Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
File:                     yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json)
Hash identifier:          qO76lzaIX3n4HH3ggpbXK4ylDtDNvyVT3TkvUqNGVLg=
Subject key identifier:   BC:F1:CE:C2:25:5E:B8:D7:A5:1B:8D:2D:66:39:A6:8E:D0:75:07:62
Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31
Certificate issuer:       /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
Manifest number:          30
Signing time:             Sun 19 Oct 2025 11:10:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:10:29 +0000
Manifest next update:     Sun 26 Oct 2025 11:10:29 +0000
Files and hashes:         1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: HUxyHqa3SrvFgInTUb+++2UNu0cktqzw5gxXG+9rCJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl
                          rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
        Validity
            Not Before: Oct 19 11:10:29 2025 GMT
            Not After : Oct 26 11:10:29 2025 GMT
        Subject: CN=68f4c725-93c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:af:f3:0e:f9:1f:e1:60:02:ed:a8:6c:a7:
                    ba:f5:6e:40:77:c2:13:28:f0:30:e9:ef:95:5f:23:
                    d2:47:e6:73:55:0b:b3:14:ad:68:5b:d7:fd:04:4c:
                    20:5a:ce:c4:41:10:1b:a1:35:56:d8:4a:1a:37:72:
                    9b:ec:fe:00:b1:0a:52:2e:e6:e3:6c:a1:0d:c2:23:
                    9c:35:05:74:62:66:d4:f5:95:5e:15:98:c9:a3:64:
                    d8:00:30:11:f4:8c:08:61:f7:13:f2:65:34:64:11:
                    5f:58:42:db:7b:2b:ec:a9:bc:76:96:3b:63:03:1d:
                    a4:d6:a7:9a:e2:f5:28:70:40:d4:a6:17:8f:85:2a:
                    88:ad:2b:5a:66:31:63:f3:ff:86:b0:b1:7b:ba:15:
                    8c:06:f3:fc:2d:8c:98:04:61:41:d2:b7:ce:5e:4e:
                    7d:8f:a5:52:e3:11:98:e0:fd:a2:54:94:b7:ba:48:
                    78:bb:2a:fd:67:2c:9b:0c:d3:1c:dc:d5:81:32:00:
                    a3:73:26:7a:42:c5:91:bc:61:ba:3f:e7:7f:fd:6c:
                    e7:6b:96:af:dd:27:e3:b3:14:af:91:9e:e8:03:15:
                    9b:ce:46:26:bb:b7:c5:eb:53:eb:27:fb:34:c9:cf:
                    7c:bb:a6:2f:4f:1d:29:3e:b3:d3:e2:ff:53:a9:6b:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:CE:C2:25:5E:B8:D7:A5:1B:8D:2D:66:39:A6:8E:D0:75:07:62
            X509v3 Authority Key Identifier:
                keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:66:38:db:e7:e6:a6:9a:e0:d7:d1:10:30:7a:a1:b4:24:
         bc:32:63:3f:ee:f5:61:65:f8:25:c4:23:2a:c3:c8:62:f3:f4:
         ba:2d:a3:c4:72:68:10:a1:a2:97:82:12:05:6f:9a:a6:2b:b8:
         ce:be:66:e3:ab:ee:59:34:28:5c:f5:33:da:ec:0e:c5:41:b0:
         1e:ad:2d:b6:bd:fb:b1:18:db:11:cb:a0:e2:c8:5e:91:3f:af:
         51:1d:c9:b0:6a:2d:84:dc:c5:3b:89:bc:dd:e2:a9:4c:1f:a1:
         94:91:d5:23:fd:83:f0:41:e7:b4:1f:51:d6:b3:3f:a2:ae:32:
         73:94:c0:25:fb:f2:26:77:41:48:f1:2c:f8:91:19:3c:5a:0a:
         14:bc:19:b2:3a:08:b8:e8:d6:31:69:f3:4f:9a:2c:28:94:c2:
         2d:f1:a9:95:15:6e:b2:a8:e9:cb:58:fc:44:68:b9:be:34:35:
         33:24:0a:3b:90:61:49:53:6d:ba:62:8d:66:64:e5:f9:3f:93:
         b6:56:21:f3:20:6c:e6:42:7a:df:14:4f:4e:1c:50:ce:13:61:
         51:56:ef:ed:31:af:a7:ce:8d:e4:61:5c:14:14:99:1f:1a:76:
         dc:40:3b:66:00:76:db:48:fb:71:bd:62:43:77:ac:29:e0:dc:
         24:8a:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:03:29 2025 by rpki-client