Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File:                     JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier:          9vR+LHB/Nx+yoC1/A5GpHeIqIqU007Y+egDImXcmcYU=
Subject key identifier:   62:63:9E:FA:80:22:1C:AD:DB:C1:0D:31:D5:0C:E3:A5:43:CA:BB:E6
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number:          48
Signing time:             Mon 03 Nov 2025 07:20:43 +0000
Manifest this update:     Mon 03 Nov 2025 07:20:42 +0000
Manifest next update:     Mon 10 Nov 2025 07:20:42 +0000
Files and hashes:         1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: JxKoVeDPPj6llIFAAiNx8k8WlFv9DuuPzVZCVuUuaeA=)
                          2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: OZHK+au5UwVImKpl7QVZcEGwIUNhlUMC18l25bqrmZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Nov  3 07:20:42 2025 GMT
            Not After : Nov 10 07:20:42 2025 GMT
        Subject: CN=690857ca-1cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:50:f1:9f:87:57:00:16:91:0e:16:1d:fc:
                    95:0e:ae:05:fb:18:de:d6:f2:c4:04:17:ab:27:a8:
                    d5:a1:27:9e:54:bb:e6:cd:32:91:f7:ca:e9:f0:fa:
                    20:eb:c0:88:4c:d6:96:19:88:6e:ae:c6:ec:ac:75:
                    dd:84:aa:ab:f8:4c:d2:83:d9:f1:0a:42:54:28:44:
                    3a:39:71:80:86:25:9f:7d:96:88:9f:aa:95:10:cc:
                    2a:41:83:fd:86:c4:59:fb:bc:71:df:58:bd:b7:7a:
                    e8:ad:e0:d3:a7:73:30:87:c0:47:34:0f:21:d1:b8:
                    b0:ae:ca:3f:ba:8b:e5:87:b9:c5:5a:09:f0:0e:3d:
                    9c:ad:a6:a5:1c:30:0a:2c:3a:43:8f:2c:3b:a6:27:
                    78:d3:6c:3a:67:24:89:eb:98:05:f1:e6:c3:78:6c:
                    4d:16:be:14:b2:8c:80:dd:69:0a:62:ad:1f:70:08:
                    22:db:29:8d:3b:30:2f:a4:90:eb:87:33:e2:c0:24:
                    ea:79:0b:c1:c7:3a:e3:ac:7f:df:67:d0:a1:14:d6:
                    8d:73:5e:12:0a:43:d5:8a:87:2f:0f:92:61:76:0c:
                    c6:3e:6b:ed:d1:10:18:7b:17:3c:20:42:e1:55:3f:
                    e3:60:fe:8e:48:96:f8:3e:97:7a:61:8d:46:8e:64:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:63:9E:FA:80:22:1C:AD:DB:C1:0D:31:D5:0C:E3:A5:43:CA:BB:E6
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:fe:53:1e:6d:7c:f9:6c:b0:26:80:27:51:00:ba:ef:ae:
         66:84:a8:ba:8b:2a:92:f3:37:5a:47:9f:ca:69:48:47:80:ff:
         87:0a:22:24:84:33:ff:16:c3:e7:11:91:89:86:22:e7:d5:4c:
         47:77:b2:57:18:02:24:96:4e:a7:93:54:eb:20:35:32:f9:df:
         f5:16:d2:e4:d4:9a:5e:28:42:45:48:cf:1f:81:57:d0:10:8f:
         8a:13:1b:f0:5a:bb:5f:3d:18:9f:f1:1a:f4:dc:19:d5:8c:4d:
         86:ff:c2:0c:e0:12:c7:32:4f:ad:54:5e:4f:4e:fc:d2:43:f5:
         0c:b2:f8:52:26:28:c4:49:0c:b0:ff:67:da:29:ef:d3:b9:a3:
         8d:3d:16:50:a2:1c:16:77:3d:ec:8a:de:b3:e3:14:cb:89:01:
         e7:86:f5:19:e3:25:57:0a:a6:62:3c:0f:72:57:09:89:8f:a3:
         27:f1:50:02:ce:18:85:c0:8f:ca:aa:65:39:38:63:1d:9a:fb:
         71:ce:67:09:bf:fb:df:21:9f:0a:fb:f9:e8:1f:a4:42:60:fc:
         9e:58:ff:e5:fe:32:c1:cf:95:6c:c5:8f:db:9b:b8:79:41:bf:
         85:87:19:23:84:42:9d:f0:ad:3c:60:e9:6d:8f:37:7d:da:7c:
         cf:70:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:20:03 2025 by rpki-client