Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File:                     YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier:          NtTLYTHy44ofkwsyRVCSpIevG9wOBcD29uL3a3T0LKc=
Subject key identifier:   C6:80:5D:87:46:7E:99:E7:90:F5:8D:94:FE:A4:74:0E:26:04:E1:C2
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer:       /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial:       0485
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number:          047E
Signing time:             Sun 19 Oct 2025 01:58:42 +0000
Manifest this update:     Sun 19 Oct 2025 01:58:42 +0000
Manifest next update:     Sun 26 Oct 2025 01:58:42 +0000
Files and hashes:         1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: xBKsUuwwlPR0bWvxgMCxSr44nC3yb0WXwcRKBl6N8+o=)
                          2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: fiRDq8Ve2DGr8VfowojUVTWRBK4XLT82cjdE+awZmkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
                          rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
        Validity
            Not Before: Oct 19 01:58:42 2025 GMT
            Not After : Oct 26 01:58:42 2025 GMT
        Subject: CN=68f445d2-cecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:74:08:d7:d0:c8:db:36:41:50:90:51:38:
                    85:9d:03:b3:db:5f:28:5b:33:ec:98:76:d3:4e:1d:
                    76:25:ea:0f:45:4d:14:10:3a:7f:46:52:76:73:d9:
                    c5:c3:95:74:ba:01:32:03:8b:5d:44:01:6d:30:00:
                    eb:ba:7b:73:66:9c:d1:b1:cd:78:e2:16:48:a0:fd:
                    80:62:d8:d4:8c:04:de:99:19:f4:e0:f8:e7:19:37:
                    07:7b:cc:4d:e3:d3:38:de:ad:b0:f6:28:50:23:f0:
                    14:12:13:80:39:0e:c3:26:49:c5:9a:c4:24:31:0d:
                    e8:51:cd:35:ee:4d:b0:06:96:34:aa:8a:3f:bc:3e:
                    d7:a2:2b:9e:89:f5:b8:4f:82:07:3d:3c:f6:9f:f3:
                    2b:dd:21:ec:77:c5:f8:10:92:14:25:ee:e4:1a:45:
                    0b:18:6c:64:7a:29:3d:c8:aa:e4:5e:9f:0f:55:64:
                    ef:ec:af:cd:56:20:01:9c:8a:75:e9:12:5b:36:0f:
                    43:3a:6d:07:0f:da:ca:9c:a1:20:ac:7c:30:9b:8e:
                    ae:5f:a8:cd:63:ed:3a:fb:63:c8:56:8e:76:c4:44:
                    1c:d6:54:03:9a:05:fe:f1:85:6d:d6:3c:27:b1:9e:
                    a9:5a:ef:29:fe:75:7c:0b:77:05:f5:4c:5a:2b:51:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:5D:87:46:7E:99:E7:90:F5:8D:94:FE:A4:74:0E:26:04:E1:C2
            X509v3 Authority Key Identifier:
                keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:2e:c8:8c:06:03:97:d3:1e:46:54:66:90:bb:64:63:d3:
         e4:3f:be:1a:a6:df:28:ad:c7:59:a0:0b:44:d7:64:f1:35:a2:
         b5:ec:3f:cd:19:06:95:19:66:d4:33:4e:34:fd:f0:96:e2:67:
         55:52:ce:1d:39:1d:da:0c:38:23:d5:bd:44:90:62:45:b7:94:
         b4:7c:2d:6b:84:2c:c2:0b:21:91:14:e2:af:ef:9b:3a:a7:86:
         a3:61:5a:5f:11:88:11:0e:62:dc:59:dd:d9:59:5f:c2:20:90:
         2b:e9:dd:05:ea:b0:00:e5:71:d6:cf:3e:57:53:c9:5d:87:48:
         fb:e0:62:c9:94:7d:73:fd:9d:3f:cb:24:e5:47:47:ea:58:23:
         e7:0c:87:e6:f8:28:bc:19:32:5f:86:4b:78:e9:88:94:e2:c0:
         8d:6a:f2:aa:df:ea:d7:88:30:54:09:35:2d:74:4c:80:c5:2c:
         e8:0b:b5:e2:6e:67:8a:6b:02:05:c5:85:9a:3c:0b:a9:39:65:
         4c:f8:f1:28:ea:80:64:12:57:db:a6:7d:6e:80:cc:c2:02:ac:
         63:ce:b8:88:47:bb:4b:fb:4e:01:cd:d5:23:de:17:30:10:ad:
         3c:32:27:b2:8a:e2:4e:5c:5a:fe:a2:84:15:4e:d7:93:a8:d8:
         49:f9:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:01 2025 by rpki-client