Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier:          v22bZyfOA6bB2MoHMfA71Qiff5zOunhnzUGFuxOa0O4=
Subject key identifier:   48:1E:DC:B6:76:E6:94:9F:F9:82:75:7A:EE:D0:6C:D9:02:1E:83:B4
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       14BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number:          14BD
Signing time:             Mon 20 Oct 2025 17:15:14 +0000
Manifest this update:     Mon 20 Oct 2025 17:15:13 +0000
Manifest next update:     Mon 27 Oct 2025 17:15:13 +0000
Files and hashes:         1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: wFgY2NxK80dpBhLbMH8Sdd6brP4UO3D3XQmMWM1C/bw=)
                          2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5311 (0x14bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Oct 20 17:15:13 2025 GMT
            Not After : Oct 27 17:15:13 2025 GMT
        Subject: CN=68f66e21-83dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:5f:1f:7d:4e:9f:0a:99:69:6b:24:5a:a2:
                    70:3a:49:4e:d0:38:87:7a:e3:38:b9:92:a0:1e:48:
                    79:5d:95:9b:81:2e:fb:09:a7:64:f2:1d:97:ed:40:
                    02:c7:72:8a:90:70:fb:ad:e8:d1:73:a0:98:57:c7:
                    f3:06:9b:6e:41:d8:5f:39:25:80:55:5f:9b:fc:a2:
                    10:09:96:cd:ca:6a:28:e9:b2:bc:ac:4e:a8:06:b5:
                    23:48:d5:63:18:66:b4:9a:8e:60:a1:ea:c1:67:d5:
                    d5:8c:bc:0e:cf:ce:5d:b9:07:f4:4d:02:4c:af:39:
                    a0:0b:67:84:ff:04:2b:79:7b:99:09:e1:c8:4f:b4:
                    2e:ac:e8:a0:f1:d6:3e:e5:10:2e:cc:5e:ed:d8:0a:
                    ad:fd:2e:b9:a5:ef:bd:58:97:8f:bb:d9:fb:5c:c8:
                    68:92:00:7a:25:88:b7:02:6b:22:90:9d:c0:55:55:
                    6c:02:15:1a:67:f2:ad:44:60:68:df:5e:48:a1:01:
                    4a:12:1a:ab:28:16:34:ec:45:b5:9b:f3:2f:8b:4d:
                    22:22:1c:3a:67:4e:6d:83:ad:94:20:24:1d:6e:1c:
                    86:32:2b:36:15:90:c7:97:2b:2b:d3:39:7a:12:00:
                    b9:75:f4:e1:ad:3d:39:fb:e2:8c:49:cc:d3:a4:9e:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:DC:B6:76:E6:94:9F:F9:82:75:7A:EE:D0:6C:D9:02:1E:83:B4
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:93:35:d2:73:b4:32:f6:c9:07:67:7b:fa:ec:01:c7:ba:d8:
         f4:30:20:cc:17:e8:a9:57:4d:05:bf:03:e2:81:59:fd:71:8d:
         c3:f7:b7:7f:91:80:87:7f:58:fc:65:4d:d6:28:b7:78:ba:58:
         03:99:7d:b5:e8:20:80:9f:13:8b:32:72:51:8b:7f:28:29:05:
         65:d7:19:52:80:ce:04:53:1e:01:56:cc:da:4f:be:09:98:00:
         3c:03:c1:0d:a2:19:ce:b6:3a:31:2e:99:bc:be:e6:2b:c3:f5:
         c1:6f:2d:27:35:7f:96:f0:34:62:95:9d:fd:a0:58:fc:11:2c:
         9b:68:31:21:39:a3:2d:0e:69:72:cd:0d:3d:27:b7:e6:1e:d9:
         c6:94:4e:8e:a8:93:30:59:fd:f3:77:52:68:9a:cb:dc:f9:7e:
         13:f0:84:db:6d:8e:5e:4d:65:bf:43:95:d2:bf:85:16:37:b1:
         7f:c9:65:72:db:d8:15:22:1a:7e:66:b3:60:23:a7:70:8c:55:
         17:79:0b:58:cf:66:7e:58:9a:52:99:16:1e:65:60:5c:b9:c6:
         26:15:c2:79:53:62:cc:d0:4a:b9:16:ac:63:8c:bf:a3:52:e0:
         9f:51:1a:04:ae:3e:08:d4:05:9b:28:20:7f:ba:9c:de:c6:88:
         8d:2d:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:45:12 2025 by rpki-client