Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          Vdx/AbABNiSJ311gvK8pbMz/iUyWc9IF6nAbrFc05Ww=
Subject key identifier:   E6:57:31:55:5D:BE:1D:02:C0:71:30:F4:8F:1E:41:34:D9:D0:FC:02
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          02F5
Signing time:             Wed 05 Nov 2025 01:19:25 +0000
Manifest this update:     Wed 05 Nov 2025 01:19:24 +0000
Manifest next update:     Wed 12 Nov 2025 01:19:24 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: R1VyTJ15OWRGeNaGgzibOsIq1LZms4cB2zC1tHN6qko=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Nov  5 01:19:24 2025 GMT
            Not After : Nov 12 01:19:24 2025 GMT
        Subject: CN=690aa61c-3316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:9c:ca:9b:4e:6e:76:a3:cf:46:d9:19:0a:
                    83:57:4d:06:8b:ea:8d:e6:61:25:8c:75:99:b2:5b:
                    09:2c:fe:7f:db:3f:01:04:76:6e:4c:5a:0a:d1:ee:
                    51:39:f4:b6:01:25:00:15:e4:d1:e7:d3:83:91:be:
                    2d:46:ac:6d:8f:f5:f4:20:35:76:0e:4e:4a:60:8f:
                    0d:87:90:e7:39:46:b8:65:ed:71:60:4c:1b:84:f4:
                    f4:e0:f5:ab:93:d6:6c:0d:ff:d2:4b:a4:f3:5c:b5:
                    4e:37:96:b2:df:df:ed:fc:0f:cf:50:f8:7e:5a:0b:
                    d2:88:5e:60:66:d6:7d:0f:3a:62:3d:1c:d4:8f:9c:
                    1a:f3:7e:38:b6:fe:80:cf:81:36:c5:41:d9:9a:db:
                    eb:5e:03:5d:4a:93:48:c0:99:fa:7f:90:02:cf:ea:
                    f6:6a:ac:15:18:1c:77:cb:be:2d:03:98:33:23:f3:
                    8d:8e:f3:3a:d6:50:45:54:a3:ef:95:4f:ff:0a:a2:
                    ae:b7:0a:90:47:d6:78:7b:ef:5c:7c:e8:16:df:7a:
                    8e:b0:03:4c:ab:11:c5:85:13:41:47:63:ae:1f:95:
                    77:e6:46:83:a6:ae:51:be:7b:7f:ce:02:5a:a8:28:
                    88:10:51:43:90:64:93:9e:e7:1b:66:4f:13:9c:92:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:31:55:5D:BE:1D:02:C0:71:30:F4:8F:1E:41:34:D9:D0:FC:02
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:b1:97:77:c4:3a:e5:1c:be:6b:c1:2e:c5:af:71:ec:e8:
         e8:6c:f8:cd:5d:f7:e1:03:12:43:5d:bb:16:b0:bc:41:c3:17:
         67:03:ee:1c:1c:e4:61:d3:68:75:1b:82:9d:3d:58:b0:93:44:
         ee:1f:c9:62:cd:57:b4:e0:9b:03:3d:db:33:90:64:29:c8:53:
         8d:70:b9:53:e2:f5:ca:7e:f1:f8:8a:91:d0:5a:f3:9f:61:dd:
         ec:b3:3f:5a:4c:8b:63:c7:b1:e0:77:e1:a8:b3:28:09:00:98:
         14:4e:df:b0:74:8e:f9:f3:b7:cc:15:fb:3f:7f:1c:ef:2c:37:
         c7:40:5b:99:4e:5a:3e:dd:31:2e:ce:14:79:7f:66:bc:e5:63:
         39:dc:3c:56:79:f8:d2:86:9e:fb:7f:dc:07:12:4e:3f:59:82:
         da:24:27:1a:43:88:51:96:4d:71:cb:ad:39:d9:a4:b6:9a:85:
         57:04:ad:45:a4:24:06:a1:c7:4b:85:80:c0:78:77:41:b3:47:
         26:e4:f3:46:84:bd:8d:d4:f9:9a:6e:7f:7b:13:fd:43:1d:b7:
         20:39:22:dd:0e:72:df:86:35:45:6c:e3:8c:91:44:d1:5c:28:
         fd:87:2b:4b:d0:c5:9d:d0:18:5e:a6:63:9e:28:c7:2d:da:84:
         b4:d6:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:26 2025 by rpki-client