Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
File:                     Y-N84NAMINhocKc_1uy8iZwbngs.mft (raw, json)
Hash identifier:          sKyrqL3/YpN1hxUVrVjrnv3kWlAHkIyYfg2srKvyt+s=
Subject key identifier:   69:A8:4B:BC:DC:4D:B1:03:E5:9A:4D:12:4B:F9:CB:47:81:FB:6B:C1
Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
Certificate issuer:       /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
Manifest number:          06FD
Signing time:             Sat 18 Oct 2025 23:22:51 +0000
Manifest this update:     Sat 18 Oct 2025 23:22:50 +0000
Manifest next update:     Sat 25 Oct 2025 23:22:50 +0000
Files and hashes:         1: Y-N84NAMINhocKc_1uy8iZwbngs.crl (hash: PPfE7DG+UGvnNPNSNIK1ejdW1TuJfv+QcioUAdVjIzg=)
                          2: A642A4AC650A11EB83E0FE0FC4F9AE02.roa (hash: XgEiz93GwcjbqWb+Hq9DJ44AhbzclnkFT8Xqo44uktw=)
                          3: 602D049AC1DE11EB98E1AD43C4F9AE02.roa (hash: dZk3zUjex9j9lLIDyKM9fwjXzN+iyNTIOqWQwjytMeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
                          rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
        Validity
            Not Before: Oct 18 23:22:50 2025 GMT
            Not After : Oct 25 23:22:50 2025 GMT
        Subject: CN=68f4214a-0f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:97:00:df:85:cd:d2:c8:fd:58:88:c5:35:
                    ca:04:91:db:ca:24:92:49:06:3e:78:b5:73:70:67:
                    0f:3e:50:fd:c9:12:b7:da:bb:a1:64:bd:3c:27:5a:
                    e2:1b:8f:73:8a:32:b9:b0:83:ab:42:ed:6f:f4:58:
                    50:0c:dc:c5:5b:a6:9a:ea:4e:c4:d6:bb:e5:c1:c2:
                    6e:9d:f4:41:6b:2b:cb:ca:f6:12:88:54:4c:6f:18:
                    1a:fd:bf:b7:4c:2a:37:69:da:0d:cb:56:b3:da:1f:
                    be:5f:77:5c:9f:1b:4d:77:ab:2a:1d:50:7b:32:d3:
                    4d:e5:a4:1c:05:56:a6:78:6c:8a:c2:95:cc:90:45:
                    7d:2d:c4:4c:d1:68:64:81:af:be:05:45:83:33:dc:
                    ed:43:09:95:9f:f8:b4:cc:2d:dd:c5:49:de:ab:73:
                    2e:3f:10:91:1a:4a:69:65:ee:c4:b6:6e:43:f7:36:
                    61:9a:06:5f:ba:c7:63:04:af:03:15:8f:06:f3:19:
                    b8:67:35:8a:e2:fd:b0:69:32:7f:aa:d2:ed:20:2e:
                    09:51:d6:0b:f8:7a:de:5c:11:4c:bf:f9:7f:5a:81:
                    63:de:af:68:03:a5:24:ce:21:56:cf:32:39:40:a5:
                    5c:62:f4:ca:da:3c:37:93:3c:90:f1:e5:09:11:36:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:4B:BC:DC:4D:B1:03:E5:9A:4D:12:4B:F9:CB:47:81:FB:6B:C1
            X509v3 Authority Key Identifier:
                keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bd:53:47:be:ad:b5:2c:7d:af:ad:e0:b4:b2:1d:18:19:86:
         86:15:99:8c:e9:04:22:eb:76:2d:c9:18:e1:9e:21:bb:e9:3e:
         e0:05:2c:71:0c:a7:4b:26:21:20:0b:91:8b:31:ad:14:cc:19:
         fe:7f:02:1b:26:b9:05:18:5a:11:ad:72:1b:b1:69:46:11:dd:
         6d:d5:1d:98:60:7b:03:f1:c9:79:0e:17:d1:71:de:41:4a:d4:
         33:a1:51:35:aa:0a:fb:d6:3f:33:6f:04:0e:86:47:3e:87:b8:
         ee:b9:aa:50:a2:4f:41:9d:7a:86:55:fa:1a:a0:4f:5b:02:e9:
         d8:6f:de:6f:51:6d:4d:84:30:d7:7a:7c:08:a5:4d:fd:48:c1:
         37:83:44:e8:60:05:b2:8e:65:6e:5b:bf:48:76:05:f9:0c:bb:
         01:bf:6c:cb:87:3c:64:d4:4b:be:1b:3f:04:a8:6a:ea:9b:8c:
         70:38:b3:4f:17:e5:48:29:80:61:24:da:6c:c2:ef:32:26:a6:
         24:da:b0:68:58:9b:8f:74:0f:c9:f3:af:0e:a2:d9:78:12:19:
         60:23:ce:ed:7e:91:33:60:0d:16:9a:52:0b:a0:06:6d:92:5b:
         f1:8f:4c:52:92:2a:86:14:e8:b3:65:31:96:09:5e:dc:3b:99:
         77:b8:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:34 2025 by rpki-client