Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          kTMJyv4X1rgYcjKtV4XrcqKI7/cg2bszLxWpXLnAJVk=
Subject key identifier:   78:23:A3:29:7D:EF:C9:B5:1D:9A:11:93:D6:9C:30:44:2A:AB:D1:09
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       039E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          0399
Signing time:             Sat 18 Oct 2025 23:41:30 +0000
Manifest this update:     Sat 18 Oct 2025 23:41:29 +0000
Manifest next update:     Sat 25 Oct 2025 23:41:29 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: fpWxhIL81kszot2CKZdf4T5AArxav2/9LGN0yqf7O7c=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Oct 18 23:41:29 2025 GMT
            Not After : Oct 25 23:41:29 2025 GMT
        Subject: CN=68f425a9-25e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:86:85:93:99:bb:ac:8d:1c:48:8f:26:fa:
                    f0:0d:53:94:da:72:7d:1c:cf:6a:59:1f:06:5b:54:
                    83:f1:8e:99:72:fc:f5:ba:82:b0:01:af:10:be:cf:
                    8a:04:1d:08:8b:26:46:6a:e6:b2:ff:3d:64:6b:c2:
                    87:c1:8c:b9:63:ba:47:52:b7:6b:4c:b8:40:43:fd:
                    bb:a6:b4:39:89:c2:ab:ce:ee:21:3f:41:e9:36:4b:
                    f9:3f:d7:38:03:cb:45:a8:55:0e:c7:9c:1c:30:d8:
                    db:b1:86:98:1d:1b:87:cf:68:06:69:63:56:e0:a9:
                    0e:17:70:f1:a8:b4:80:6e:99:85:bf:7d:f0:49:a5:
                    2d:92:b4:53:34:40:1f:a0:7c:f8:12:84:45:c7:b2:
                    18:64:13:11:8f:b8:46:3a:35:a9:ff:b8:cd:9d:eb:
                    15:cc:93:a5:9c:ab:fd:39:d5:78:50:03:1f:b6:34:
                    67:94:c8:06:fe:85:08:18:29:41:09:98:0b:83:07:
                    0a:a8:e9:28:cd:68:3b:f7:cb:47:29:fb:e6:d6:ab:
                    13:af:f7:68:c1:d3:3a:ab:08:0f:ac:09:69:23:f1:
                    5e:68:eb:5e:7c:4e:58:70:27:ae:cb:23:4c:24:4f:
                    8a:dc:53:85:de:23:5e:a5:d2:c7:1e:fc:9d:28:45:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:23:A3:29:7D:EF:C9:B5:1D:9A:11:93:D6:9C:30:44:2A:AB:D1:09
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:df:d3:d7:8a:9f:fc:cb:ab:ab:52:37:f5:76:26:1f:af:
         12:21:e7:06:a4:8b:3b:5e:03:f1:e2:c8:6b:85:7e:4f:f1:2b:
         76:e8:3b:af:6e:cd:82:93:93:f4:5e:8e:15:ed:cc:f8:b0:ba:
         c0:d1:d2:43:98:b5:97:54:92:59:1f:1c:60:e5:8f:2d:c7:26:
         c8:59:3f:1a:58:c7:6b:a2:c1:21:82:f3:8a:16:dc:40:5a:71:
         4c:d2:7c:0e:0a:6a:3b:66:78:48:b6:2c:ef:6d:79:c7:fc:34:
         2e:af:05:fe:5c:c8:26:69:ca:07:77:03:9a:cf:4e:c4:95:70:
         4f:f3:e6:79:e1:21:50:35:b4:b4:f9:85:d6:0c:12:a7:f1:3b:
         c4:16:67:1a:42:a6:8b:c2:d9:3c:9d:f1:97:9a:03:bd:b1:fd:
         94:2e:f6:c0:c2:f3:46:43:1b:7d:ad:fa:69:8c:6f:5c:da:18:
         a3:aa:06:2f:7b:8c:de:23:d6:3a:25:ce:e6:df:5e:a1:bd:02:
         b1:a4:e9:f7:42:cb:7a:49:0c:28:93:c6:d3:8a:f8:92:30:88:
         f0:c9:56:22:d0:a2:6d:81:41:18:b6:1e:a3:2f:46:9c:d1:27:
         9f:e8:ab:a7:77:56:0b:ef:f3:78:d0:ed:36:5c:a8:f2:17:fc:
         78:04:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:40 2025 by rpki-client