Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File:                     Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier:          evwwC92gI3Tr/NUolEOebP5tH60VxxJivysRkIGcGfk=
Subject key identifier:   E2:B2:69:77:61:22:93:38:29:8B:2B:CE:16:3E:57:8B:12:BC:87:A9
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number:          07CE
Signing time:             Sat 18 Oct 2025 22:33:42 +0000
Manifest this update:     Sat 18 Oct 2025 22:33:41 +0000
Manifest next update:     Sat 25 Oct 2025 22:33:41 +0000
Files and hashes:         1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: GsGobTsG/sOfszUZkR0WbsM6p7o70vNtm91SAA/Ng/E=)
                          2: 48728BF269DE11F091F06044C4F9AE02.roa (hash: /ERhN2x3ss6W0QClX05yEY4i6AIFrthSmtVdmSwel/4=)
                          3: 53093BC469DE11F094E16744C4F9AE02.roa (hash: GlRvcMx23DgixvXzJXeon3DXlfNlcQsCUDL4GubRJQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: Oct 18 22:33:41 2025 GMT
            Not After : Oct 25 22:33:41 2025 GMT
        Subject: CN=68f415c6-9aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:44:60:b5:6e:f7:5a:33:28:bf:6e:e3:29:
                    aa:8b:e2:bd:ef:7f:25:ba:7c:2e:70:b6:09:df:c1:
                    2d:d4:d0:fd:81:d5:15:79:da:2c:88:b2:88:18:07:
                    fc:6d:da:bf:16:15:4e:6d:60:99:e5:af:06:7b:6f:
                    30:7b:9d:53:d2:41:fd:ef:b5:3c:f9:a0:bc:20:e0:
                    d0:30:12:b1:09:13:49:dc:89:20:2d:26:f6:e1:ae:
                    1f:8b:4c:7e:cc:5a:54:ac:f2:51:52:8e:79:cc:c1:
                    64:91:a9:ce:da:c9:9a:86:82:fd:19:63:ab:ab:34:
                    e7:bf:e2:0d:bc:f9:bf:92:1c:b4:10:12:39:2c:2b:
                    1e:ce:76:43:48:25:34:42:9a:9b:4a:80:7f:75:f5:
                    3e:5b:49:57:27:d4:19:28:01:44:d7:2b:18:21:86:
                    0e:af:f8:58:e9:43:f8:26:e5:5b:e2:ba:b8:38:23:
                    4e:72:67:31:5b:cf:5b:58:73:d4:b9:91:ca:6f:f7:
                    ab:05:87:73:04:f0:ea:01:40:be:69:29:0d:79:a8:
                    06:47:1a:ec:93:d1:13:b0:1d:fc:20:44:0b:6d:09:
                    e7:8a:f8:36:99:f4:e9:c4:ee:e7:35:5c:ac:df:03:
                    75:e3:4d:b4:2a:4c:0f:9f:a4:6a:c5:c9:8d:32:f7:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B2:69:77:61:22:93:38:29:8B:2B:CE:16:3E:57:8B:12:BC:87:A9
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:dd:2d:4a:6c:e0:70:a5:fa:e0:03:0d:ce:82:9e:e5:06:
         d1:db:64:80:a1:ef:1c:3d:34:af:4e:92:41:e4:72:b3:ea:c9:
         52:ff:c2:21:d7:1e:5d:4b:ac:79:59:17:83:c5:b2:55:c7:3e:
         22:97:91:c4:6b:70:47:90:1e:84:a4:4f:b4:73:fb:d9:cd:5f:
         13:32:82:b2:1e:23:1a:a8:68:a4:08:79:e2:d1:5f:55:be:d5:
         26:82:b7:bb:21:73:42:4f:72:21:9e:25:a6:93:65:3f:d5:f2:
         d7:fd:16:cf:5c:d2:2b:c0:44:c4:d8:e7:57:d7:db:ac:ab:cf:
         17:81:af:68:c5:c3:dd:05:bb:72:7f:20:ff:0d:e5:de:9e:e3:
         b8:b3:67:de:ea:d9:34:be:c6:6d:71:73:c6:5d:3c:bf:23:bf:
         73:c3:7b:8d:37:43:cd:9b:fe:45:de:02:17:a3:f5:b7:41:0c:
         78:e4:33:50:0e:b4:0e:49:dc:10:2a:ff:0e:ec:de:45:6d:39:
         49:c8:24:f3:24:38:c1:61:9f:e2:9e:27:90:51:79:79:38:4a:
         41:d7:34:39:cc:12:37:bf:0e:51:ff:5b:1c:98:f6:b6:c6:6b:
         6a:a1:4c:3d:c0:6c:f5:10:e6:d0:55:cb:55:68:01:3b:0d:cb:
         3c:56:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:37 2025 by rpki-client