Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
File:                     j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json)
Hash identifier:          ru1aZUcERNuPICPpItcnXJxtzhyb7osB5jx3+yCYBb8=
Subject key identifier:   D0:58:E7:4D:B1:F2:0C:1B:94:34:FE:2F:15:38:6E:B7:D2:1C:05:E3
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Certificate issuer:       /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial:       090E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
Manifest number:          0AED
Signing time:             Thu 18 Sep 2025 20:35:27 +0000
Manifest this update:     Thu 18 Sep 2025 20:35:26 +0000
Manifest next update:     Thu 25 Sep 2025 20:35:26 +0000
Files and hashes:         1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: QwKEe2mf4Coqt2W5cUx/Bthy/fc/ZPq0rMjZhZ/FbLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Validity
            Not Before: Sep 18 20:35:26 2025 GMT
            Not After : Sep 25 20:35:26 2025 GMT
        Subject: CN=68cc6d0f-001e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:9a:a8:6b:be:8f:1c:db:92:48:4a:d3:4f:
                    36:71:86:d3:fe:4b:9a:ba:d3:3d:c0:0a:68:70:c4:
                    c8:45:b1:17:0f:c9:e9:64:e5:96:b2:2f:17:0f:f1:
                    4b:fe:a2:87:50:a6:f1:ef:50:df:e4:89:31:d3:19:
                    d1:83:a8:e2:0e:bd:84:76:dc:40:ef:09:c2:56:cc:
                    77:be:e0:b3:f0:cf:e9:c0:aa:c8:ee:aa:40:b3:0b:
                    79:90:3f:9a:c7:e7:73:81:9d:70:6e:5c:ca:8c:a1:
                    24:ce:c7:31:16:ad:ac:42:47:94:b5:bc:9e:01:51:
                    a7:bd:e8:d9:b3:5f:7b:01:61:db:bd:5c:ab:bc:2a:
                    b9:27:47:27:28:fb:b6:d3:cb:c2:8f:65:27:ea:0a:
                    7a:0e:dd:fb:4c:70:c1:fe:bc:e2:a4:fd:08:05:d9:
                    97:e6:00:1c:27:38:34:57:bb:02:55:6d:6c:5f:d9:
                    e6:6d:be:35:26:6e:cb:b7:90:90:62:7c:ed:37:59:
                    00:de:d9:0a:92:f3:1b:25:b7:86:0d:92:07:81:6b:
                    af:44:fb:ee:b3:b7:ed:bf:ef:14:ab:a0:c0:83:ac:
                    7e:8e:73:fd:32:4b:bf:9c:35:17:c7:43:96:67:e1:
                    bf:9f:d5:e5:2e:c0:85:c2:e5:f2:aa:54:46:86:b9:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:E7:4D:B1:F2:0C:1B:94:34:FE:2F:15:38:6E:B7:D2:1C:05:E3
            X509v3 Authority Key Identifier:
                keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:29:ac:9f:1d:0e:0d:0e:40:ec:b0:ad:71:6d:f6:37:07:
         9b:58:53:e0:61:96:0b:35:11:47:fd:fe:ce:a6:88:dc:b4:ce:
         83:d2:9c:df:c7:e7:66:e5:ec:01:8d:24:ee:b1:11:5d:e6:54:
         64:82:8f:73:32:ca:37:8b:08:ec:29:38:b2:33:48:eb:3b:c3:
         92:a8:26:d8:27:15:86:b3:2d:91:09:fa:1e:cb:bc:de:c8:0a:
         73:e6:ca:c0:3d:c0:c8:9c:ef:d8:24:da:e5:cf:85:68:cb:41:
         dd:8c:cb:b8:94:0d:f9:19:8d:f4:67:57:75:84:7d:75:cb:4f:
         f4:3b:f2:43:c0:b5:a3:eb:50:02:f1:6a:12:ff:82:77:9d:db:
         df:6d:de:ed:86:16:14:b7:96:bb:a7:aa:21:81:9c:8f:a9:06:
         4b:50:5c:13:89:b2:fa:db:fb:ce:d7:7f:f5:99:54:1b:02:3c:
         61:23:d5:08:03:61:32:05:ec:5d:00:0e:65:f6:2b:15:ff:02:
         ec:c9:bc:2d:28:ee:0e:37:1d:f2:e1:d3:d3:fb:8c:44:09:2f:
         92:81:80:b8:a7:4d:8d:38:af:70:eb:78:f9:db:73:38:e1:44:
         17:e3:3b:4e:eb:b1:f9:6a:f1:2e:d8:f6:29:a5:80:04:5a:6a:
         ca:69:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:14:55 2025 by rpki-client