Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          +f7Og4S1Yg0tkqFv3zP/Oe4Zpwid3960tDlwGaSyBsA=
Subject key identifier:   01:D1:2F:BD:07:B3:14:4F:70:F8:52:4C:C1:34:49:6D:F4:2D:61:57
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0A04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          09FE
Signing time:             Sat 18 Oct 2025 20:51:39 +0000
Manifest this update:     Sat 18 Oct 2025 20:51:38 +0000
Manifest next update:     Sat 25 Oct 2025 20:51:38 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: 8PVk08csIUW5tfh8FreWrUg+8pKTYR86vYAsSUknh7Y=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2564 (0xa04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Oct 18 20:51:38 2025 GMT
            Not After : Oct 25 20:51:38 2025 GMT
        Subject: CN=68f3fddb-891d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:f0:10:d9:2d:02:64:2b:d5:ba:5a:de:4c:
                    5a:e8:2f:5d:bc:d0:66:96:d3:bb:86:19:1d:e5:ec:
                    12:90:26:07:07:04:34:5e:e1:27:d4:26:d5:1f:a1:
                    ee:a1:e5:50:2b:95:90:32:de:08:aa:d9:b3:b7:7a:
                    5c:58:08:96:9f:2e:ca:4c:4e:5a:b8:3a:4d:95:61:
                    7d:90:11:cd:13:f4:8a:5a:00:58:6d:6e:8d:5a:5e:
                    7e:46:0c:62:58:ed:88:cf:cd:f5:be:f1:44:73:a1:
                    02:7d:ff:78:1c:27:5e:11:98:e3:3f:73:a5:b7:78:
                    8d:ae:76:c5:c1:65:b2:e8:e1:66:7d:0f:7e:67:e6:
                    a7:9c:e2:f1:55:60:27:c7:f7:df:b0:67:72:50:58:
                    14:cc:00:f6:b9:71:f2:de:eb:c0:be:f8:5b:07:6d:
                    8b:ac:8f:80:b4:59:f8:fd:a2:79:e1:90:67:95:20:
                    8e:f3:49:7c:78:3b:f1:c4:d9:28:6d:6c:2d:71:4b:
                    3e:c0:c0:ec:96:77:26:2c:23:e7:c5:32:11:f5:c7:
                    55:5c:01:b1:79:d0:03:7e:28:56:5d:df:33:60:ec:
                    2a:b9:ad:bf:1f:77:8b:62:e0:09:6a:5d:61:5a:a6:
                    9d:c9:a6:77:27:c6:60:e3:f8:68:45:db:19:fc:90:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:2F:BD:07:B3:14:4F:70:F8:52:4C:C1:34:49:6D:F4:2D:61:57
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:5b:04:15:86:6e:4e:eb:c0:7a:be:5f:35:c5:06:91:46:
         1c:b1:43:d8:9e:6e:82:ec:14:50:85:75:da:25:24:eb:50:6f:
         d8:f6:6a:fd:ee:52:bf:eb:ae:82:23:3a:7e:38:3d:f1:e0:30:
         8f:f2:6a:c0:2d:ea:59:2f:ea:41:0a:0c:60:04:97:e7:be:78:
         41:b3:30:8d:ac:46:6d:f1:83:37:36:8d:05:33:1c:9d:8f:8a:
         75:25:2f:56:fb:c3:94:d1:47:79:b1:0f:c4:c5:6b:b2:aa:95:
         66:a1:64:8b:27:68:19:2c:e3:09:8d:60:db:e5:a7:ab:7e:f9:
         dd:f4:97:58:2b:6d:cb:28:6b:a3:3a:6d:b2:b2:35:88:2b:d5:
         21:ba:71:3c:c5:2b:79:77:29:43:d6:89:6d:3f:1c:82:43:f3:
         31:53:c0:87:c8:18:df:b9:79:42:ee:2e:83:a5:a0:7c:80:eb:
         5a:95:49:e1:1f:ea:74:ad:18:e1:ae:53:e5:50:e5:72:6f:45:
         6a:e6:6a:2d:f1:68:52:cd:bd:ca:f8:ac:30:10:08:3f:28:ce:
         8a:81:74:66:db:8d:6d:8b:c4:f6:1c:4c:d9:b4:a5:5b:5f:47:
         86:88:df:00:24:d1:86:6b:9e:bb:24:d1:c1:51:65:83:87:00:
         ce:20:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:53 2025 by rpki-client