Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File:                     dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier:          vd8v3n5nL+6F1Q4iRMlH6w/bga1rw2Gdg0BBQvQ/CCI=
Subject key identifier:   C5:11:07:7C:8D:D4:11:DF:DD:74:70:2A:88:9E:1C:86:21:53:03:8F
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer:       /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number:          83
Signing time:             Sun 19 Oct 2025 09:55:05 +0000
Manifest this update:     Sun 19 Oct 2025 09:55:04 +0000
Manifest next update:     Sun 26 Oct 2025 09:55:04 +0000
Files and hashes:         1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: mYFqQgy0WAkA+y6sVnzf3EUZNo24C4qyKjQ5kgnXkAo=)
                          2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
        Validity
            Not Before: Oct 19 09:55:04 2025 GMT
            Not After : Oct 26 09:55:04 2025 GMT
        Subject: CN=68f4b579-2a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:a4:75:54:54:af:ed:42:ae:42:f1:39:12:
                    d4:ef:b8:35:cd:cc:d9:82:88:5a:01:2b:2b:8c:bb:
                    17:3b:f4:0e:c9:c9:a1:d1:d4:c3:48:c1:f5:09:40:
                    3f:4d:4a:33:12:8a:ab:7c:64:cf:87:48:e5:e2:e7:
                    ec:da:04:bf:28:30:ae:e0:b4:de:bd:c7:29:bd:59:
                    13:4b:7f:ac:5b:b8:92:a5:70:8a:b4:4b:60:88:d5:
                    b4:58:0a:7f:09:de:c2:4b:16:1e:d3:56:b4:37:8f:
                    48:44:39:fa:cb:7f:89:f8:79:19:72:1d:f0:6b:44:
                    c7:05:6a:d7:a9:6a:e6:d3:50:7e:68:fb:13:57:7a:
                    81:77:ff:ad:5e:a8:af:8a:44:1e:0d:bc:02:42:fa:
                    de:81:bf:ed:f3:4e:ba:52:f6:93:f6:1a:f3:3d:ba:
                    f6:5b:85:d4:14:67:aa:63:77:28:14:8f:c4:70:2f:
                    3b:cb:b0:7d:5f:1e:74:a3:ec:6b:cd:0d:03:a4:7d:
                    9d:7d:06:ae:89:43:db:b7:7d:a3:28:b2:27:ea:88:
                    0f:6a:fd:23:ff:66:06:b4:fe:fa:be:bf:10:19:eb:
                    f1:87:ee:82:a7:2a:52:cf:fa:83:72:72:79:d3:dd:
                    fd:75:07:70:08:29:f8:e2:d6:eb:f7:a0:67:d9:e2:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:07:7C:8D:D4:11:DF:DD:74:70:2A:88:9E:1C:86:21:53:03:8F
            X509v3 Authority Key Identifier:
                keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:4b:27:ce:fd:0b:2d:c3:cf:ee:99:c4:73:42:1f:92:b0:
         1b:76:15:31:0b:95:95:10:58:9f:21:d5:e6:22:92:27:69:b3:
         79:e3:d0:21:45:ef:86:0a:93:b5:6c:44:96:8a:e4:a6:a1:77:
         14:e9:d9:aa:84:8d:eb:60:13:8f:e8:e8:59:c2:d7:72:09:81:
         e6:96:75:23:92:c9:7f:8a:9c:1f:80:83:c5:51:97:96:6b:9e:
         ff:68:a3:bb:3c:e6:3d:43:55:bc:eb:00:e6:4e:00:52:f3:10:
         7e:24:59:a1:0a:b7:e5:5f:ab:a1:38:7e:3b:29:e4:89:9b:1e:
         b7:45:58:f6:a4:69:0b:ed:73:a8:f5:a5:bf:a9:97:3e:72:31:
         94:9b:3c:66:11:53:0a:69:dc:58:65:41:48:8c:e1:e3:46:70:
         67:37:39:f3:27:6d:33:42:dc:62:8d:b7:dc:9f:84:db:ab:e2:
         cb:75:92:59:f8:c4:1d:df:f2:68:ca:25:c1:f1:c7:ec:36:a9:
         c2:79:12:90:9a:cf:83:42:00:ce:ea:93:79:3c:81:f5:2e:38:
         e0:e8:11:35:b3:8d:c5:2f:32:d4:a4:cf:6e:ce:8d:88:64:18:
         1e:aa:85:03:16:b0:bf:5d:22:fb:c2:17:b8:38:e9:fe:ef:88:
         5f:30:e5:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ3OUExMTAvBgNVBAUTKDc1OEFDMkJFREFEQ0JBM0FENzM4MTY5RkIzODlENTA4
QjU0RDc0QkYwHhcNMjUxMDE5MDk1NTA0WhcNMjUxMDI2MDk1NTA0WjAYMRYwFAYD
VQQDEw02OGY0YjU3OS0yYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMCkdVRUr+1CrkLxORLU77g1zczZgohaASsrjLsXO/QOycmh0dTDSMH1CUA/
TUozEoqrfGTPh0jl4ufs2gS/KDCu4LTevccpvVkTS3+sW7iSpXCKtEtgiNW0WAp/
Cd7CSxYe01a0N49IRDn6y3+J+HkZch3wa0THBWrXqWrm01B+aPsTV3qBd/+tXqiv
ikQeDbwCQvregb/t8066UvaT9hrzPbr2W4XUFGeqY3coFI/EcC87y7B9Xx50o+xr
zQ0DpH2dfQauiUPbt32jKLIn6ogPav0j/2YGtP76vr8QGevxh+6CpypSz/qDcnJ5
0939dQdwCCn44tbr96Bn2eJZ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMURB3yN
1BHf3XRwKoieHIYhUwOPMB8GA1UdIwQYMBaAFHWKwr7a3Lo61zgWn7OJ1Qi1TXS/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc5QS8yRTEwRURCMkUz
NzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3VqclhPQmFmczRuVkNMVk5k
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDc5QS8yRTEwRURCMkUzNzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3Vq
clhPQmFmczRuVkNMVk5kTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbPEsnzv0LLcPP7pnEc0IfkrAbdhUxC5WVEFifIdXmIpInabN549Ah
Re+GCpO1bESWiuSmoXcU6dmqhI3rYBOP6OhZwtdyCYHmlnUjksl/ipwfgIPFUZeW
a57/aKO7POY9Q1W86wDmTgBS8xB+JFmhCrflX6uhOH47KeSJmx63RVj2pGkL7XOo
9aW/qZc+cjGUmzxmEVMKadxYZUFIjOHjRnBnNznzJ20zQtxijbfcn4Tbq+LLdZJZ
+MQd3/JoyiXB8cfsNqnCeRKQms+DQgDO6pN5PIH1Ljjg6BE1s43FLzLUpM9uzo2I
ZBgeqoUDFrC/XSL7whe4OOn+74hfMOVi
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:30 2025 by rpki-client