Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          QAiJZg/pLLL+mMOw1YDKfyqUD13LxjcgSPO9V3Z9D+M=
Subject key identifier:   8F:5C:F6:C8:CA:F4:1C:A4:06:C7:9D:53:FB:44:F9:00:35:0B:59:9C
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0CCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0CC5
Signing time:             Wed 20 Aug 2025 18:12:46 +0000
Manifest this update:     Wed 20 Aug 2025 18:12:45 +0000
Manifest next update:     Wed 27 Aug 2025 18:12:45 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: cpJi7/QP0mHLrMnFg77T7CUhcOYXYyNkn+csvnXRtWo=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Aug 20 18:12:45 2025 GMT
            Not After : Aug 27 18:12:45 2025 GMT
        Subject: CN=68a6101d-ffde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:93:54:11:eb:d7:ba:bb:a1:a0:9d:5e:b9:
                    99:d3:6d:8e:9b:39:b6:03:d0:c9:1a:99:74:e6:dd:
                    a7:2f:00:66:ef:86:fa:b3:ce:cd:76:91:0a:2c:25:
                    fe:7b:94:9f:4b:da:63:2c:a3:ab:81:b9:02:cd:1d:
                    93:65:30:12:f9:7f:b6:b1:27:70:aa:48:b2:60:b5:
                    e0:bd:1e:09:01:cd:ab:0a:9f:86:c0:fc:28:a1:76:
                    c1:c6:9a:89:22:fc:02:94:f1:70:f8:f4:ce:48:eb:
                    63:b2:52:be:59:6a:f2:74:73:93:39:55:c8:71:e9:
                    f3:0f:cb:45:99:c9:6c:d8:42:e7:be:15:78:45:14:
                    fd:0c:12:c3:0b:0d:aa:88:e1:81:b3:08:27:e7:ef:
                    d8:75:c9:ca:fd:a1:21:81:ef:1c:f3:5e:8f:98:04:
                    b9:12:c1:12:72:4f:c1:73:48:71:57:e3:ca:b6:12:
                    ae:a7:dc:d3:2f:d9:73:6b:bf:5a:dc:bf:b6:c7:b6:
                    40:84:03:04:b9:0c:31:c7:19:cc:fb:47:3c:3d:49:
                    20:0d:68:bc:64:d9:5c:cc:9c:94:a5:d3:95:c1:e3:
                    e9:1d:dd:ea:59:54:50:f5:ab:47:8b:0b:d4:2e:35:
                    74:83:3d:47:2d:2e:56:f1:f3:7a:59:40:bc:0a:61:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5C:F6:C8:CA:F4:1C:A4:06:C7:9D:53:FB:44:F9:00:35:0B:59:9C
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:c2:e6:b8:22:08:23:6c:d2:9c:b5:43:59:94:a5:0c:1f:
         c3:0f:cf:6c:24:6f:76:57:2a:2c:2d:62:e7:75:05:c9:76:26:
         4a:f5:e4:19:bd:2a:b2:03:e6:a0:ce:66:e1:04:78:4c:db:54:
         6b:4c:e9:49:94:8d:e9:29:ba:3d:1a:40:43:dc:69:a2:e9:94:
         43:75:df:2d:6e:cd:a8:46:8e:82:ff:26:2c:f5:d6:70:ec:49:
         9d:40:55:25:f4:54:f4:42:07:2a:1a:fb:ac:0e:4b:f9:e6:36:
         c1:3c:3e:cc:50:a1:95:17:e5:10:af:eb:dd:b7:32:72:d7:2b:
         cb:8e:6a:f0:66:cb:bb:72:6a:12:6d:1a:3f:b5:b6:fb:7a:46:
         46:23:9e:27:6f:3c:7d:96:de:5e:7d:4c:20:03:1c:ff:8a:31:
         1f:0a:02:9c:82:48:ea:86:01:e7:fb:d2:cc:55:14:f4:83:d4:
         04:ed:40:c8:55:17:85:73:3e:0d:24:ce:9b:5a:ee:1e:24:16:
         23:22:7c:89:11:6c:8d:7f:d4:55:ac:e0:98:aa:b2:f2:ab:ef:
         0f:fd:fa:be:89:cc:c5:f4:1f:5b:74:1c:d3:5e:6e:24:45:f4:
         b5:ed:38:a7:a8:ef:97:09:c1:4b:97:e3:3e:16:22:74:90:48:
         16:5b:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:24:16 2025 by rpki-client