Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File:                     jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier:          pQOwoJepszSY9D46XWwpG5rUidkLLAr/cRv8qy+UpGM=
Subject key identifier:   6C:FA:10:37:5F:2E:EF:93:F1:EA:21:2D:9E:79:EA:2A:9F:AF:4C:1F
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number:          07BF
Signing time:             Tue 04 Nov 2025 21:28:20 +0000
Manifest this update:     Tue 04 Nov 2025 21:28:20 +0000
Manifest next update:     Tue 11 Nov 2025 21:28:20 +0000
Files and hashes:         1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: 4on/yLBh11GaoZAmbWviryGsfhxrs0gwlT25YTWII40=)
                          2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
                          rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Nov  4 21:28:20 2025 GMT
            Not After : Nov 11 21:28:20 2025 GMT
        Subject: CN=690a6ff4-22a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:7b:21:e1:d2:79:c5:6d:90:02:94:93:82:
                    0b:cf:cb:da:78:05:f6:af:c7:d4:07:28:72:7e:13:
                    e5:05:7d:5c:07:68:a2:e4:39:27:d9:40:44:4d:fe:
                    dd:4a:10:01:f5:5e:b8:c0:5e:55:ff:82:d9:31:20:
                    eb:90:62:91:c5:d1:07:b1:8d:4e:a0:38:20:ae:6e:
                    e2:9a:fa:f9:c6:d9:73:bb:cd:6c:d4:06:ce:80:7a:
                    b7:c1:c2:a1:fa:60:83:65:41:b2:87:7e:fa:b8:9e:
                    b5:d1:3d:1b:8c:d8:23:07:2a:92:49:46:67:c5:2a:
                    6f:60:b7:14:90:2b:c0:8f:ea:48:a7:a0:01:b8:69:
                    cd:78:d4:b5:ac:72:e0:c4:6f:d7:8e:36:87:41:1e:
                    b4:70:4f:80:d7:46:bb:a8:da:2e:36:bb:ad:1d:49:
                    d0:38:ab:94:b1:05:1e:b1:73:b3:0b:1f:01:7a:78:
                    78:00:41:de:9e:54:35:ba:48:a4:2d:7c:1e:86:8e:
                    25:6c:f3:89:42:da:9d:a8:1c:27:35:f1:d9:a1:5f:
                    b1:ac:f6:e0:39:c3:a3:6d:57:35:28:34:9b:40:d3:
                    09:cc:0f:8b:07:79:2b:2f:4b:dc:52:c3:ba:0c:ba:
                    e7:ce:2f:6c:bd:b4:e3:a6:6b:3d:e1:3d:92:52:39:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:10:37:5F:2E:EF:93:F1:EA:21:2D:9E:79:EA:2A:9F:AF:4C:1F
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:e7:91:a4:77:e4:f4:b1:d2:3f:3a:a3:51:90:0b:22:88:
         39:21:aa:6d:f4:79:87:9a:1f:73:79:b7:60:4e:0e:81:d2:4b:
         57:99:8e:c5:4c:36:e9:93:b9:3d:43:0b:1a:62:dc:ca:aa:98:
         21:2e:1f:83:59:8d:e5:39:99:33:6e:45:fc:69:5b:0e:e3:e8:
         48:d4:49:9f:81:ef:9e:d1:ab:72:27:68:8f:da:64:9d:32:23:
         4c:c8:c8:73:6d:08:17:ae:96:d5:98:02:ee:23:b1:97:68:4d:
         df:96:46:84:e3:02:cd:3f:c0:74:a8:ec:39:1f:83:c3:dd:20:
         98:40:56:cb:92:a8:fa:4d:61:74:59:79:1c:73:9c:98:b5:c7:
         49:f6:2e:6d:6e:a4:e3:59:35:6c:a9:00:9d:6a:68:2b:16:d0:
         6f:6d:93:99:0c:93:08:f4:53:d7:00:b2:72:b1:c1:4c:e9:97:
         4a:4c:57:60:00:2f:4f:03:9b:5b:12:d8:94:0c:d6:33:ec:5c:
         d5:3f:e6:a4:93:7d:d7:46:dc:af:13:11:02:40:1d:c2:bd:4c:
         a8:a7:fc:1c:18:1b:eb:f1:77:98:0a:5f:d3:8c:12:23:47:95:
         a3:ba:3c:48:d0:a0:35:4a:fe:d3:b5:60:68:a6:51:6c:51:71:
         6f:8c:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:42:14 2025 by rpki-client