Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          8FJzmkRl/paoMflVRdht+84VqqqOlSBoC6yewevu29c=
Subject key identifier:   7C:CB:50:7D:71:E2:86:BC:1C:72:8F:44:32:39:A5:3F:EC:BC:2D:10
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          013F
Signing time:             Sun 19 Oct 2025 07:10:32 +0000
Manifest this update:     Sun 19 Oct 2025 07:10:31 +0000
Manifest next update:     Sun 26 Oct 2025 07:10:31 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: M2xk/rtZ0d2QCvsDvTxAknsqCFMRhXheBtyBfbwiapc=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: HaM1uGW7CpLpf57Ix2SDrMkVRudstrm9oD5WtSudmS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: Oct 19 07:10:31 2025 GMT
            Not After : Oct 26 07:10:31 2025 GMT
        Subject: CN=68f48ee8-2f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:cf:2f:f1:d5:d4:ab:e5:0c:dc:96:ac:3f:
                    84:cc:32:c0:07:8b:d5:4f:11:6d:bb:e3:00:e9:cd:
                    9a:84:bd:7b:90:69:f1:37:8c:e9:43:33:25:59:68:
                    d8:84:7c:27:13:07:f8:a0:bf:0c:74:13:0c:aa:cd:
                    28:91:8b:7b:f5:7a:34:fa:03:ba:23:06:5e:ea:50:
                    fa:31:7b:db:65:f4:4c:ff:0f:cd:66:15:8e:b0:af:
                    11:41:9d:f9:fd:23:22:a0:73:f9:d8:3b:14:32:91:
                    4b:03:4f:0e:2a:9b:83:05:d1:0d:38:0e:5d:c5:33:
                    22:1c:99:32:e9:d0:ee:bd:e3:69:d4:04:ac:57:a3:
                    66:f8:56:d7:7c:b3:7b:87:ec:b8:1a:ee:47:24:f1:
                    df:75:2e:66:14:4e:27:14:1c:56:3c:e9:f6:55:b7:
                    d8:07:4f:14:1a:16:aa:c6:61:d7:ea:43:75:b5:21:
                    a4:ed:0d:bb:e1:49:0c:2b:b4:bb:ee:29:80:c6:b0:
                    c3:ac:75:8c:59:87:cb:f8:00:b5:a4:f5:ee:05:be:
                    bc:a8:0d:69:fd:00:ad:69:59:10:7b:99:fe:2a:35:
                    a8:df:92:2c:61:84:ad:5c:8d:b8:85:98:c2:d4:ee:
                    08:1f:af:c4:2d:23:d3:28:9b:c4:85:0e:a1:73:39:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:50:7D:71:E2:86:BC:1C:72:8F:44:32:39:A5:3F:EC:BC:2D:10
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:dd:e8:fc:f6:07:ab:e5:de:44:90:58:ca:7e:9d:ed:02:
         95:4f:c4:b8:27:f8:76:f7:92:0b:b5:4d:7c:21:b5:f6:26:cf:
         91:2b:24:d1:a3:ff:13:0c:22:54:d4:60:b6:16:9f:00:02:82:
         8f:44:84:5a:36:6d:5f:2d:4b:0e:c5:5a:c5:24:e0:d7:d7:00:
         4c:12:75:c3:a1:15:c6:bb:ff:81:bf:a9:47:47:99:a5:6c:5f:
         76:06:4d:7f:6a:51:8b:62:99:e3:e8:37:8b:a9:48:14:f3:34:
         a4:7b:7e:5e:23:37:55:58:eb:08:d6:8c:75:77:eb:de:7f:1a:
         62:33:5a:e1:72:d6:72:5e:76:9f:cd:04:07:f9:18:a7:ae:72:
         56:bf:29:7c:99:d6:99:a9:f3:ae:87:98:73:de:4f:d8:ac:74:
         d7:f0:e4:4a:d1:fd:94:39:0d:be:8d:e9:78:a5:a8:90:e6:6a:
         89:65:5b:f1:ba:bb:3d:61:70:2f:28:99:c0:d9:0d:ac:dc:b7:
         f1:97:ef:ff:b5:e1:28:bc:0e:90:7c:c3:bd:a6:b4:23:60:c8:
         23:2a:48:77:03:13:d9:b2:16:1d:d0:52:3b:9f:a7:5c:6c:c6:
         c8:4e:ac:ea:4d:ee:2e:07:46:a7:e4:bd:8a:6a:db:05:91:14:
         3a:e2:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:15 2025 by rpki-client