Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File:                     JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier:          boUu0XeZGIOZmATkot0plldp4pd4kZePFzIrn2C+OwQ=
Subject key identifier:   60:77:5B:FB:C8:7A:9C:B2:C3:6F:BD:99:62:9D:B3:81:6D:10:78:7F
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer:       /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number:          014C
Signing time:             Fri 19 Sep 2025 04:51:12 +0000
Manifest this update:     Fri 19 Sep 2025 04:51:12 +0000
Manifest next update:     Fri 26 Sep 2025 04:51:12 +0000
Files and hashes:         1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: 0pw52dmsAZEdGP3axjvGwWAeEvQaiMKn670MP5+E2pY=)
                          2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=)
                          3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
                          rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 04:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
        Validity
            Not Before: Sep 19 04:51:12 2025 GMT
            Not After : Sep 26 04:51:12 2025 GMT
        Subject: CN=68cce140-b3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:b8:69:dc:1a:c3:8e:47:6e:82:0d:2c:63:
                    c5:6d:13:4e:78:73:d8:32:20:28:c4:c7:d0:4d:2b:
                    53:b0:41:65:46:f4:56:3b:ae:c3:91:1b:ae:86:8a:
                    b7:21:54:46:f6:a5:f0:68:10:91:d0:e9:55:ab:52:
                    b6:9d:df:cc:a3:97:cf:b9:e8:ac:ef:d3:d9:1e:5b:
                    35:9a:a5:d5:f0:c3:b9:e9:7a:4d:d0:00:4a:57:c6:
                    23:42:3e:9a:3f:ef:77:02:6b:21:89:8e:ff:2a:cf:
                    ae:76:6e:14:a5:06:a0:05:9e:8a:63:3d:b9:8f:d0:
                    f0:6f:0f:92:08:84:88:1d:8f:95:61:cd:ea:0b:9f:
                    a2:57:c8:78:53:36:8c:f1:34:70:cf:be:7d:72:c1:
                    06:51:3b:a0:e3:6a:09:9d:12:78:4f:af:16:9e:46:
                    52:5b:da:ef:94:71:9d:8e:89:65:3e:7f:22:c6:0f:
                    eb:18:56:d3:b7:47:e1:6f:ab:71:d1:2f:37:35:92:
                    f2:4d:71:18:ff:03:71:0c:c8:95:4d:ca:62:e4:fe:
                    4d:83:5c:fe:93:be:6f:e7:d2:5b:f2:4f:c9:76:ee:
                    43:dd:70:d6:da:b1:b3:01:f7:8c:85:26:72:a3:69:
                    05:c8:3f:b8:a0:98:82:85:48:47:b9:fe:82:b2:63:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:77:5B:FB:C8:7A:9C:B2:C3:6F:BD:99:62:9D:B3:81:6D:10:78:7F
            X509v3 Authority Key Identifier:
                keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:d1:f7:3c:31:78:a4:50:46:32:44:aa:c8:ad:40:99:31:
         db:e9:fa:2b:03:64:a4:58:54:6b:5c:8f:04:86:c2:37:c5:9c:
         72:e6:b4:f3:1e:a3:4c:fd:3c:63:33:6f:d9:28:79:50:ef:76:
         cf:c0:45:2f:d5:04:e6:01:98:74:b7:84:74:a9:7d:0b:e2:ae:
         7e:11:a3:21:e7:d4:25:c3:6f:73:49:a0:ba:2f:71:89:4d:b6:
         2a:47:7e:cd:8f:11:79:8c:17:31:03:97:7d:6d:28:47:e6:1a:
         04:63:9b:f1:0a:47:a5:2a:b3:fd:b5:62:5a:29:66:64:af:1b:
         89:10:2b:d2:95:a7:f3:cc:9c:7b:c9:45:8e:e6:7a:28:8f:13:
         24:8a:a4:7b:eb:9e:67:4b:a4:7a:da:83:a6:28:4f:7e:4c:78:
         59:4d:e3:c7:c6:0d:ef:3e:09:dd:5c:e0:69:50:ef:cf:57:53:
         14:bf:5f:24:b0:99:ae:3b:5d:9c:c1:e4:5f:c3:11:82:4f:7c:
         60:28:b8:fe:9a:26:d2:fc:b7:eb:43:f2:3a:01:82:eb:ab:71:
         a0:f5:55:e9:a0:53:ca:ec:49:b9:34:8c:35:b0:2b:ad:79:f3:
         93:4f:c9:28:ea:5b:a0:9c:c1:09:7c:f2:83:58:d9:25:d5:b3:
         8b:be:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:11:35 2025 by rpki-client