Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          RJTAwaLS5w6hGBaCGhncp7Izo+tO20Z9JbYdwQmjyfI=
Subject key identifier:   83:E2:19:69:74:83:D6:AD:5E:5A:E8:F7:BB:AB:3B:ED:8C:E7:95:86
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          05AD
Signing time:             Sun 19 Oct 2025 00:59:51 +0000
Manifest this update:     Sun 19 Oct 2025 00:59:50 +0000
Manifest next update:     Sun 26 Oct 2025 00:59:50 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: 9XBY21yItTCGXaOO1fxDHsaYhLX4dx+aU5bsNkoSnbo=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: pP9D2oUehQjJpztUJjNznnRNuCVy9bVGqh7L2LkBVuI=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: kT2AfnlLp0OrVDvOsHE1SYkCWdatNHcBJrBf1bHgc1M=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: pEElvlthBMZkrJ4NQJUSCJafhLtTPeQef3dww0L3drw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: 6h1NTpD4tkBzcf6FEpLVgu2lpNKCaqNRRFWFuF/E8kY=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: 77lTgZqL0I1W6ov96DB8qwWZY9G7TaWA13Sr0X7mFrI=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: EY2xH7E9+E/8BIkVui6V405ZiytPNR6va6gRxEqhERw=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zshJYk0TxPL9T44CRx3MVOCJOUXw59+QWEbCFduzfwQ=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: xC7nBd8pI6c9PQRaAQO5yqbAMZfqhv7lX5ydLTiKM78=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: sWgR7Sj23JtA2KAOZv42p7Xi0bd5s2SoEVnKmmEKkuA=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: fspJDcOC1Xb3sd77qo6chvyvEirDEygX2X00yJH8TrU=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: TDT2TF0hKIJKzcCUKe2jUvvcV3tEG3hwyTlJfsApGbM=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: Q3xsSaWPc4XxcLpd/vlmMg5uD6tU7wAyR+WHYWMx34k=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: FivViNGSTU96covzVM6f/dErai70JTFHMUYNfvRAWrE=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: 1UuJRBLU+9P0hB1LDzqG2ADjXjPEKsKsNZhOuRq0FcY=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: Au0QebQKoFo6c5NMcJKLBBukxWShgGMZ9PxCthts+bw=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: SXBGm34mimsdYeltsnEgpB58FMYIOvftCuhhELfcncI=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: rE9WkJIenLF+WGIHOu03ZgrTq1HXqzhO0fgnF30Hn3s=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: wmyGASIiv7a5dM7aYg9Xyk4GHWpb9boUmvi5Wrvs/1U=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: zomtHyrGaDmcZjHE8yW0L9b7dvg8zBD3fUoFwJLpHVc=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: 5NREv/7guHmK9QuLdFXX3blUCgKmaa/v+/K4YSsJKhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Oct 19 00:59:50 2025 GMT
            Not After : Oct 26 00:59:50 2025 GMT
        Subject: CN=68f43806-9541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:08:75:3a:78:8a:e2:fb:e2:40:dc:8a:dd:
                    44:28:93:43:54:d7:7d:8b:76:c1:ce:bb:c3:e6:4f:
                    b0:a8:ba:a8:65:21:f4:2b:2e:8e:e4:65:c0:68:48:
                    59:ec:77:48:65:bf:80:ec:da:b0:2f:63:08:67:7a:
                    f8:ce:0f:e3:c0:25:a9:25:b2:17:1f:88:8a:f5:82:
                    9f:cf:4e:c2:1a:81:2c:26:e4:5c:85:1d:f3:57:2b:
                    d3:d8:f8:d7:dd:6f:c7:a7:84:a3:72:87:e7:9d:03:
                    1e:0c:6d:54:1f:cb:24:44:c1:da:93:91:c4:32:10:
                    f2:59:e8:84:99:a1:dc:5b:d5:38:8b:53:e4:84:09:
                    b4:6d:b7:4f:62:e8:f1:35:09:d0:de:94:92:2e:1c:
                    8f:58:02:c5:67:5e:d5:af:94:fe:65:f3:ab:e4:b8:
                    81:3a:97:19:e5:aa:63:bd:92:49:91:97:92:db:72:
                    bd:8b:08:f7:94:aa:44:31:0f:97:2a:32:c0:82:05:
                    48:70:1b:d1:de:3e:d1:52:e6:ca:df:7d:7d:6b:24:
                    04:ac:a3:5c:6d:8d:92:82:3d:53:ab:8f:9b:61:54:
                    4b:e0:b8:2d:b3:b3:b5:dc:dc:ef:74:3e:af:1e:0d:
                    a8:39:20:9d:2f:18:b0:81:05:8d:9d:b0:2a:4c:d1:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E2:19:69:74:83:D6:AD:5E:5A:E8:F7:BB:AB:3B:ED:8C:E7:95:86
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:a3:17:8b:42:7b:69:55:4a:ce:97:92:9a:75:44:88:16:
         00:d7:7b:dc:ad:e9:55:9c:b2:cf:ce:e4:b4:b8:ec:db:5c:c4:
         72:0c:eb:05:a8:2e:b6:0d:8c:76:55:1e:fa:ee:60:4e:51:67:
         40:0e:dc:02:31:a7:46:d5:0e:e0:e3:ef:6d:e8:f3:a7:90:68:
         8e:78:e6:72:49:e7:04:60:9a:8a:72:99:93:b7:58:90:56:52:
         87:cc:1d:cd:0b:0d:8f:a8:ad:09:21:0c:6d:72:d6:12:a6:43:
         e3:af:dc:60:06:da:73:8d:d3:6d:99:57:da:72:cc:80:bb:b7:
         8d:21:e4:d1:76:27:d3:32:66:0f:50:d4:d2:c9:05:7d:6a:ce:
         3d:6a:32:07:a1:fa:0d:5e:1c:f1:c0:4a:cb:eb:51:6e:93:e7:
         48:33:90:cb:ce:d7:67:14:ab:0f:50:74:71:5b:38:0c:ad:27:
         9a:2f:88:ae:f5:f7:df:14:7c:58:77:f3:97:6c:c8:5b:fc:9d:
         75:a9:fc:ff:0c:3b:e2:02:80:a5:90:b9:4f:d4:42:75:57:0b:
         c3:d0:d0:37:1b:67:e6:3a:e8:2a:49:26:ad:9f:9d:7a:19:67:
         a7:2b:df:fc:97:96:22:f3:56:84:2f:c1:68:63:3e:a3:98:83:
         91:7d:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:38 2025 by rpki-client