Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File:                     JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier:          UYeqjPhdNAVSpvjvJknXYHmyDY27mGuFkWOWst0Ixec=
Subject key identifier:   6F:CD:97:67:04:90:B1:BB:87:01:5B:C5:E6:F6:8F:9E:6F:94:D5:73
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number:          6E
Signing time:             Mon 03 Nov 2025 06:55:41 +0000
Manifest this update:     Mon 03 Nov 2025 06:55:41 +0000
Manifest next update:     Mon 10 Nov 2025 06:55:41 +0000
Files and hashes:         1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: nONEO6DvzJqi3P99a4Xu/tOQmGeKqd2xCPAURDwEVdY=)
                          2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Nov  3 06:55:41 2025 GMT
            Not After : Nov 10 06:55:41 2025 GMT
        Subject: CN=690851ed-54e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:b8:83:65:6b:e0:99:f0:ac:f9:bc:03:44:
                    c9:52:f3:98:e9:b4:6f:b3:7b:20:e5:c2:af:76:85:
                    20:3f:b1:90:60:eb:11:57:22:77:d4:d7:a2:64:bd:
                    4a:07:83:d8:7e:24:dd:a9:6f:23:17:d7:06:7e:c2:
                    eb:49:95:6f:fa:ea:c4:4b:7e:0d:72:36:15:c9:f3:
                    5e:07:42:4c:74:bd:9a:bc:c1:7a:75:ff:26:72:1e:
                    42:9c:f3:06:e1:d8:8c:08:89:ba:fd:3f:40:94:f2:
                    5c:ed:30:b7:63:45:d7:34:78:56:dc:ab:7d:77:8b:
                    ef:44:c3:fd:c5:21:7f:96:a5:46:90:20:c2:7c:1a:
                    46:88:57:75:de:85:9d:61:ec:4e:c0:93:8a:46:57:
                    63:ba:fb:0d:32:6e:41:0a:f0:0a:2f:24:83:de:92:
                    a7:f3:4a:8c:92:3a:a1:9d:94:57:76:e4:6f:20:4a:
                    3b:ec:c6:48:1e:3a:58:6c:1e:8a:6e:fe:86:8d:2e:
                    d5:28:99:8d:da:6c:0b:56:9c:4f:f5:ca:18:a6:39:
                    4f:18:62:1c:77:9a:2d:13:12:71:45:c7:9a:ce:b9:
                    23:4c:c1:aa:1d:1f:2e:45:a2:65:c3:5f:d7:86:05:
                    9b:60:77:e4:f4:64:2d:7c:37:27:65:66:27:72:83:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CD:97:67:04:90:B1:BB:87:01:5B:C5:E6:F6:8F:9E:6F:94:D5:73
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:bf:b6:5a:14:5e:85:41:4f:ee:31:f2:21:b2:93:8b:19:
         fe:e8:4e:07:17:05:22:03:9d:84:b4:d1:3c:66:1a:08:9b:fa:
         3e:b8:29:1e:3b:c9:b1:f8:c1:41:6a:b7:f2:78:13:76:23:2f:
         ac:ae:d1:6b:ff:3a:db:2b:1c:95:e5:64:df:07:19:57:b3:f5:
         15:e6:03:67:80:01:f5:45:89:72:ca:44:5f:7e:8f:35:89:36:
         8c:9f:2d:17:4e:3e:02:3e:a4:77:96:f4:fe:94:3c:c7:5b:3a:
         c5:77:10:8e:7a:72:b4:2e:ce:8c:b6:83:64:74:cd:f6:48:10:
         e0:eb:f8:11:02:70:b9:95:b5:7b:e6:a1:0e:8b:dd:4a:44:f7:
         37:f8:ed:cf:71:6d:17:d3:6c:1b:e2:d7:6b:84:c9:63:b9:88:
         a8:fa:12:91:d1:6a:df:03:45:84:f7:16:8b:ea:70:32:53:1a:
         b9:fc:bf:27:9e:bf:57:8a:34:b0:21:43:2d:64:75:c9:99:9c:
         1a:ca:01:cf:5d:14:cd:7d:f8:ab:ba:6d:06:d5:a4:dd:f3:ea:
         ec:ab:e3:6a:ff:99:a2:37:40:81:5a:1f:11:3e:5f:91:d8:ac:
         42:2e:71:fd:ed:1d:1b:90:a8:8f:f8:1d:63:01:2d:1c:d9:88:
         31:35:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:35:04 2025 by rpki-client