2b:1d:c8:83:4c:4c:34:19:c2:45:
         d4:75:1e:27:1f:39:cc:80:13:09:ad:4a:dc:f4:b8:56:43:f6:
         4e:c0:c5:81:0c:e0:42:de:1f:fb:e8:eb:7b:1e:24:2b:8d:a2:
         44:01:a1:63:0e:f5:54:16:ac:be:5b:23:b0:8c:12:71:0c:cd:
         3a:b3:01:a1:42:03:d1:82:eb:80:e5:46:b2:9a:19:04:35:4a:
         ec:ad:22:99:76:5b:76:be:63:ee:34:bb:5b:da:e9:ca:e9:bc:
         a6:9c:39:64:b8:7d:65:46:b6:27:e2:26:3a:ad:06:14:2f:92:
         49:0e:8d:31:da:05:20:12:68:5f:8b:e1:4c:a6:5a:9a:58:f3:
         88:57:65:31:0c:8a:75:c1:b0:86:13:93:9f:67:f4:e5:29:e4:
         5e:89:77:e7:9e:6f:46:6a:6a:04:aa:34:ca:d4:81:d6:e3:f2:
         d3:69:f7:63:69:b4:f8:d1:0d:8e:9d:06:cc:c2:50:a6:d5:d8:
         b5:49:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:38:19 2025 by rpki-client