Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
File:                     jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json)
Hash identifier:          6gye9UpdgABPAw/201s1kWH8zvF9wVTCIDreq9ueL4Q=
Subject key identifier:   F1:65:73:BE:F4:69:15:6E:3D:C5:14:20:0D:E0:4C:13:13:8B:87:B6
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0AA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
Manifest number:          0A9C
Signing time:             Sun 02 Nov 2025 19:30:34 +0000
Manifest this update:     Sun 02 Nov 2025 19:30:33 +0000
Manifest next update:     Sun 09 Nov 2025 19:30:33 +0000
Files and hashes:         1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: yLduKJwONDCdws4OpkCMID9hRVjnxTffFMlsVQnknVA=)
                          2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=)
                          3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Nov  2 19:30:33 2025 GMT
            Not After : Nov  9 19:30:33 2025 GMT
        Subject: CN=6907b159-bd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:4d:22:ae:c4:23:93:65:39:46:87:87:59:
                    0c:e5:a2:b7:a0:cb:fb:b6:e7:27:5f:37:61:13:7e:
                    bc:fd:e7:12:55:6d:78:53:82:6e:01:b7:33:1a:d5:
                    b7:71:f9:de:88:e5:6f:03:23:de:b2:b9:f4:93:01:
                    52:6a:70:7b:57:e6:3e:b0:31:dd:98:4b:7f:50:db:
                    40:30:cf:64:68:94:4a:ce:ab:d0:bf:a6:7e:a4:04:
                    b1:ad:06:90:23:90:1b:e6:44:c9:33:ba:c1:69:25:
                    81:c8:4e:51:3c:df:27:2d:60:6b:66:89:de:84:01:
                    11:eb:f4:b6:52:f9:a6:02:84:81:b8:bf:9c:3b:98:
                    0e:6e:e7:2f:ec:be:35:ab:0b:c3:46:7a:69:22:b0:
                    12:c0:7f:45:d4:bc:3e:d5:75:d6:f6:45:28:a1:ca:
                    27:28:88:e7:d8:b1:9a:65:84:94:a6:c8:ae:71:a8:
                    87:64:f7:84:2d:bf:49:3c:df:e6:79:6d:22:15:4f:
                    82:6c:2e:dc:61:24:22:50:99:25:72:00:9c:5c:43:
                    d7:09:a4:ac:0d:8c:e5:e6:bd:26:87:fd:ef:23:54:
                    e1:56:d5:0a:77:1e:e0:f0:bc:2d:97:a1:9b:a5:cb:
                    c6:69:5b:a3:d1:43:c8:d2:a3:9b:4f:39:68:ed:3c:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:73:BE:F4:69:15:6E:3D:C5:14:20:0D:E0:4C:13:13:8B:87:B6
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:21:9c:1a:c3:b4:4f:64:48:97:63:34:93:a0:99:24:ac:
         11:b7:3a:7e:f2:89:31:64:8e:87:08:2b:c1:6f:8c:42:2a:c3:
         ed:60:a1:22:64:a1:e8:f2:89:78:1b:f5:2e:bc:8e:9d:56:0c:
         72:36:82:35:84:e5:f8:23:50:af:ab:c7:7e:75:2d:04:0a:26:
         c5:cc:c8:05:e2:54:97:21:55:63:49:c1:86:b2:6a:33:70:f9:
         12:ef:e4:d7:17:48:8e:1c:8e:8d:bf:37:e9:fd:62:b4:bd:9c:
         58:24:67:dc:d3:46:20:1e:8e:de:47:fc:e8:0c:d9:55:bf:76:
         49:3c:6e:0a:24:5e:78:30:10:89:dc:8f:f3:0c:08:83:f8:92:
         44:b4:af:14:f3:9a:d8:d9:05:4a:71:10:c3:b6:26:ce:c3:92:
         cf:ee:f7:63:3c:cb:cf:e3:9e:d9:10:c7:ef:9b:ad:4a:8e:53:
         8e:61:6d:dc:5e:c3:8c:7e:df:70:46:d5:a0:43:43:3b:a6:90:
         24:00:6f:7f:76:e8:4b:c0:e4:c0:d5:3b:aa:bd:48:1f:09:56:
         3e:5c:11:56:33:54:90:cf:37:4f:44:e0:c5:51:98:c0:e6:7a:
         0c:bd:f5:ca:93:8b:94:94:01:27:1d:ec:25:8d:46:1e:a2:ec:
         54:40:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:18 2025 by rpki-client