Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          5HyNXQbu8MQrabjBoIUxZu9TK9AC2b0H0dPpm4qwQag=
Subject key identifier:   E3:DA:F8:28:9A:FB:78:ED:45:34:A3:86:92:18:B8:98:54:69:7A:CD
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          0373
Signing time:             Wed 05 Nov 2025 00:58:34 +0000
Manifest this update:     Wed 05 Nov 2025 00:58:34 +0000
Manifest next update:     Wed 12 Nov 2025 00:58:34 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: nI97AGPKdFhOv79uIppllcYxmOPtjrpd/KzrX03Z5Cc=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Nov  5 00:58:34 2025 GMT
            Not After : Nov 12 00:58:34 2025 GMT
        Subject: CN=690aa13a-ab60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:a3:b8:a2:1f:99:0b:33:ad:61:34:88:d7:
                    6d:64:3f:c0:11:2e:d0:f3:10:30:cb:e7:8f:67:6c:
                    7d:26:2e:b3:3a:da:a3:3c:9d:0c:ff:d1:e7:fb:5d:
                    8f:7f:24:a4:2e:2b:38:89:86:e6:d2:9f:93:56:1b:
                    c0:48:52:49:24:a7:46:ae:82:1c:4b:c9:2e:69:28:
                    b5:58:d5:ca:5b:9e:40:f0:2d:5d:a1:f8:5b:18:0a:
                    a8:78:c3:3e:25:24:9e:6f:97:07:8f:7b:2a:b0:68:
                    dc:cb:60:22:bb:de:ce:ef:3b:34:37:f8:23:52:af:
                    da:8f:13:6c:60:8e:84:ef:0b:d9:3c:98:66:eb:0c:
                    18:68:5f:b3:d8:be:77:26:26:9f:dc:0e:34:fb:8c:
                    4a:67:5f:56:6e:2c:d5:40:21:48:e5:ec:a1:9e:65:
                    41:63:1f:23:93:5d:d2:0c:8c:75:12:65:9a:6c:a6:
                    cc:18:2e:f0:fe:65:57:2e:4a:f5:39:f3:83:dd:e3:
                    2b:d8:3a:7e:3b:2d:50:09:fd:5f:60:22:05:03:2c:
                    82:ab:06:f5:11:9b:0e:db:dd:e1:ae:04:3b:81:06:
                    bd:12:1e:68:5c:20:2d:57:b0:1c:93:ed:6a:a1:ab:
                    cf:77:74:76:6f:92:ce:2c:8b:f0:47:6b:95:80:67:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:F8:28:9A:FB:78:ED:45:34:A3:86:92:18:B8:98:54:69:7A:CD
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:d8:fb:45:02:a3:0e:62:c6:42:02:b1:8a:b2:4d:06:a2:
         b3:18:88:b3:e8:80:6a:ca:37:3e:0f:90:d5:2b:ff:f8:bd:81:
         e6:42:b5:0c:89:bd:d5:1a:b4:d5:15:c6:de:90:77:a0:e0:59:
         9f:2b:56:78:44:8c:d4:2f:f9:c0:26:15:fd:57:61:71:55:fe:
         d1:a5:28:ce:10:7a:54:6f:07:5b:5a:32:a0:8b:df:15:98:35:
         f1:11:c2:e5:36:41:b5:4d:96:e4:15:da:39:e0:cc:7e:d4:22:
         45:ac:19:45:1e:fd:87:af:d8:df:4e:52:fe:84:bb:30:63:85:
         a3:13:dd:24:8e:1f:f3:58:44:7e:12:12:f2:17:65:22:79:1b:
         a7:de:a4:84:34:91:72:80:cd:f7:75:d4:48:a2:e0:89:f7:5c:
         51:52:1c:f6:37:75:ec:91:e1:6d:7f:da:07:92:6d:25:54:b8:
         7f:18:8f:02:b8:c6:75:22:7a:64:ae:22:62:ec:85:0a:93:da:
         1d:17:ea:9a:86:e1:d4:a9:b8:b1:2e:c4:5a:ef:ff:d1:74:ac:
         7e:ec:4e:17:2c:74:4f:3e:3d:04:6b:81:48:f1:d9:9a:a2:83:
         7b:f6:4a:f7:0d:4b:e3:d0:59:86:3c:fc:fc:15:92:75:c6:b0:
         1f:82:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:12 2025 by rpki-client