Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
File:                     JVLURML17uUkxsAbqk-d8rrsoqo.mft (raw, json)
Hash identifier:          fK+3VIAsQJ1zCYqgFhd8toE0wvrXic0pH5dm18TkXDs=
Subject key identifier:   81:07:21:FF:AC:BC:DC:E6:83:51:4F:93:3A:09:85:C9:EB:28:34:9A
Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA
Certificate issuer:       /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
Certificate serial:       0604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
Manifest number:          05F9
Signing time:             Tue 04 Nov 2025 23:02:29 +0000
Manifest this update:     Tue 04 Nov 2025 23:02:29 +0000
Manifest next update:     Tue 11 Nov 2025 23:02:29 +0000
Files and hashes:         1: JVLURML17uUkxsAbqk-d8rrsoqo.crl (hash: jgqHJgXL3iS2jzc7DsOZRxweif8ZQq5CK9mzZrKmWj8=)
                          2: C4563C423ABB11ECA7767769C4F9AE02.roa (hash: h+Hm6cbajTgkhZzanF9El8w5V1fDGKEA/3SkovhKfAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl
                          rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4BF, serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
        Validity
            Not Before: Nov  4 23:02:29 2025 GMT
            Not After : Nov 11 23:02:29 2025 GMT
        Subject: CN=690a8605-56ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:3a:37:37:e8:6c:5c:28:60:45:6a:f5:a3:
                    c9:b5:2c:6f:8f:61:ae:5a:5d:d0:b0:64:88:c0:71:
                    4f:e4:35:10:db:00:57:83:e0:e3:f8:2f:6c:a9:e0:
                    ba:a3:a9:51:b8:d0:d8:ca:f4:bc:f5:e8:d8:db:70:
                    70:fe:42:db:17:ed:37:88:d1:d3:f8:f8:80:8c:2a:
                    a5:7d:02:38:25:e6:69:05:9a:eb:28:90:f8:bb:cc:
                    09:2e:17:bb:c3:27:1d:af:df:25:98:42:1d:3f:40:
                    1c:04:ce:41:ae:35:4f:ea:87:0e:20:ad:20:61:56:
                    19:3c:d8:ea:83:54:64:2a:b6:9a:1e:3f:7c:3d:12:
                    ce:3a:7e:01:7a:7d:c6:43:f9:9a:1f:a9:22:18:81:
                    a6:e7:d4:b3:3a:4d:e1:0b:08:8a:51:a5:04:2e:d6:
                    fe:9f:a4:92:36:43:2b:2b:22:66:92:bb:2b:76:5e:
                    12:6f:fc:73:85:ea:db:8c:dd:81:8e:07:6b:4f:8f:
                    84:f0:84:46:47:ed:72:28:0c:44:ef:17:ae:ae:6f:
                    06:c3:56:06:d7:3b:64:f6:12:c4:e1:05:9c:ac:1f:
                    03:3e:42:a5:89:7d:20:e3:ae:cd:88:08:bd:ba:64:
                    e7:d1:a7:b4:4e:49:a9:f1:af:58:97:c8:e3:03:b8:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:07:21:FF:AC:BC:DC:E6:83:51:4F:93:3A:09:85:C9:EB:28:34:9A
            X509v3 Authority Key Identifier:
                keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:06:22:91:6d:10:0a:31:c6:c6:fc:2c:b0:32:b5:aa:df:
         7d:cb:a6:07:f8:7c:2d:b3:d5:52:19:d1:31:58:dd:93:ea:cd:
         99:3d:97:65:01:47:74:ea:7c:03:62:34:c1:7c:8e:06:83:34:
         26:68:e2:4d:84:91:2c:03:77:21:5a:e6:d7:c3:91:b7:0d:7d:
         67:9e:30:c0:01:5e:89:52:4c:ca:8f:3d:2b:6c:43:f4:ca:89:
         ae:e5:31:0a:c1:a3:77:da:33:9c:7c:72:14:40:65:ad:dc:2a:
         48:46:80:fa:31:bd:bc:4c:7e:98:e7:01:d2:de:29:16:23:a4:
         58:e1:3f:b5:d8:4e:d6:6b:52:a5:bf:57:52:ab:30:27:c1:47:
         84:d4:a0:9c:07:35:13:51:78:7d:3e:ea:03:89:84:ed:44:e1:
         96:05:49:54:55:8f:02:e2:a1:88:42:a3:16:d8:c0:7d:c2:01:
         4f:5c:32:d0:f0:45:2e:32:73:6e:fa:91:3d:4b:78:5e:04:a7:
         3c:66:bb:5c:9c:74:84:a6:a4:df:e5:52:58:17:31:76:22:ba:
         b7:57:15:c5:48:15:ad:eb:cf:ad:7d:e2:81:15:c0:01:dc:f1:
         90:56:63:fa:9b:c2:ad:a8:81:00:1f:9a:6a:62:24:4a:fc:2b:
         17:e4:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:30 2025 by rpki-client