Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          KLPF6didhA6pdSaUku4VSnXxqeuM4k8sGSfZ6f4GzJg=
Subject key identifier:   CA:75:68:8D:57:85:12:2D:19:F1:DD:FD:2C:DD:00:33:2B:58:EC:F0
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       07E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          07DE
Signing time:             Sat 18 Oct 2025 22:23:50 +0000
Manifest this update:     Sat 18 Oct 2025 22:23:49 +0000
Manifest next update:     Sat 25 Oct 2025 22:23:49 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: NNic9eqV/AMy1uo+99b5BIIb+1UhQ5hI5qE2+QPl+p8=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Oct 18 22:23:49 2025 GMT
            Not After : Oct 25 22:23:49 2025 GMT
        Subject: CN=68f41376-5e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:f0:aa:c9:97:91:c6:c0:bd:fe:eb:00:60:
                    e6:99:7a:72:be:f9:53:44:3a:62:ab:8e:b4:95:a4:
                    ff:7e:d4:12:c1:ef:3f:4b:ec:d3:5d:fc:02:c1:d4:
                    7c:78:81:10:7f:f0:09:4c:53:5c:e4:81:ae:f3:51:
                    f3:44:33:ff:d7:a6:a6:de:6f:42:7b:9c:0e:af:b1:
                    2b:d2:82:95:3d:3a:48:72:b1:17:92:8f:ac:76:08:
                    17:92:11:b3:af:a6:f5:83:76:ca:9f:7f:41:c4:2a:
                    f8:af:92:84:1e:ee:e4:66:75:4f:0d:c2:f2:e3:9a:
                    c1:c9:58:45:3f:37:51:01:99:6d:90:2b:bc:6d:ef:
                    5f:2c:9d:a7:c5:3e:f9:3c:e3:8b:7a:2a:48:d7:6b:
                    15:40:4f:c6:02:63:a4:f0:d6:d0:c2:6d:bc:d4:5c:
                    5e:83:30:e3:cc:2e:de:a2:c0:cf:d7:e7:fd:a0:ee:
                    7c:13:d7:ad:6e:e9:d3:f0:db:bd:64:5e:87:ab:5a:
                    36:f3:d9:3a:df:4e:4d:df:57:dc:85:5b:90:40:56:
                    45:42:17:df:75:db:3f:b7:c5:b2:df:7a:5f:c5:20:
                    30:b2:af:88:bb:b5:c9:8a:88:fc:b1:c2:5a:e0:1e:
                    77:9a:d3:8e:dd:0e:b8:83:9d:8c:bf:cf:c7:8f:2c:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:68:8D:57:85:12:2D:19:F1:DD:FD:2C:DD:00:33:2B:58:EC:F0
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:d8:e8:6a:26:c5:a3:49:ec:17:74:10:2a:3a:9c:c0:9d:
         23:3a:8a:42:48:de:05:10:f4:b6:ef:8c:31:a7:6a:0f:a2:b4:
         0d:63:c5:d8:2e:98:45:08:99:2a:5f:29:f6:a9:c7:68:32:78:
         4f:a3:58:67:6a:f0:b6:42:61:29:fe:5d:ea:4e:a4:c0:27:9c:
         d6:8d:3a:2b:b1:b7:30:2e:cf:7a:ad:07:4d:d5:da:da:9b:f4:
         8b:4c:10:14:ed:d9:39:6c:87:bc:7f:12:d7:62:99:c2:f8:82:
         11:31:e7:52:6b:ce:eb:19:c2:64:3d:f3:71:20:a6:01:e8:1c:
         bd:75:fc:15:a9:86:bc:7c:21:6c:4e:c2:29:0c:42:32:3d:15:
         8b:64:df:f7:99:81:a0:f0:2f:b0:99:a0:0e:a2:ae:bf:8f:be:
         ec:53:3d:ad:a2:1f:b1:81:46:9b:20:08:7f:1a:7e:7c:3b:99:
         01:b5:fb:e9:ea:79:02:b7:fd:88:4c:29:a7:fd:ed:6b:f9:e2:
         dd:83:1d:83:40:eb:96:44:c1:ba:0c:78:6a:27:06:fd:8c:9c:
         7a:19:4e:39:d7:e3:7b:99:b5:b8:2a:e0:1c:87:f1:cd:32:66:
         e9:84:13:ab:ce:33:c3:26:70:29:47:4c:21:d7:1b:ca:e6:3b:
         b1:6e:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:23:42 2025 by rpki-client