Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          6T/N82s5zg1CAzJZahmNKOlPjuJ8EG3H8IblV0LA55M=
Subject key identifier:   52:46:91:49:FE:50:83:32:93:9A:2B:AC:AD:B3:8E:15:AA:C7:C4:40
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          FE
Signing time:             Tue 09 Sep 2025 05:21:59 +0000
Manifest this update:     Tue 09 Sep 2025 05:21:58 +0000
Manifest next update:     Tue 16 Sep 2025 05:21:58 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: qjK0o8q9Dsmx52NU/wjC/nz8bM2VK+0Q8+7Fdn7bIEM=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Sep  9 05:21:58 2025 GMT
            Not After : Sep 16 05:21:58 2025 GMT
        Subject: CN=68bfb977-6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:96:8d:13:d2:52:9e:05:b1:64:da:3a:cf:
                    84:9a:00:f5:94:1d:23:f0:3e:12:8d:a9:21:20:12:
                    ec:1d:2a:90:35:26:73:7a:a5:35:98:29:4e:d9:af:
                    12:a8:49:e5:23:cc:16:46:7c:c7:d3:6b:f4:b5:5d:
                    a7:0a:25:1f:4b:03:8f:fe:fe:6d:30:21:5b:43:e1:
                    27:51:21:e8:24:33:b9:94:d0:2f:e4:11:4d:d3:6c:
                    a6:93:a7:a6:59:a3:9a:a4:18:99:7d:1e:71:20:5b:
                    0e:14:98:b9:1d:0a:d5:54:75:6b:c3:f0:ec:34:58:
                    40:fa:26:49:cb:eb:24:82:e1:93:de:ac:10:0e:ae:
                    fc:8d:46:2b:89:51:1e:43:cb:e4:ee:7b:34:98:b8:
                    47:f8:94:4d:26:15:2c:44:1d:64:d6:98:07:79:47:
                    70:ea:43:40:b7:6d:98:0a:3e:c5:f1:48:57:4e:1c:
                    4b:59:34:c1:16:be:45:75:1b:ad:22:46:39:2d:e1:
                    65:74:db:a2:1f:b4:21:fa:77:cd:d8:a3:be:32:ab:
                    7a:6d:e7:39:a8:79:0b:2a:72:fc:75:51:2c:3d:cd:
                    dc:dc:b9:e6:b8:87:e6:86:a9:a8:ad:94:4e:64:61:
                    bc:96:62:f0:04:aa:39:73:3e:3b:65:08:b3:f9:1d:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:91:49:FE:50:83:32:93:9A:2B:AC:AD:B3:8E:15:AA:C7:C4:40
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:92:e1:7c:ca:34:90:40:6f:09:e6:e4:b4:11:a4:73:09:
         cf:38:a0:59:3f:1d:a1:76:fb:bb:f1:42:1b:52:d3:8b:22:5e:
         53:17:aa:d5:55:5e:ea:61:15:7e:da:97:e7:7c:3d:82:ab:3a:
         3f:92:44:eb:22:78:d9:5e:37:b0:e5:9b:7a:2e:16:a3:0c:7b:
         c6:e0:0a:4b:b5:ff:ae:9a:84:06:2e:c8:cf:76:b2:d5:8c:cf:
         b4:23:c4:12:99:3b:14:96:ef:79:d2:b9:de:0e:be:33:b2:69:
         1c:15:13:8e:49:41:67:4f:87:c8:78:55:a9:52:c5:59:2a:3d:
         de:ce:97:b0:31:05:78:b3:15:91:38:fc:f3:c9:90:25:cf:4e:
         0d:f9:9c:49:76:00:87:6f:ec:c4:02:c5:12:36:2e:94:d5:fc:
         0e:52:04:42:38:10:76:9f:ec:4e:d5:1d:73:89:87:ea:65:41:
         23:4a:e9:8f:98:f6:fd:79:30:03:40:5d:db:54:2b:8a:c7:d3:
         78:31:c8:c9:f3:b3:36:3c:3f:8f:0a:3a:20:b7:fc:74:fd:c1:
         1a:34:a4:ee:87:49:00:34:9e:b8:3e:d7:2a:c4:18:5d:82:2f:
         73:2d:72:04:61:54:ac:84:d1:c4:85:ba:4a:e6:83:39:6b:7e:
         ce:57:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:05:18 2025 by rpki-client