Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          NImcA3oKECKf9VNfRnOH1Zq9ybMkPdw14YP7ggijq4Y=
Subject key identifier:   5A:AE:8D:2A:44:90:00:6E:A1:4B:43:B3:9B:B4:54:C6:CC:58:02:1C
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       0461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          0453
Signing time:             Sun 19 Oct 2025 02:06:13 +0000
Manifest this update:     Sun 19 Oct 2025 02:06:12 +0000
Manifest next update:     Sun 26 Oct 2025 02:06:12 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: C1K64v4dhB+FfWho7UcULuqmicwDAUgIAeJDUXU+QQY=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: TWpB8SYlmQe0Oub87LDVUVN1OX3Mn3l0w0LHkQpg6/s=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: FSPwgNEhxgo+ZEvd+XrJX3+bZfKJ3dVoRc7zxS/PsyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Oct 19 02:06:12 2025 GMT
            Not After : Oct 26 02:06:12 2025 GMT
        Subject: CN=68f44794-3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:33:61:3c:af:ad:8f:e1:fd:e7:62:49:f8:a2:
                    ee:d8:c7:f4:51:a9:b3:34:c7:4a:22:b2:5e:82:f5:
                    e5:bc:c2:c8:d9:a0:7f:f8:33:1f:4b:d4:4a:4b:e1:
                    28:e6:a4:0e:d9:02:1d:f3:a3:5a:fd:bf:07:49:18:
                    1b:8e:9f:dc:12:10:8b:61:40:ab:20:b1:ac:30:f5:
                    ba:66:d4:4c:74:c6:3e:a4:79:c6:cf:b4:c9:5f:ee:
                    f9:cd:16:b5:49:f4:19:ea:00:68:42:41:98:8c:ed:
                    2c:72:83:39:e6:da:e7:af:b7:5d:0f:c6:17:cb:4b:
                    ec:38:cb:e6:24:db:f6:a8:3b:85:c9:fc:b1:49:d6:
                    b8:d1:05:cd:25:5f:32:bb:2d:74:89:1d:b7:d3:41:
                    2b:ac:68:6b:6a:cf:54:56:12:b7:cc:0b:e5:b7:4c:
                    1b:8f:02:35:67:5b:fd:84:d6:11:88:75:2d:f9:2e:
                    f1:25:7b:e1:0b:91:99:0a:ec:6b:f3:7e:cf:2a:6c:
                    92:fb:0e:57:68:c2:42:a9:e3:07:ec:04:8b:b4:ff:
                    d3:09:48:dc:9f:4d:00:7b:be:26:8a:70:9e:03:8f:
                    23:33:ab:cb:fd:51:ca:df:b3:d9:85:6f:87:08:a3:
                    92:b1:6e:98:51:cc:ad:ce:47:b1:4f:26:ac:d5:c6:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:8D:2A:44:90:00:6E:A1:4B:43:B3:9B:B4:54:C6:CC:58:02:1C
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:be:0a:b5:b8:f1:3f:64:66:a0:50:7a:56:7b:c2:78:e3:
         34:f4:f8:77:57:c0:33:b8:f2:7b:a4:4b:10:69:83:8c:ef:ad:
         40:26:d5:ac:ba:b8:fe:07:cf:70:f7:11:1a:4f:8a:08:ab:2c:
         05:fe:82:fe:d0:0a:c9:1a:07:ac:ae:02:6d:ba:b9:bb:48:00:
         c4:3d:b6:5f:5c:a8:39:63:8e:9d:46:f7:59:01:fb:88:b8:f4:
         30:93:1b:e5:20:ae:0a:f2:f6:3f:4d:3d:0a:00:c6:a4:1d:a1:
         c0:b5:17:9d:0b:8e:7c:e7:bd:02:95:5d:63:1f:b2:03:00:27:
         91:a6:a0:2e:dc:61:99:11:66:3e:dd:2e:93:8b:d1:20:86:90:
         2c:83:73:e4:1d:a0:2e:3e:90:ac:59:f6:e6:41:16:87:d6:a6:
         6c:5a:ba:8e:f1:be:b6:97:6f:0b:fe:dd:25:ba:fb:18:e1:ff:
         f2:12:cd:f9:7c:7b:b8:4d:f8:8b:cd:c9:5f:4a:2a:d4:60:84:
         c0:c0:15:5d:26:bc:04:21:a2:84:36:90:bc:aa:2f:ad:6e:0b:
         50:75:e8:65:76:b8:03:48:65:e4:9b:38:a4:20:c0:c2:c3:35:
         92:e4:7d:11:1e:f8:3d:0c:2d:54:46:95:15:35:a1:8c:09:08:
         77:5f:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:38 2025 by rpki-client