Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File:                     09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier:          S2DRkLsbWa8o5Cz/p9Hvjosd5gcfRSG/AM0v8CGatoA=
Subject key identifier:   46:B7:E4:5A:23:A4:40:0B:56:B2:02:B3:A6:88:D8:12:13:71:B3:E6
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer:       /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number:          01AD
Signing time:             Sun 19 Oct 2025 05:46:51 +0000
Manifest this update:     Sun 19 Oct 2025 05:46:50 +0000
Manifest next update:     Sun 26 Oct 2025 05:46:50 +0000
Files and hashes:         1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: ZJJ4g/rlNrz1hrLHhFRs1/g/0sFvt7Yqy8yTsmzPsPg=)
                          2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: T9bgb6w+YEKZ5F9ekCDjbubT5zB0ZkUsFds1ZxlsLrE=)
                          3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: Poe8WZPLlmMRopxum73vePC7h4bI4X/kM9rphS1LhLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
                          rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
        Validity
            Not Before: Oct 19 05:46:50 2025 GMT
            Not After : Oct 26 05:46:50 2025 GMT
        Subject: CN=68f47b4a-8463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:9a:62:79:0c:1b:1a:03:12:26:bd:c2:ba:
                    fa:cf:a9:85:bc:cb:26:43:d6:e9:56:2b:26:72:59:
                    74:ff:16:70:1b:73:06:f6:46:69:e6:3f:56:73:22:
                    e7:fd:3f:69:3c:24:2a:8e:f2:e3:26:9d:af:19:2c:
                    38:4a:d3:91:be:39:1b:bf:b6:47:b2:59:1f:a8:9f:
                    65:f2:a1:46:08:6e:8d:1c:b7:16:58:33:db:c9:ef:
                    08:12:d9:6b:26:da:98:7a:4e:a6:6f:d4:7d:f7:f7:
                    3e:d6:5d:ee:99:e2:df:68:48:ff:ab:39:6c:3c:54:
                    04:03:17:e9:37:e4:fb:70:1d:45:55:8c:c6:0b:7f:
                    08:38:53:70:5e:64:48:bc:ab:5d:28:1d:c7:43:bd:
                    61:68:20:a1:1f:72:45:c3:28:95:c7:3a:2a:69:70:
                    1b:55:b0:9c:f8:82:b8:67:33:86:8f:24:2e:4b:dd:
                    be:50:a8:95:82:b5:31:2e:80:a9:b3:31:fa:18:20:
                    cf:f0:7e:26:57:32:06:79:db:30:55:9b:94:f0:04:
                    1d:e4:af:5d:f9:db:4e:50:f9:53:03:72:83:23:8d:
                    1b:ed:a9:11:95:1d:ae:8f:02:4e:bb:d9:24:00:c1:
                    9e:a5:b4:6f:35:da:b7:1b:77:d4:2a:e4:e7:63:aa:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:E4:5A:23:A4:40:0B:56:B2:02:B3:A6:88:D8:12:13:71:B3:E6
            X509v3 Authority Key Identifier:
                keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:07:af:40:45:cc:6b:81:46:1b:99:cd:41:ad:ab:a4:9a:
         5d:7c:5f:bb:91:28:b7:b8:0d:68:23:94:6c:18:99:64:74:6d:
         41:0f:8d:0b:37:cc:d9:7d:16:c1:55:c4:51:96:16:27:36:ca:
         58:1c:6f:77:24:2f:43:d9:f3:4d:4f:73:c5:7b:4c:16:27:69:
         00:f8:bd:5e:3b:3c:22:45:6f:1a:e4:14:e8:f1:ab:54:fa:a1:
         a6:c4:75:59:be:76:b7:96:73:0d:a2:13:5b:00:28:0b:77:78:
         e4:55:9f:fb:98:66:7d:9a:ad:4b:1d:d0:fb:70:40:e2:1c:e3:
         02:b9:54:d5:96:4d:36:3b:f2:e2:79:42:ea:8b:0c:d8:92:fb:
         5e:c6:8e:3b:7c:95:bf:1f:c3:d1:4b:a7:f1:3e:79:31:1e:e6:
         4e:4b:05:59:bc:5c:0b:a8:ee:09:29:70:93:a2:5b:f6:db:1a:
         3b:80:b1:03:40:4c:eb:70:23:97:2b:ef:6f:0e:00:cd:ee:17:
         78:b0:92:1a:9d:c8:48:55:95:ad:50:3a:55:3c:fd:41:de:71:
         af:ec:9b:98:b5:e7:6c:4e:98:cc:29:13:bb:a2:62:d2:1b:75:
         50:2f:48:a5:79:de:cb:23:3e:88:f2:f2:13:85:0d:e4:68:2c:
         cb:c4:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:49 2025 by rpki-client