Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          IGBPSE4ltJLZLvMWXH7GN2jZ/ooMxoXz7eXqz9Dy5YA=
Subject key identifier:   AA:4B:DE:D0:37:62:B0:5F:D7:74:BB:C1:B2:A3:AE:26:F8:38:E5:03
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          06BA
Signing time:             Sun 19 Oct 2025 01:55:32 +0000
Manifest this update:     Sun 19 Oct 2025 01:55:32 +0000
Manifest next update:     Sun 26 Oct 2025 01:55:32 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: +TnoEQHIiWVa5On1LwFD+TPzdxksRPKkmMakR3Npi9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Oct 19 01:55:32 2025 GMT
            Not After : Oct 26 01:55:32 2025 GMT
        Subject: CN=68f44514-0095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:c7:a7:01:67:ad:f6:1d:a7:14:25:78:1e:
                    dd:31:52:23:2a:e8:3e:4f:5c:c1:56:21:ca:64:3e:
                    96:ad:34:c7:82:fa:c8:c0:47:7b:70:87:8a:a1:0c:
                    d6:02:54:ca:33:b9:30:53:6c:d9:86:f1:1a:66:f1:
                    8e:5e:e0:3f:c4:a3:b9:16:60:d7:c6:45:8e:38:96:
                    9e:88:fb:e3:e7:68:ac:68:cc:8b:c7:74:04:ea:ef:
                    77:64:0c:1f:98:24:51:02:b5:fa:49:84:39:5c:66:
                    35:e3:1f:7b:e1:6b:06:de:76:bb:43:9f:de:87:9c:
                    e5:3b:a2:2e:f5:64:e8:0b:4e:69:90:67:bc:4a:1b:
                    ee:7c:dc:56:0b:36:af:54:67:5b:f0:33:db:e2:67:
                    46:80:ec:6b:7a:45:28:3e:c3:09:9f:7a:de:4b:9d:
                    b2:c4:2b:e6:65:06:93:22:12:d1:f2:16:d2:ca:21:
                    75:cf:0d:d3:d4:cc:39:a0:1d:6e:df:86:4f:70:d6:
                    72:eb:cc:4d:07:11:eb:a1:79:bb:ef:46:d3:11:d2:
                    cd:b8:a2:a5:e0:13:27:c5:52:94:ce:f8:3b:36:8d:
                    85:40:63:af:c2:20:41:c2:5e:60:64:9f:9b:8a:00:
                    22:cc:6d:16:a5:e7:8a:b1:35:10:12:14:8d:39:4e:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:DE:D0:37:62:B0:5F:D7:74:BB:C1:B2:A3:AE:26:F8:38:E5:03
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:a3:f3:ee:67:da:0b:20:33:a0:f6:9a:51:70:60:31:e3:
         02:90:ed:27:88:61:a5:e1:f0:df:28:61:05:6f:4a:04:d2:5c:
         4d:7d:e3:db:0b:2f:e8:f2:a6:ad:3a:ed:7f:2d:f4:ba:fa:6c:
         b5:7b:1a:be:cb:2f:aa:a8:cc:7a:89:13:0d:8b:0a:14:c5:db:
         6e:7e:d6:78:d9:ed:5c:32:95:8d:4a:6b:ee:b8:29:b1:bc:f0:
         24:dd:3a:ba:08:2d:a3:ea:87:56:0e:fe:1f:8a:74:7d:a0:c0:
         6f:90:af:ab:e6:21:e4:dd:10:99:7f:32:82:4c:50:e8:b4:37:
         79:d3:cc:0f:1b:2e:d6:d7:d8:32:ae:26:a2:63:de:83:32:c7:
         ad:71:c0:67:ce:bb:8c:2b:55:b7:88:21:12:f9:ed:6f:d6:d3:
         1c:89:36:52:d7:27:a7:e0:d8:b9:14:65:13:62:21:f6:fc:47:
         d5:c8:da:28:fa:82:22:6a:b2:41:c7:51:57:a1:33:53:4b:1e:
         2b:e1:6e:a9:de:9b:2b:d4:84:36:21:0c:61:d9:8b:9c:dc:b8:
         a5:cc:4f:7a:81:63:7f:0e:41:09:5a:68:69:bf:f1:09:9d:56:
         ba:02:29:0b:b4:dd:fb:69:ab:47:42:68:b0:91:ff:06:cb:bc:
         5f:88:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:06 2025 by rpki-client