Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File:                     JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier:          dTVD6o95Yv6q7HLVfb7fthoR2ay23UHC0k3kDg4BiIA=
Subject key identifier:   C3:55:91:82:D1:88:72:4B:20:9D:6A:58:DD:37:83:1A:4D:3F:29:FD
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer:       /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number:          B8
Signing time:             Mon 03 Nov 2025 06:05:13 +0000
Manifest this update:     Mon 03 Nov 2025 06:05:13 +0000
Manifest next update:     Mon 10 Nov 2025 06:05:13 +0000
Files and hashes:         1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: reOw3xjobGNxvLzAT1FZdpysPxy8Aa+jmEAavwRa4AQ=)
                          2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
                          rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
        Validity
            Not Before: Nov  3 06:05:13 2025 GMT
            Not After : Nov 10 06:05:13 2025 GMT
        Subject: CN=69084619-3a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:8a:57:c6:14:dd:0d:da:a1:0f:9a:c7:8a:
                    e0:4b:58:58:b3:1d:af:2a:f9:04:f0:6b:79:98:eb:
                    7c:b7:d9:b5:ec:62:fa:f7:29:47:73:5d:47:1c:1e:
                    69:40:17:b2:70:02:36:ec:c7:80:d5:56:93:4e:27:
                    d7:cf:77:39:7f:85:64:12:57:aa:ac:02:05:d2:23:
                    64:33:b7:4e:7b:22:a3:48:f0:a8:74:84:2a:e0:b4:
                    8c:60:47:c2:66:72:e1:6a:5d:41:24:43:78:73:93:
                    4e:1d:e1:f1:57:8f:b5:86:dd:8a:68:cd:3b:cf:96:
                    84:e9:69:f8:05:55:fc:ca:c4:27:72:e9:ea:b9:f4:
                    ca:b1:db:3d:5f:21:ef:78:57:5a:39:e7:68:39:00:
                    6d:4f:94:89:77:20:57:38:a7:6f:3e:a7:52:ef:be:
                    2c:99:37:57:59:dc:4f:cb:06:60:f5:c5:04:57:6a:
                    95:d1:49:f6:a8:61:7d:0f:1b:4c:0a:f9:3f:b6:b5:
                    f0:2c:fa:f9:3c:fb:6e:5f:e2:bb:34:99:59:98:28:
                    93:b8:d1:74:b5:93:7c:58:0f:97:db:a3:f9:ac:18:
                    29:ea:30:da:e6:79:8e:b0:90:a4:2c:22:30:26:a6:
                    f8:51:c9:5c:97:8d:48:27:ee:a3:41:19:36:78:f5:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:91:82:D1:88:72:4B:20:9D:6A:58:DD:37:83:1A:4D:3F:29:FD
            X509v3 Authority Key Identifier:
                keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:89:bf:1a:04:ae:1e:82:e7:aa:d1:f4:1a:ae:20:b3:07:2d:
         a5:bb:96:15:f5:27:34:6f:87:ec:43:64:7d:7a:c7:76:04:ee:
         14:57:5c:53:23:3e:31:fc:be:0c:5f:9c:b2:de:6d:d0:52:60:
         6b:03:fa:63:b6:35:4c:0a:0f:77:f8:c3:54:9d:28:bd:55:21:
         e1:8e:42:37:5c:55:34:21:4c:86:5b:58:dd:ae:f6:24:2f:d9:
         ce:c2:4b:4f:90:37:de:15:5a:e9:6c:90:03:b1:86:10:be:69:
         1c:8f:6a:b0:28:d9:4a:59:34:b6:ea:bc:c6:9f:f8:26:ab:b3:
         0c:a2:49:d0:bf:5f:b2:03:2a:79:66:86:93:ec:8c:82:2e:d7:
         d9:b1:6d:85:22:5e:06:9d:73:99:ab:ad:6a:2e:3d:47:96:8a:
         ef:2c:ff:4f:ff:11:af:e8:ae:86:7a:89:e3:6b:df:55:1e:49:
         29:4d:38:6b:7d:26:b9:30:34:69:4a:bc:f5:5d:31:91:00:be:
         e7:b1:73:d6:69:44:76:d3:b9:fc:3b:bb:b0:6d:06:e9:99:47:
         1c:2b:3e:ca:45:45:7d:33:96:a9:6c:29:d5:19:f2:49:29:cb:
         bd:5a:3d:82:7d:22:fe:22:f1:f8:3f:50:61:b7:cf:76:05:65:
         a0:98:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:02 2025 by rpki-client