Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File:                     Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier:          oTkCgW2VTfkr2li7WtOtEVYaeE2rzl21DeDoBFOWfmM=
Subject key identifier:   ED:EF:52:2F:72:0B:EC:D3:8A:DF:05:EE:60:FC:DB:57:2A:EF:B8:2C
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number:          01ED
Signing time:             Sun 19 Oct 2025 04:55:27 +0000
Manifest this update:     Sun 19 Oct 2025 04:55:26 +0000
Manifest next update:     Sun 26 Oct 2025 04:55:26 +0000
Files and hashes:         1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: QB6yvG1arf/jDMhAgyVpyzv2xlIuDJgeA99UKxfBF2M=)
                          2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=)
                          3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Oct 19 04:55:26 2025 GMT
            Not After : Oct 26 04:55:26 2025 GMT
        Subject: CN=68f46f3f-8142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:2c:d8:e1:17:f8:8f:f8:3f:2c:70:76:ce:
                    5a:90:18:f7:f5:43:57:40:b3:12:e2:8e:89:5a:66:
                    32:72:a1:15:bd:4b:62:d6:ee:e1:a8:03:9e:1c:14:
                    d4:67:d9:0c:5e:56:49:a2:8d:25:97:c7:32:4d:e6:
                    f9:62:26:f7:00:22:15:cb:ba:5b:87:2f:82:28:11:
                    71:29:de:7f:7b:99:b4:1c:b5:88:b7:f7:8f:1d:63:
                    8f:53:9f:a6:96:38:93:3b:67:f3:1a:cd:6c:73:d1:
                    7f:ed:bf:77:70:73:ec:dc:4f:d3:51:7b:80:5f:af:
                    b5:35:71:ab:d1:84:e2:88:9a:53:1b:c5:ec:b6:7a:
                    a2:6c:73:b0:9f:40:59:54:be:57:bc:fc:d6:14:e4:
                    0b:9f:84:84:52:2e:2c:5a:68:cd:f9:36:06:48:27:
                    c0:a8:f2:de:c5:be:10:a4:93:ab:04:05:09:c3:5d:
                    3f:11:df:67:31:c5:c0:1e:93:de:65:e6:97:70:4c:
                    72:b5:70:15:ed:a6:27:5f:07:d7:c0:f1:b4:69:92:
                    81:cc:8f:73:13:13:dd:46:b2:91:4c:1c:46:f7:25:
                    42:5f:49:b8:60:7e:e0:3e:81:18:79:a8:8f:8d:0d:
                    9c:f3:20:85:3a:c9:6a:1c:0c:aa:92:da:45:7b:97:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:52:2F:72:0B:EC:D3:8A:DF:05:EE:60:FC:DB:57:2A:EF:B8:2C
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:15:fb:a9:38:1b:09:03:a0:06:62:fd:77:02:85:b7:fb:cb:
         4e:9d:a6:8a:83:44:74:22:3a:48:59:73:56:12:09:8b:a8:48:
         ee:26:62:42:0c:5e:80:04:92:10:8f:95:3e:6a:16:f7:99:e5:
         82:5b:fa:c1:b0:f6:fc:69:3a:36:93:32:fb:33:d4:c7:00:8e:
         46:ad:31:2a:a9:96:83:9b:23:76:06:ea:fe:7b:e5:6f:4d:34:
         c1:fa:27:25:7b:f5:26:e1:da:ff:6e:11:48:ef:d8:95:75:36:
         ab:59:12:f3:26:72:bb:02:4b:18:f2:e9:70:d8:f8:89:65:36:
         9f:09:89:26:98:e0:69:94:bb:18:ce:ed:98:c8:95:74:b4:5d:
         35:39:b3:14:cb:1e:ca:f1:85:24:d9:58:cf:17:0d:72:ff:16:
         8f:b9:65:2f:6b:55:c6:fc:58:28:c5:6c:9a:7e:08:e3:29:ae:
         ae:69:84:a7:ec:56:13:d9:1a:58:07:4d:b9:c8:2c:9d:34:22:
         1f:45:44:15:bd:11:ef:ee:b2:4d:c4:1a:9e:43:e9:8e:6f:be:
         78:04:30:52:d8:d7:3d:d7:2c:f9:57:9b:b9:d5:cc:fd:ce:49:
         7f:79:46:e7:e8:1a:8c:e7:3f:10:95:61:7f:f0:85:38:02:b7:
         60:71:1e:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx
MkVGMDQ3N0IwHhcNMjUxMDE5MDQ1NTI2WhcNMjUxMDI2MDQ1NTI2WjAYMRYwFAYD
VQQDEw02OGY0NmYzZi04MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsl8s2OEX+I/4Pyxwds5akBj39UNXQLMS4o6JWmYycqEVvUti1u7hqAOeHBTU
Z9kMXlZJoo0ll8cyTeb5Yib3ACIVy7pbhy+CKBFxKd5/e5m0HLWIt/ePHWOPU5+m
ljiTO2fzGs1sc9F/7b93cHPs3E/TUXuAX6+1NXGr0YTiiJpTG8XstnqibHOwn0BZ
VL5XvPzWFOQLn4SEUi4sWmjN+TYGSCfAqPLexb4QpJOrBAUJw10/Ed9nMcXAHpPe
ZeaXcExytXAV7aYnXwfXwPG0aZKBzI9zExPdRrKRTBxG9yVCX0m4YH7gPoEYeaiP
jQ2c8yCFOslqHAyqktpFe5depwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3vUi9y
C+zTit8F7mD821cq77gsMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4
QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O
NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWFfupOBsJA6AGYv13AoW3+8tOnaaKg0R0IjpIWXNWEgmLqEjuJmJC
DF6ABJIQj5U+ahb3meWCW/rBsPb8aTo2kzL7M9THAI5GrTEqqZaDmyN2Bur+e+Vv
TTTB+icle/Um4dr/bhFI79iVdTarWRLzJnK7AksY8ulw2PiJZTafCYkmmOBplLsY
zu2YyJV0tF01ObMUyx7K8YUk2VjPFw1y/xaPuWUva1XG/FgoxWyafgjjKa6uaYSn
7FYT2RpYB025yCydNCIfRUQVvRHv7rJNxBqeQ+mOb754BDBS2Nc91yz5V5u51cz9
zkl/eUbn6BqM5z8QlWF/8IU4ArdgcR42
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:41 2025 by rpki-client