Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File:                     JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier:          x6LrFW0jKj0etaS19Y5utqY5pYutjbWRgvqraBAaWSU=
Subject key identifier:   73:89:1B:11:47:8B:AC:73:A9:92:F4:A2:7E:5C:28:08:37:FF:61:E0
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number:          07E6
Signing time:             Thu 18 Sep 2025 21:19:33 +0000
Manifest this update:     Thu 18 Sep 2025 21:19:32 +0000
Manifest next update:     Thu 25 Sep 2025 21:19:32 +0000
Files and hashes:         1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: jji56RKd1cChGrCwEiXnVO3s53D5HX/ghbGp03r8UwA=)
                          2: 076948B2428E11EF912F3710C4F9AE02.roa (hash: TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=)
                          3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=)
                          4: 9ADCD3BA0CC211ED8C32645BC4F9AE02.roa (hash: 9AR0wajPgZJi4aan8+IRMeXtcBiZo3LvqeT/rc/ePUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Sep 18 21:19:32 2025 GMT
            Not After : Sep 25 21:19:32 2025 GMT
        Subject: CN=68cc7764-f520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:14:e1:95:5a:8b:a6:1f:32:c4:67:41:99:
                    87:74:80:a7:29:63:39:cf:a4:e6:e1:24:c0:ed:86:
                    de:30:29:9e:68:7b:34:03:d3:dd:19:67:40:b9:cc:
                    ee:f6:d8:77:b8:5c:a0:02:b1:ce:b1:4d:67:04:7b:
                    54:65:64:d7:51:03:20:f7:75:db:3b:f7:87:79:1b:
                    ef:b9:50:3f:99:6c:87:cf:e3:90:67:cc:18:f2:14:
                    55:7b:a5:24:71:37:68:ef:7a:d6:4b:76:f3:71:16:
                    7a:9a:2d:65:68:47:f4:88:69:ad:00:2a:c3:6f:4b:
                    b5:2c:30:a7:64:9e:91:f6:70:8a:e7:c8:12:75:8c:
                    6d:4f:2d:df:39:94:c9:76:53:e6:2c:5a:6c:04:2d:
                    1c:43:07:77:8c:80:2d:ca:1d:99:4e:20:68:7b:56:
                    cd:a2:6f:6a:37:f9:e5:f7:91:69:23:5b:9c:34:77:
                    db:b5:8f:d1:88:fe:d7:17:c0:e2:22:fb:62:dd:7a:
                    98:6f:bc:7c:67:fc:48:b4:d3:7a:71:35:97:42:41:
                    2d:ad:40:dc:c7:6b:9d:c4:22:84:66:5c:b5:13:f2:
                    fe:88:0a:5f:b7:db:16:22:bb:08:fb:53:c5:03:b8:
                    ab:d5:ab:69:10:52:ce:4e:21:42:d3:f2:a0:ab:22:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:89:1B:11:47:8B:AC:73:A9:92:F4:A2:7E:5C:28:08:37:FF:61:E0
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:d6:05:77:43:95:18:5d:90:ec:8e:64:23:7d:d9:ec:a0:
         b4:78:2c:72:4a:d3:93:bb:91:8e:83:2a:17:30:70:94:a8:fd:
         79:1a:52:02:45:79:5e:2a:a6:fd:1a:37:f4:ea:bb:a8:70:5a:
         0c:fe:0e:4c:9f:9a:95:9d:0e:d0:8b:2a:d4:ff:27:47:db:ad:
         61:76:40:e5:62:f8:e0:69:60:df:77:c3:2d:24:b0:9e:a8:7f:
         a9:bb:13:a6:a3:d5:98:8a:3e:1b:d2:59:2b:05:a8:6b:94:9a:
         1c:c5:6f:23:13:96:0c:b2:9e:34:1c:6c:66:44:c5:49:27:15:
         13:a5:12:50:a0:18:e4:9c:83:63:2a:4e:ec:88:11:b0:42:49:
         33:35:77:44:1c:cc:68:77:97:6f:01:2e:d1:fb:2c:88:71:50:
         3b:14:f0:6f:b2:c3:03:8d:50:40:8a:f4:7f:da:51:01:5d:0f:
         dc:88:81:b9:1d:81:af:ba:c0:a0:34:0f:d2:65:1b:94:4e:91:
         c4:1e:bb:e5:a1:3f:1e:40:ba:8c:67:1d:f8:0f:0a:8f:d5:cc:
         bc:2f:8d:22:b9:78:86:5a:35:ca:4e:2d:20:26:34:b1:b2:d2:
         0f:1f:8e:e8:06:67:96:fb:9f:05:66:80:97:bf:cf:59:b1:9e:
         58:9f:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:39:53 2025 by rpki-client