Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File:                     J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier:          7mc1Ju6w6uLjflWx2oCFlXjir2iBJ7WtPzGVTH53v8k=
Subject key identifier:   95:F8:6E:73:1E:3A:54:52:99:51:69:E0:27:84:43:94:AB:B1:D2:97
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer:       /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number:          B8
Signing time:             Mon 03 Nov 2025 06:01:19 +0000
Manifest this update:     Mon 03 Nov 2025 06:01:18 +0000
Manifest next update:     Mon 10 Nov 2025 06:01:18 +0000
Files and hashes:         1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: Kpkuw7L6nCTPq59p8r+yJhTrKyu92ASFGUyu4GvBUYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
        Validity
            Not Before: Nov  3 06:01:18 2025 GMT
            Not After : Nov 10 06:01:18 2025 GMT
        Subject: CN=6908452f-3c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:7f:2b:97:62:0a:bf:77:e6:73:56:e0:f4:
                    c3:78:01:08:08:c3:82:f5:73:ab:c6:e4:b0:8f:d4:
                    fc:3c:fe:df:d2:5e:5d:f9:f7:64:0e:f4:93:03:65:
                    34:98:af:fc:56:52:d3:06:20:f4:c1:71:ce:3f:73:
                    3c:3c:e0:bf:c6:ab:f7:3d:e7:ac:fa:98:50:62:ef:
                    f9:b6:80:13:69:3e:aa:76:a8:f6:d3:63:c8:1a:1b:
                    cb:10:29:17:7d:7a:4c:c5:f1:d7:c2:c9:07:f2:9d:
                    73:15:19:c2:31:26:c3:92:c4:77:28:67:e5:84:6a:
                    a5:8d:51:da:a5:df:b2:5d:7e:4b:a0:a6:d0:26:59:
                    05:5a:84:43:7c:18:17:59:a9:7e:20:1a:94:fc:24:
                    cf:6f:ca:13:0b:bf:ef:0f:9c:c3:72:44:76:19:cd:
                    1b:a7:bc:4f:bd:54:49:9f:5f:2e:e4:9b:fd:8e:37:
                    b2:7a:8a:3f:4d:c1:d5:88:2b:80:27:5d:14:16:20:
                    d4:b0:1d:d6:73:9e:eb:d1:d8:9e:7c:23:c7:32:cd:
                    4a:25:4d:58:b6:49:c3:0a:27:a4:46:90:9f:6a:19:
                    14:99:34:7f:4c:1d:16:ba:dd:df:28:9c:87:9a:f8:
                    d5:99:24:8c:0f:c3:a9:c7:2e:e4:98:7f:df:bc:21:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:6E:73:1E:3A:54:52:99:51:69:E0:27:84:43:94:AB:B1:D2:97
            X509v3 Authority Key Identifier:
                keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:8d:5f:33:eb:c8:2d:90:aa:d4:19:4f:e4:ca:06:72:3e:
         f0:95:71:98:6a:fd:fa:44:a3:98:76:c8:bd:a2:cb:c9:55:16:
         ce:b5:98:87:29:97:17:9e:bc:91:0b:20:d7:77:60:aa:4b:ef:
         24:78:ba:c1:e8:4f:6d:fd:83:18:2b:01:2d:ff:05:a9:16:44:
         40:4a:56:60:37:80:cb:82:cf:bc:61:ba:63:44:ae:08:a7:25:
         84:c0:8f:71:69:00:e5:bb:c6:4f:ce:4c:75:e2:75:c4:29:61:
         40:43:df:84:b7:30:d6:76:17:92:47:1b:e0:6a:d1:d0:cb:17:
         67:57:ed:54:9b:1d:e0:cd:bd:16:90:4a:d1:4a:53:23:c7:c0:
         49:6f:fa:0e:08:86:a3:c2:24:59:b1:42:23:a0:d2:12:80:5a:
         b7:a2:0a:2c:7b:50:98:d3:ad:2e:c8:9c:e4:4b:df:bd:0f:3f:
         55:a5:7c:c4:cb:4a:93:55:55:a8:1d:c8:e9:0a:e9:2e:78:d7:
         83:41:ab:dd:29:91:26:62:44:43:32:e8:e9:f7:5e:cc:98:f7:
         dd:70:89:ba:1c:2a:e6:33:13:75:3a:59:30:33:43:3d:f7:b8:
         b4:bf:db:05:9b:d9:5c:30:1c:1a:d5:81:cd:eb:8a:31:5f:45:
         d5:79:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:26 2025 by rpki-client