Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File:                     JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier:          wT474OVEo8Qzgd2cLIdjGFPsQkdankZEjPUKMGezXBs=
Subject key identifier:   46:D6:B0:D0:D0:DA:99:0B:99:0A:06:19:A9:77:19:95:E0:F4:4F:2C
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer:       /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number:          B7
Signing time:             Wed 05 Nov 2025 02:22:28 +0000
Manifest this update:     Wed 05 Nov 2025 02:22:27 +0000
Manifest next update:     Wed 12 Nov 2025 02:22:27 +0000
Files and hashes:         1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: IOM+osUgijtTTvLAxm4x036aGMLQcm/7Zr/+1UjHFOY=)
                          2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ze1T47AivqwEiqsuxqeYxl8UpGN8xGhxkmK8W5sniC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
        Validity
            Not Before: Nov  5 02:22:27 2025 GMT
            Not After : Nov 12 02:22:27 2025 GMT
        Subject: CN=690ab4e3-9df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:82:8e:be:27:ce:96:e5:1f:0e:bf:30:dc:
                    e7:73:19:54:e2:bf:0d:00:71:6a:78:6e:34:f9:0b:
                    03:34:9f:38:0f:a2:17:b6:a6:5e:3a:a3:10:2e:93:
                    fa:5e:4d:bc:b9:42:5b:41:28:fd:7d:3b:b5:d0:f8:
                    d1:8c:8c:58:48:2c:ce:14:8f:84:b7:03:7a:8b:2a:
                    ea:54:1a:9d:dc:6b:61:83:9e:12:4e:19:dd:d5:9c:
                    ef:4f:25:82:a4:b4:1c:e2:ac:12:83:43:04:37:6a:
                    46:20:4a:8c:18:6c:47:68:2a:a5:85:3e:0d:51:33:
                    14:72:2f:51:e4:6f:51:9b:88:44:10:1d:4d:ca:82:
                    87:55:df:fd:4b:db:de:ca:b4:13:44:de:26:0a:7b:
                    30:77:6c:c7:d4:56:c8:bc:89:f3:93:68:38:5a:36:
                    0c:d2:67:3a:bd:aa:f0:57:57:a4:7d:17:11:ef:a6:
                    97:5f:81:46:f3:48:f9:91:53:4b:fd:73:37:06:65:
                    5a:36:ce:c1:d4:ad:9c:46:b3:98:b9:ad:7a:76:42:
                    75:a5:82:1b:34:51:f4:df:92:20:1a:cc:93:90:a6:
                    11:7c:2d:dc:94:9a:20:34:d0:14:06:0b:d0:cc:0b:
                    9b:13:a3:d7:38:49:76:69:4c:40:4f:ba:48:50:ac:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D6:B0:D0:D0:DA:99:0B:99:0A:06:19:A9:77:19:95:E0:F4:4F:2C
            X509v3 Authority Key Identifier:
                keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:36:1a:60:40:31:d5:34:70:0f:87:c2:4e:4b:27:6d:d7:6a:
         48:a3:15:61:0d:7a:76:bb:1c:7b:0f:94:13:86:7f:71:d9:54:
         d2:64:2d:c5:c0:d5:06:fd:28:02:fb:10:49:6a:de:4f:e9:82:
         6c:27:11:49:e8:9a:c8:27:26:0a:10:7a:35:ed:56:b8:6e:13:
         0d:1e:53:06:9d:5c:f4:fe:e6:5f:6e:c4:6a:1b:8c:c8:57:86:
         9e:da:52:2f:e2:39:97:b1:ff:0b:b4:25:0e:a2:b3:4a:70:b0:
         5e:9f:c5:ce:77:1a:05:21:f2:96:4d:3f:7f:58:9c:81:65:4c:
         78:60:2f:e4:31:89:03:8d:fc:3e:ae:cf:a0:d3:51:d5:47:4b:
         53:63:9c:dd:43:db:4d:ad:ad:a3:89:f4:81:cf:40:73:54:11:
         6b:af:71:51:7e:0b:4b:66:ed:e9:7a:87:58:e6:40:54:eb:87:
         a5:6d:41:c5:4d:6d:1e:68:16:64:3e:cb:a0:37:1e:dc:8e:b3:
         dd:1b:ff:c6:f0:05:e1:a3:50:99:4e:1f:e9:3a:55:9f:b1:06:
         24:1c:1a:d8:22:2a:c4:3b:4b:82:68:56:19:ed:24:7b:f0:70:
         4b:71:b9:19:f8:fe:11:e2:05:6a:5a:14:da:8d:45:c8:89:35:
         25:fc:b1:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURBMjYxMTAvBgNVBAUTKDI1MkMwMEU5N0U3QTc4Njk1OTM4OENGMjA0QTRDN0U2
NDU1ODBDNjgwHhcNMjUxMTA1MDIyMjI3WhcNMjUxMTEyMDIyMjI3WjAYMRYwFAYD
VQQDEw02OTBhYjRlMy05ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7XmCjr4nzpblHw6/MNzncxlU4r8NAHFqeG40+QsDNJ84D6IXtqZeOqMQLpP6
Xk28uUJbQSj9fTu10PjRjIxYSCzOFI+EtwN6iyrqVBqd3Gthg54SThnd1ZzvTyWC
pLQc4qwSg0MEN2pGIEqMGGxHaCqlhT4NUTMUci9R5G9Rm4hEEB1NyoKHVd/9S9ve
yrQTRN4mCnswd2zH1FbIvInzk2g4WjYM0mc6varwV1ekfRcR76aXX4FG80j5kVNL
/XM3BmVaNs7B1K2cRrOYua16dkJ1pYIbNFH035IgGsyTkKYRfC3clJogNNAUBgvQ
zAubE6PXOEl2aUxAT7pIUKyHXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbWsNDQ
2pkLmQoGGal3GZXg9E8sMB8GA1UdIwQYMBaAFCUsAOl+enhpWTiM8gSkx+ZFWAxo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi9GNTEwNUU0Q0Ey
RjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVHbFpPSXp5QktUSDVrVllE
R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pTd0E2WDU2ZUdsWk9JenlCS1RINWtWWURHZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REEyNi9GNTEwNUU0Q0EyRjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVH
bFpPSXp5QktUSDVrVllER2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnNhpgQDHVNHAPh8JOSydt12pIoxVhDXp2uxx7D5QThn9x2VTSZC3F
wNUG/SgC+xBJat5P6YJsJxFJ6JrIJyYKEHo17Va4bhMNHlMGnVz0/uZfbsRqG4zI
V4ae2lIv4jmXsf8LtCUOorNKcLBen8XOdxoFIfKWTT9/WJyBZUx4YC/kMYkDjfw+
rs+g01HVR0tTY5zdQ9tNra2jifSBz0BzVBFrr3FRfgtLZu3peodY5kBU64elbUHF
TW0eaBZkPsugNx7cjrPdG//G8AXho1CZTh/pOlWfsQYkHBrYIirEO0uCaFYZ7SR7
8HBLcbkZ+P4R4gVqWhTajUXIiTUl/LHN
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:59 2025 by rpki-client