Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
File:                     YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json)
Hash identifier:          kntNACtwM592tz086mucpcw9TvV+VgpjoaRUIk0h2t0=
Subject key identifier:   28:12:F4:0F:17:5B:8A:65:5B:49:42:15:D0:61:71:B3:8A:DA:1D:04
Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
Certificate issuer:       /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Certificate serial:       34CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
Manifest number:          34CC
Signing time:             Sat 18 Oct 2025 14:46:21 +0000
Manifest this update:     Sat 18 Oct 2025 14:46:21 +0000
Manifest next update:     Sat 25 Oct 2025 14:46:21 +0000
Files and hashes:         1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: E1K8gGL7mFq+f5JOBqhqS/NL6vmqmbh7KWkv3xA5lAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl
                          rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13516 (0x34cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
        Validity
            Not Before: Oct 18 14:46:21 2025 GMT
            Not After : Oct 25 14:46:21 2025 GMT
        Subject: CN=68f3a83d-97bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:3d:5f:eb:5c:8e:8c:b4:67:45:32:a8:32:
                    61:ab:fd:1b:27:74:9a:b4:7f:dd:30:5b:c7:1a:33:
                    dd:70:65:a4:04:ad:f7:42:7a:c2:4a:94:1d:08:8b:
                    06:20:7f:ca:e9:0f:36:a8:a3:3e:0b:b0:47:c4:f1:
                    be:97:62:5d:df:df:06:37:7a:0e:53:17:70:a7:43:
                    20:e9:ab:68:6f:e0:54:80:fc:20:c6:3c:cb:60:e8:
                    d7:6f:4c:17:a7:57:ac:80:cd:62:be:ff:82:f7:c4:
                    06:ff:b0:96:88:28:1d:8a:67:fd:59:41:4f:d5:11:
                    4e:08:f6:b1:5e:c4:13:d3:eb:04:77:09:ed:72:79:
                    54:61:6b:4e:23:28:20:96:62:fd:db:69:d6:5b:79:
                    d5:4c:d0:9a:c6:62:e2:e0:49:11:ec:37:73:42:a4:
                    14:22:4c:17:07:73:c4:40:d9:b0:8e:9a:17:85:9a:
                    5d:c9:8f:aa:3b:95:01:c7:18:5e:0f:2e:87:ee:bb:
                    e2:c6:3e:f0:fd:f1:7b:6c:e5:aa:14:32:65:f2:47:
                    cf:b9:0a:94:74:ae:d0:55:80:70:e2:4d:65:19:11:
                    fc:f8:e4:d9:ff:e1:aa:a6:03:04:ff:2b:6f:80:49:
                    9f:2d:95:88:85:b9:ba:dd:eb:29:07:2a:e6:02:96:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:12:F4:0F:17:5B:8A:65:5B:49:42:15:D0:61:71:B3:8A:DA:1D:04
            X509v3 Authority Key Identifier:
                keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:61:b8:1d:a5:7e:32:bc:c2:c9:a2:66:1d:1a:34:87:59:cc:
         be:e7:8b:4a:51:e8:3c:d2:fb:f9:d2:b5:21:f4:79:88:a2:30:
         96:4e:fe:c3:bf:2e:a5:1f:c5:36:16:17:03:39:e1:99:06:40:
         0b:06:c3:a9:51:2f:b0:7e:1a:a8:58:73:d7:05:07:71:fb:bd:
         f5:61:e6:f2:1a:7b:dd:ee:b2:68:2b:9a:55:93:48:df:bb:67:
         e5:c2:39:bc:6a:c5:87:6d:4b:bd:a4:10:b5:88:98:1c:be:84:
         2d:65:10:6c:4e:70:2d:95:db:89:d8:71:3b:a2:9b:5e:90:10:
         0d:c9:fa:3f:85:21:0c:a3:27:26:b5:b9:70:fe:f0:f4:cb:70:
         5e:e1:64:e2:65:8b:ac:ad:5b:13:32:b3:c6:fb:dd:60:b2:fd:
         aa:fd:e0:db:05:8b:be:e0:ed:b6:89:63:36:0b:7b:58:e2:23:
         e6:a0:5f:f4:b6:38:2a:8d:08:ea:29:dc:e3:08:e2:2b:dc:fe:
         75:fc:d4:9f:a6:e1:75:75:9d:bc:3f:7f:99:95:94:aa:ae:d1:
         09:eb:e2:19:23:67:dd:85:5c:0e:b4:a5:29:24:81:c7:c2:91:
         64:dc:04:9b:01:88:20:e5:45:ac:6f:66:84:8a:03:b0:46:ac:
         6d:8f:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:02 2025 by rpki-client