Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File:                     jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier:          IuM8HPy/6CI0fuwJFOmuInXB2Je824DzEMgSiBBZ6SU=
Subject key identifier:   CC:85:C5:D1:59:73:D3:1F:C3:99:D6:AA:8A:35:54:79:87:21:8F:BE
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer:       /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number:          0574
Signing time:             Sun 02 Nov 2025 23:22:49 +0000
Manifest this update:     Sun 02 Nov 2025 23:22:49 +0000
Manifest next update:     Sun 09 Nov 2025 23:22:49 +0000
Files and hashes:         1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: cmQ0FsozXwteghIz60cacRUw+SOHNlW+pyUwfoOKu0k=)
                          2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
        Validity
            Not Before: Nov  2 23:22:49 2025 GMT
            Not After : Nov  9 23:22:49 2025 GMT
        Subject: CN=6907e7c9-b81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:c0:a2:15:a6:7e:40:b4:03:67:bd:56:d2:
                    a0:c4:b2:e7:0d:4a:05:d9:59:40:43:3b:d5:9a:9b:
                    0e:21:71:ae:8c:01:5c:6f:ae:22:b2:53:7e:35:7d:
                    16:6b:1a:cb:eb:5f:b7:53:89:69:1e:25:ca:55:ba:
                    05:76:6d:b2:db:4c:5f:b1:be:d7:c8:9e:db:fb:9f:
                    b0:a1:03:db:bd:e6:5e:88:bf:d8:ff:75:24:ef:b3:
                    8c:8f:87:60:e9:fa:4a:52:ef:9a:0a:19:74:7c:bf:
                    94:d5:29:20:82:b4:97:53:01:e2:7e:6f:3d:dd:9f:
                    0d:47:4a:c9:c5:df:b8:23:d2:7b:dd:80:06:f0:f9:
                    95:c2:b4:77:67:c1:81:d2:ad:4d:49:d3:fb:79:07:
                    8d:66:bb:fe:cb:37:47:0b:3e:5d:8a:47:a4:8b:52:
                    d3:42:a6:81:61:1d:5b:ce:ba:4d:49:65:9c:2b:28:
                    bb:42:f7:e7:49:64:8e:10:5b:33:3d:f4:55:6b:c8:
                    c6:10:97:8b:09:40:27:2a:0f:28:7d:59:6f:3d:92:
                    66:08:be:b0:c2:e0:07:43:cb:39:b6:b1:a3:64:94:
                    05:09:f0:f7:b8:af:50:6c:61:6f:bf:c9:1b:d3:ed:
                    97:9d:67:06:2d:c6:e5:35:2c:32:29:2c:71:17:73:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:C5:D1:59:73:D3:1F:C3:99:D6:AA:8A:35:54:79:87:21:8F:BE
            X509v3 Authority Key Identifier:
                keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:88:ff:60:be:8a:13:b7:9b:37:55:8d:ec:0a:eb:65:53:17:
         a5:81:f0:00:a2:c0:16:0f:3a:9b:ee:b5:23:94:6b:22:ce:4f:
         9f:92:aa:b3:06:9b:cc:e8:dd:b1:d5:2d:e3:c1:50:23:e0:66:
         7c:e0:d4:3b:75:38:8f:5e:1a:a3:f7:c2:9c:b2:78:14:2f:a9:
         cb:82:20:0f:39:b5:1a:75:68:3b:e9:b9:7c:c9:29:cb:13:76:
         20:81:2a:a3:ae:cb:82:62:f2:85:f8:b1:67:57:aa:c5:cd:e5:
         41:10:ef:76:7f:6a:b3:75:68:98:86:5d:34:80:10:81:3f:cd:
         64:dc:2a:90:9b:c2:c7:65:14:30:19:e7:3f:6e:47:21:91:d8:
         8c:f6:ba:00:20:ba:5d:ab:4e:76:08:7b:33:7f:0a:9b:b4:c0:
         f7:64:9d:d8:58:59:43:af:1e:47:c6:84:2d:db:48:4a:df:47:
         b1:a0:9d:04:6b:3f:af:e5:0f:b6:7d:07:e8:4f:8b:28:d3:ef:
         a0:5d:c0:02:da:1b:90:06:c1:f4:ac:3a:03:87:0a:91:31:e5:
         61:ef:ff:38:bd:71:3c:85:f3:86:f6:d8:d4:65:f4:f4:10:40:
         8e:4c:df:68:9f:2b:a7:8a:d6:d6:3d:15:0c:ee:f7:2e:ed:21:
         39:c1:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:44 2025 by rpki-client