Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
File:                     yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json)
Hash identifier:          abohQSjIJaPMGaFYU5jv4i1+v1dI3xVfckMM5fr5MBs=
Subject key identifier:   31:50:6E:0E:58:DB:A4:09:E9:19:7D:CA:5C:C5:6B:33:1C:B6:02:69
Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
Certificate issuer:       /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
Manifest number:          01AE
Signing time:             Sun 19 Oct 2025 05:39:11 +0000
Manifest this update:     Sun 19 Oct 2025 05:39:10 +0000
Manifest next update:     Sun 26 Oct 2025 05:39:10 +0000
Files and hashes:         1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: 5TZHunMKJOXpSarlpjrr2afRpdL7ivO9b1RkI08bk1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
                          rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
        Validity
            Not Before: Oct 19 05:39:10 2025 GMT
            Not After : Oct 26 05:39:10 2025 GMT
        Subject: CN=68f4797e-cda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:51:a9:95:e8:30:f5:dd:77:22:31:b5:98:
                    f5:0a:a6:48:4f:be:bf:6e:e0:9c:9e:38:d4:4d:d3:
                    1d:a0:7b:75:72:96:42:65:28:46:44:2c:17:55:a5:
                    72:5f:39:1c:25:fc:de:ed:8a:ac:5b:49:09:7f:61:
                    24:bc:a9:09:ac:65:19:99:51:14:98:a3:b7:b3:bc:
                    3d:a3:54:e0:24:77:e9:b4:7d:d5:4b:3f:01:a0:dc:
                    19:9f:c3:bd:de:6d:da:82:2e:54:de:ed:56:6e:9e:
                    24:ad:a6:e8:cf:a1:63:fc:79:d5:09:7b:04:23:34:
                    43:81:62:f1:10:3f:6f:cf:63:f4:2f:91:2d:3d:8e:
                    29:f6:f0:9e:a9:32:27:42:1f:7c:b4:7e:9e:59:52:
                    04:0b:89:1e:5c:b6:22:02:b9:9a:5e:b5:09:a0:6e:
                    03:a3:38:9e:3d:fa:44:1f:35:db:55:36:f7:fe:3c:
                    db:7e:76:2e:ee:e5:48:e9:f8:6e:20:50:b8:ac:8c:
                    b6:fc:7a:3a:d7:de:79:ab:23:70:6a:95:7d:68:ea:
                    d9:e3:31:28:2b:68:7e:8e:6b:02:82:7e:ea:22:43:
                    10:f0:8b:0f:3e:58:c9:28:92:d3:bd:94:94:13:c2:
                    db:5d:4e:63:59:a0:6d:ae:64:4a:bf:92:85:64:87:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:6E:0E:58:DB:A4:09:E9:19:7D:CA:5C:C5:6B:33:1C:B6:02:69
            X509v3 Authority Key Identifier:
                keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:21:3f:a5:3c:15:7e:69:6e:d3:bb:41:9a:eb:d0:cb:0e:2c:
         50:dd:27:d8:96:d9:75:b4:1f:20:e7:d9:6f:eb:cf:ab:25:29:
         6b:95:cd:06:67:9e:f0:1a:4f:ac:c7:10:a3:d1:7d:a2:3d:08:
         75:6c:c3:d4:b8:e8:4c:d8:95:cb:d8:ff:b0:5a:15:98:90:65:
         c8:9c:1c:8d:cd:11:81:6e:35:42:be:33:a7:bd:3d:a9:c9:5d:
         b7:d1:6c:80:0c:67:a0:f4:5d:de:52:a3:a0:60:27:bf:a0:0f:
         85:ef:4a:b8:a8:96:d5:ac:51:3c:57:9e:3c:2f:9f:81:f1:47:
         27:d3:7e:f6:9e:bc:f4:b6:f4:2d:e2:ea:d2:db:c8:7b:93:de:
         df:2b:e6:b1:22:8b:37:d3:37:d3:e2:d1:de:24:89:ad:a9:14:
         ca:a0:94:96:76:20:65:1d:9e:86:49:02:46:bf:7a:ab:5a:69:
         83:29:a7:dc:04:7d:b4:ad:fa:0e:ad:7a:c0:f6:32:0e:4c:e6:
         3f:b9:f3:c4:28:30:9e:fb:89:37:a6:37:19:85:69:50:b8:b8:
         3e:12:d8:e9:b9:99:ac:de:4f:31:b3:4c:9f:e6:d7:00:f7:ee:
         1f:8e:97:3b:ba:b3:41:60:1e:80:57:a6:6d:bf:d7:2d:a6:55:
         27:dc:e4:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3NjYxMTAvBgNVBAUTKEM5NTBFNzg3NUEzREVFRTA4MkQ5Q0M1MDM1MDBCRkRF
Nzc3MDg2RTEwHhcNMjUxMDE5MDUzOTEwWhcNMjUxMDI2MDUzOTEwWjAYMRYwFAYD
VQQDEw02OGY0Nzk3ZS1jZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8hRqZXoMPXddyIxtZj1CqZIT76/buCcnjjUTdMdoHt1cpZCZShGRCwXVaVy
XzkcJfze7YqsW0kJf2EkvKkJrGUZmVEUmKO3s7w9o1TgJHfptH3VSz8BoNwZn8O9
3m3agi5U3u1Wbp4kraboz6Fj/HnVCXsEIzRDgWLxED9vz2P0L5EtPY4p9vCeqTIn
Qh98tH6eWVIEC4keXLYiArmaXrUJoG4DoziePfpEHzXbVTb3/jzbfnYu7uVI6fhu
IFC4rIy2/Ho61955qyNwapV9aOrZ4zEoK2h+jmsCgn7qIkMQ8IsPPljJKJLTvZSU
E8LbXU5jWaBtrmRKv5KFZIcwMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFQbg5Y
26QJ6Rl9ylzFazMctgJpMB8GA1UdIwQYMBaAFMlQ54daPe7ggtnMUDUAv953cIbh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzc2Ni9EQjdDRDg4NDE2
NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1Q0MyY3hRTlFDXzNuZHdo
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWRG5oMW85N3VDQzJjeFFOUUNfM25kd2h1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mzc2Ni9EQjdDRDg4NDE2NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1
Q0MyY3hRTlFDXzNuZHdodUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUIT+lPBV+aW7Tu0Ga69DLDixQ3SfYltl1tB8g59lv68+rJSlrlc0G
Z57wGk+sxxCj0X2iPQh1bMPUuOhM2JXL2P+wWhWYkGXInByNzRGBbjVCvjOnvT2p
yV230WyADGeg9F3eUqOgYCe/oA+F70q4qJbVrFE8V548L5+B8Ucn0372nrz0tvQt
4urS28h7k97fK+axIos30zfT4tHeJImtqRTKoJSWdiBlHZ6GSQJGv3qrWmmDKafc
BH20rfoOrXrA9jIOTOY/ufPEKDCe+4k3pjcZhWlQuLg+EtjpuZms3k8xs0yf5tcA
9+4fjpc7urNBYB6AV6Ztv9ctplUn3OQh
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:02 2025 by rpki-client