Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
File:                     S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json)
Hash identifier:          WGSKCmbxo2PU+LXx1i+JPSBca2/F+eoSbnJ2OehgSXE=
Subject key identifier:   67:AC:8F:1A:DE:F4:2C:0D:DE:35:B9:50:33:F9:EE:A2:CC:48:11:D0
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Certificate issuer:       /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial:       3529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
Manifest number:          34F8
Signing time:             Sat 18 Oct 2025 15:28:17 +0000
Manifest this update:     Sat 18 Oct 2025 15:28:16 +0000
Manifest next update:     Sat 25 Oct 2025 15:28:16 +0000
Files and hashes:         1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: PZbwVr7+TaGt7vh9SddtkOBPx9I4AKmFvWJTYf6Fl9Y=)
                          2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: PqNSkqyewmKuXRkADPgSAahXx6Qh7/X+wfZVSlj+tc8=)
                          3: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: VLtfIYb4y+A0nG+DSlk1wkc4Va6Hh11pLowd8yB4WrU=)
                          4: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: hYZQfUT77wWm9wA8h4SPaexykIcEBdPcCnbabzBH2A4=)
                          5: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
                          rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13609 (0x3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
        Validity
            Not Before: Oct 18 15:28:16 2025 GMT
            Not After : Oct 25 15:28:16 2025 GMT
        Subject: CN=68f3b210-c8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:77:6e:96:f1:a9:68:dd:8e:45:dc:5b:4a:
                    26:01:5f:91:76:0f:ea:36:7d:1f:c2:72:2e:ff:36:
                    2f:3e:86:25:6f:0d:3e:93:3f:62:70:6c:34:95:f8:
                    90:3d:38:45:b6:14:4c:f8:ce:4d:24:f6:b0:2a:7f:
                    53:97:a9:e3:1f:71:01:7f:dc:90:62:e4:46:f7:03:
                    87:c1:94:6e:f6:30:16:23:0c:a1:f8:8b:77:14:93:
                    85:f4:7b:d3:4d:80:21:27:6e:c0:71:74:c5:7e:80:
                    9e:dd:43:8b:a4:13:f3:5c:8a:34:3d:22:fd:fd:51:
                    04:e2:7e:39:e5:75:12:2e:ac:07:37:95:91:1a:81:
                    f1:d3:9d:89:ee:d7:3d:ab:83:db:86:a4:6a:f4:7c:
                    c8:0e:84:98:92:b4:aa:bc:35:c3:54:37:4c:e2:3c:
                    ee:07:66:48:99:23:a2:cb:14:eb:86:fd:6f:0e:28:
                    5a:7c:ce:08:fd:3d:a2:39:57:99:43:35:3a:3f:fc:
                    7c:08:08:8d:21:c2:64:e4:81:2f:fd:fe:c2:a7:93:
                    54:a9:2a:d4:a4:fe:b5:40:84:76:74:16:e9:30:d2:
                    89:82:93:58:52:14:33:92:3a:69:6c:4a:1b:a7:24:
                    83:fa:d9:a5:71:e9:40:9b:0a:b2:6f:4e:8a:45:b9:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:8F:1A:DE:F4:2C:0D:DE:35:B9:50:33:F9:EE:A2:CC:48:11:D0
            X509v3 Authority Key Identifier:
                keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a0:50:dc:a3:95:ea:b5:fe:1b:cc:c3:ac:67:4c:a7:8c:c9:
         70:dd:93:0d:c8:e3:8c:f3:7b:a8:af:2f:8d:3c:2c:c1:7c:cc:
         9c:bf:fe:e0:33:7f:f1:ba:e1:3f:35:10:0b:52:02:2c:bc:65:
         46:7f:27:3f:d9:aa:00:dd:53:b9:d1:79:a4:74:d4:e7:b5:9f:
         99:38:5e:38:28:3a:ee:5e:00:ae:e8:9c:f4:47:af:05:f6:13:
         30:bb:04:f3:fa:dd:80:a6:ac:49:e4:c2:f0:4f:0d:f7:5a:57:
         ea:16:7b:79:ef:2b:da:40:f7:e1:19:2f:7f:f3:53:b8:7f:46:
         e4:ef:6e:16:f4:79:5f:53:77:8c:0a:a4:61:a4:5d:ad:9e:12:
         ea:5e:3c:02:b1:b8:b0:a2:c9:c0:21:4b:61:8a:2f:97:f9:8d:
         1e:be:0d:be:ed:5e:e0:65:ef:cd:40:c3:4a:9e:1b:a5:59:9a:
         7b:7e:83:b3:8c:e2:3b:3b:e7:07:a7:3e:a3:42:1a:df:ae:92:
         d4:b6:51:aa:a6:20:eb:bf:79:ff:a9:41:9e:b7:01:40:b0:3b:
         90:12:46:15:21:41:de:5b:b6:00:05:e1:ed:83:97:73:a7:5e:
         5a:3c:4c:1a:b6:52:aa:0f:95:36:b5:fa:7b:84:09:78:46:14:
         c4:62:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:25 2025 by rpki-client