Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File:                     JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier:          pg9amXYY9wbr9I/teCgjLBi1cZ65OhptvSNFTHJIsnQ=
Subject key identifier:   42:EB:0E:0B:5C:9A:B4:C5:08:50:4B:6F:1C:EC:A4:E4:BC:DA:A4:45
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       0989
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number:          0974
Signing time:             Fri 08 Aug 2025 20:28:26 +0000
Manifest this update:     Fri 08 Aug 2025 20:28:25 +0000
Manifest next update:     Fri 15 Aug 2025 20:28:25 +0000
Files and hashes:         1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: 45spXrWOJEt6qqlwX007uln+Oz9oAseFmuZS8cdd0WY=)
                          2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=)
                          3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=)
                          4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Aug  8 20:28:25 2025 GMT
            Not After : Aug 15 20:28:25 2025 GMT
        Subject: CN=68965de9-3a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:90:bd:5d:a8:44:01:83:45:85:42:fb:05:
                    90:92:92:49:67:2a:a9:9c:3e:d9:6c:18:4b:b1:64:
                    0f:9b:ce:11:18:72:6d:f5:8c:54:09:07:00:2c:b2:
                    8b:37:4d:2f:09:f1:56:16:2c:06:7a:db:cc:f3:be:
                    00:3e:ea:8a:6d:33:c0:6c:1d:2b:6f:9a:24:dd:89:
                    b7:4f:8a:41:d3:36:48:0c:30:ea:55:2b:6a:41:d2:
                    bd:48:90:d0:3e:0b:4e:0c:bd:71:8a:30:1f:7d:53:
                    95:0f:86:f1:2c:16:fe:87:3b:16:26:00:4a:88:cb:
                    f6:db:88:3f:0f:61:f6:d8:5f:8e:15:cd:e8:80:53:
                    45:65:27:47:e2:df:be:81:66:ca:9c:43:22:05:aa:
                    ef:8e:d3:fa:f5:25:e3:c3:cd:e8:52:89:18:10:b2:
                    bc:d4:28:51:76:d7:31:92:f3:b5:c2:ad:82:c5:f6:
                    15:7c:a4:ed:be:30:22:1c:a0:40:e5:9b:96:5b:11:
                    82:c1:3b:08:65:d7:31:98:a3:77:21:12:56:27:f9:
                    ed:37:b3:3a:9f:26:4b:2b:cf:e1:c4:ae:8f:40:c0:
                    d4:a1:31:11:a4:cb:a5:4d:c6:12:1c:ed:e1:42:2e:
                    44:87:3f:4f:c4:8b:ca:30:06:01:f0:53:54:73:fc:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:0E:0B:5C:9A:B4:C5:08:50:4B:6F:1C:EC:A4:E4:BC:DA:A4:45
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:de:1c:4e:56:87:49:de:53:5a:0f:6d:75:6a:59:32:ff:
         e7:73:d1:82:f4:c0:2c:a8:91:a2:f9:62:f0:62:3b:16:10:80:
         df:06:2d:79:12:68:33:3b:21:bc:01:9c:89:27:4b:33:cf:f5:
         51:42:8b:a7:c2:66:45:d9:5d:29:3f:a2:f5:a7:ed:fb:20:6f:
         fc:5e:fb:ee:5a:3a:ef:9a:1c:59:aa:df:14:16:66:53:e2:3f:
         05:e5:d0:56:26:85:19:65:9d:d0:44:0e:7b:d3:9e:eb:11:3a:
         b0:2c:2a:35:27:57:5a:60:95:d9:86:42:e7:4d:2f:fb:b0:fb:
         a3:6d:23:31:57:a0:81:51:72:52:43:9b:ec:2e:ee:2b:03:4f:
         7b:bd:a4:58:4a:d4:4c:7e:ef:27:63:64:1f:91:fd:26:f9:51:
         80:d2:36:2c:ba:24:f6:78:65:99:16:04:35:4f:9d:49:7d:20:
         08:5f:1a:02:cb:0e:41:2e:27:cb:d8:33:cc:32:5b:ec:fd:56:
         7e:27:9b:13:02:18:26:d3:2f:5e:fa:63:94:65:c8:a9:be:87:
         b4:d5:2b:46:f8:06:70:18:2d:20:8f:4e:63:ae:40:1d:87:ee:
         7a:28:ac:42:cb:5d:3e:05:8b:87:3a:2c:49:23:3a:c6:7a:96:
         d6:c5:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:10:25 2025 by rpki-client