Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File:                     JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier:          kJuaofUojd1AFgmlcVeCoZUs0NrPnS9+u0G0VdOJaCQ=
Subject key identifier:   22:90:19:84:4C:DE:E8:AE:BD:A3:86:6D:82:BB:22:F8:6B:86:C4:FF
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer:       /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number:          0351
Signing time:             Wed 05 Nov 2025 01:07:53 +0000
Manifest this update:     Wed 05 Nov 2025 01:07:52 +0000
Manifest next update:     Wed 12 Nov 2025 01:07:52 +0000
Files and hashes:         1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: naEwbmsqCQkNGmF+6pcA/I+eELNon9xyvm/hi413V2s=)
                          2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=)
                          3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=)
                          4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=)
                          5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=)
                          6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
        Validity
            Not Before: Nov  5 01:07:52 2025 GMT
            Not After : Nov 12 01:07:52 2025 GMT
        Subject: CN=690aa369-4660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:04:06:2d:90:46:40:b6:2c:bf:96:5b:d6:
                    8b:b2:a1:f1:ec:54:f6:95:e9:69:dd:9a:eb:0e:cd:
                    42:2d:f4:28:7c:9b:15:b2:a6:b2:ee:bd:5f:30:d3:
                    4d:64:42:03:d0:5a:c3:7b:0a:e9:ba:79:e3:ef:b6:
                    b2:c8:90:28:bc:d1:7b:dd:36:b4:33:80:c0:00:09:
                    3e:c9:92:b7:82:e7:41:dd:2d:b3:48:54:44:97:c3:
                    a8:58:d5:59:ad:b1:00:87:20:94:3d:60:66:1f:f9:
                    f6:cf:4a:73:02:98:52:1a:d9:80:6d:aa:4e:c9:dd:
                    64:8c:05:a8:48:4a:7a:76:31:f6:0f:70:44:ef:72:
                    04:89:b7:98:a4:a9:8f:38:b9:1d:a5:79:08:f8:2f:
                    99:a9:dc:91:be:06:09:75:17:e9:21:8d:da:54:13:
                    a2:1e:70:78:8f:09:04:98:cd:e3:10:56:73:d3:03:
                    11:f5:c1:79:71:ee:b6:d5:3f:ac:38:31:ce:59:8d:
                    8b:7e:ab:bb:42:42:a3:41:4d:26:e9:17:8c:04:06:
                    42:b0:9e:7e:18:4c:f2:18:73:7b:a8:b8:42:e6:db:
                    e1:61:f2:e3:39:99:82:64:95:50:6b:19:fb:07:e9:
                    df:f0:4a:f5:ac:f2:92:54:b9:01:69:31:2a:a0:9a:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:19:84:4C:DE:E8:AE:BD:A3:86:6D:82:BB:22:F8:6B:86:C4:FF
            X509v3 Authority Key Identifier:
                keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:02:ce:b2:e0:c4:a0:23:ba:07:1b:e9:ec:1b:89:82:04:ca:
         c4:85:81:24:0c:b5:c1:35:d7:c9:e5:88:64:d8:24:83:d6:86:
         d8:7e:2a:81:de:bb:74:b9:c3:71:b9:b3:46:fb:c5:78:80:03:
         08:a7:66:1b:e9:6a:a8:36:0b:38:95:06:25:e7:3f:31:53:11:
         98:aa:78:78:39:0b:a9:a6:2b:eb:65:cc:ee:69:45:04:68:3d:
         7c:dc:1f:c4:71:d3:73:92:d1:65:94:82:9b:4b:b8:4e:63:e2:
         ce:6b:2b:ec:c2:8e:bd:27:74:b7:38:60:e6:37:2b:45:bb:c5:
         4b:9b:dd:4f:fe:bd:86:0b:7b:36:68:b9:68:93:32:af:57:57:
         b3:b4:54:5d:26:7d:42:f6:5b:f2:4a:47:d1:3e:dc:d5:28:d0:
         37:a6:ec:a7:43:48:ec:2f:12:86:7e:1d:1d:e4:e8:18:2d:3d:
         5e:14:31:4b:34:ce:5f:a4:2c:76:bd:88:a7:06:a5:47:08:21:
         f7:9b:bc:a1:7e:e2:ab:54:1d:80:04:62:6f:58:1a:a8:73:58:
         df:d9:c5:4b:4c:2d:44:7c:68:c1:7e:44:39:5d:68:27:5c:3a:
         42:87:8b:69:db:be:e7:b5:c8:4c:d9:c2:62:ae:f8:e0:e4:6d:
         3d:5f:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:25 2025 by rpki-client