Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          eZpWn/BquivNwi/sh/8mheLsXzwNv6E/O2LDpEQgIts=
Subject key identifier:   2A:76:B7:0F:E3:AB:27:1B:A7:F3:85:D1:8E:DB:6B:6C:95:2B:29:49
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1FC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1F72
Signing time:             Mon 08 Sep 2025 16:01:31 +0000
Manifest this update:     Mon 08 Sep 2025 16:01:31 +0000
Manifest next update:     Mon 15 Sep 2025 16:01:31 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: Z5nOLgoxtBJWExqoxPjgbgoyTKPmoEXffS7xs/BSWD4=)
                          2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ruc/xUwDnNEwkE2/jK0HE26pVyzAxl1jWbriA1MT2XI=)
                          3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: l81KZYm8B7McIqBnNG7M2LbcnjjotjoHq+OGQq2Xixo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8130 (0x1fc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Sep  8 16:01:31 2025 GMT
            Not After : Sep 15 16:01:31 2025 GMT
        Subject: CN=68befddb-47ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:15:e5:ec:74:38:0e:60:8f:41:22:1b:78:
                    a5:d1:15:fb:47:e7:03:28:ef:8e:bb:82:20:86:bf:
                    45:08:a3:d6:1a:e3:81:99:34:8f:21:24:73:eb:cb:
                    67:cf:0a:e9:e5:b6:b8:c6:d5:d3:d9:70:43:46:f0:
                    80:f4:fe:01:88:33:68:e1:20:38:8e:c7:b2:f1:48:
                    de:33:20:33:f3:4f:66:1d:ff:70:9c:b5:56:7f:88:
                    45:27:68:ec:33:66:db:4b:dc:f5:31:e9:1f:15:23:
                    b8:a8:cc:81:b5:47:c1:89:c1:48:38:b0:e5:f2:ed:
                    a1:c3:47:92:2e:e2:ad:b0:24:e9:07:8f:ff:76:fb:
                    50:04:d6:b6:0c:3f:69:aa:39:1e:8f:94:cc:05:89:
                    aa:8d:63:37:e6:f3:74:34:fd:e9:58:18:2e:2e:15:
                    e6:32:f1:75:03:38:60:2d:51:90:e6:bb:fd:d6:72:
                    e3:8f:36:f2:31:09:d4:b2:ac:a7:e8:7a:fe:cc:7c:
                    a1:2f:57:a3:af:1a:5f:00:9b:a1:96:84:86:28:ac:
                    44:fb:d1:a9:b9:8b:67:f3:f0:e3:5b:42:78:c1:21:
                    ba:f6:04:9b:a7:18:6a:0e:89:82:90:db:b8:70:79:
                    71:93:25:0b:0c:c7:7f:f8:40:8a:57:db:a3:fe:33:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:76:B7:0F:E3:AB:27:1B:A7:F3:85:D1:8E:DB:6B:6C:95:2B:29:49
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b7:be:bc:d6:23:a7:f1:4a:ee:17:04:e7:9b:2a:df:f1:9c:
         32:81:d2:d1:b8:69:30:94:2b:49:47:87:a1:b1:98:ab:85:aa:
         1d:b8:19:6a:99:9e:6e:57:e3:84:55:b1:ac:b5:bb:0b:dd:6c:
         aa:88:90:0b:61:db:2a:6d:56:57:e5:c2:6a:db:9d:e0:ba:70:
         ae:e9:d1:4e:b3:ff:bc:13:54:3c:f9:1a:9c:b1:f3:a6:75:a9:
         1c:0f:50:1b:ca:db:1c:95:ec:7b:ee:40:27:47:83:2d:3e:54:
         3a:aa:16:a3:10:f3:d7:39:6b:c6:a3:fc:8d:df:6e:20:af:bf:
         34:a6:52:70:33:a9:15:b3:01:45:8e:ac:29:af:f6:6a:d9:f9:
         1c:6d:ce:92:ea:4f:1e:68:00:17:ef:4e:25:57:f8:19:af:f8:
         2f:f3:00:92:e4:a3:9a:a1:51:f1:05:f2:d2:ff:b1:1a:4b:f3:
         8a:50:65:9f:9a:ac:bf:86:26:69:a8:46:7d:69:60:49:fa:2b:
         8b:ed:73:e3:94:25:43:48:25:0c:69:96:72:3d:81:75:6b:f6:
         b6:ac:58:60:ec:7d:f2:5e:43:02:a1:94:87:93:82:fd:43:ae:
         a2:34:48:d9:09:c8:bd:12:f3:8b:ee:66:31:cc:81:bb:6b:58:
         57:6a:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:20:53 2025 by rpki-client