Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
File:                     yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json)
Hash identifier:          nSEfCUNgsULZewkhP73LbjqRTb5fUXn9px1ZEVmuXVE=
Subject key identifier:   AE:9A:66:B2:EC:8B:F5:2A:51:92:85:20:CA:9D:BF:AD:DC:7E:9A:A8
Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E
Certificate issuer:       /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
Manifest number:          02CB
Signing time:             Sun 19 Oct 2025 03:32:57 +0000
Manifest this update:     Sun 19 Oct 2025 03:32:57 +0000
Manifest next update:     Sun 26 Oct 2025 03:32:57 +0000
Files and hashes:         1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: RMQjubpg3u79Rz5tLmdWVrOSZ+ou4G+Pocxd7af+d6g=)
                          2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: YECGFmsS3YqMK8QF+uRexbLFkUyQX0XL0w3iDLNMxig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl
                          rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
        Validity
            Not Before: Oct 19 03:32:57 2025 GMT
            Not After : Oct 26 03:32:57 2025 GMT
        Subject: CN=68f45be9-9053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:92:d7:a7:20:a7:c3:ef:85:9f:24:f1:de:
                    99:b9:0a:f2:b8:2b:7a:7b:d9:93:0a:75:a4:16:ec:
                    74:19:fb:12:1c:ec:bb:49:6a:8f:7b:8a:a0:b7:25:
                    85:37:f7:37:ec:b8:8b:fa:0c:43:68:65:a7:5f:ad:
                    5c:96:33:06:70:9d:95:29:59:5c:fb:17:c7:80:a5:
                    33:54:94:cf:18:c0:b8:93:1c:dc:2c:04:ab:2d:f4:
                    1c:9f:ea:eb:4c:5e:d1:b6:32:b6:46:f4:de:11:cc:
                    01:45:ed:4d:5e:f4:cb:e4:aa:b5:99:06:dd:b2:f4:
                    05:e2:97:c7:e5:88:f6:3d:2f:a2:9a:a8:1b:45:be:
                    f2:23:35:1e:ff:0b:fa:a0:8c:94:d5:7e:01:0a:ba:
                    57:34:2f:bf:bf:d1:eb:cc:e6:94:5f:29:1c:46:0f:
                    71:d2:d4:cb:94:92:87:98:29:73:88:f4:87:df:ec:
                    5d:dd:b7:61:75:05:bb:c1:78:ae:a8:ef:6a:f2:fb:
                    51:27:25:42:72:59:7a:e4:94:66:c1:fb:aa:56:a2:
                    91:0f:84:48:3d:86:5f:90:ab:87:b8:21:28:7e:e1:
                    58:51:7c:16:31:11:fe:f3:0f:b1:e3:1d:08:65:d3:
                    ad:11:37:28:7e:90:13:ba:82:2c:2d:8e:f1:08:45:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:66:B2:EC:8B:F5:2A:51:92:85:20:CA:9D:BF:AD:DC:7E:9A:A8
            X509v3 Authority Key Identifier:
                keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:49:61:04:37:0a:bf:03:51:80:e6:a8:38:2b:9e:c1:6d:da:
         95:15:c9:8d:77:7b:f9:bb:4e:19:c4:b0:6f:f7:d1:ad:73:d2:
         a2:c0:62:c9:9e:bf:b2:24:c4:7c:91:9b:d7:17:06:53:ea:a7:
         97:9c:1e:64:22:c8:f2:ca:b7:d9:89:49:eb:89:6f:c2:2b:3e:
         c7:e8:72:c0:11:0c:5f:dd:21:88:a5:b8:61:e5:fc:53:c9:74:
         12:ae:53:75:47:98:49:0f:8a:78:52:be:dd:72:c9:2e:d1:9b:
         84:13:fd:49:d5:aa:12:27:80:35:cd:37:c0:78:e4:57:20:22:
         cf:23:bb:3c:1a:91:9a:35:ac:ab:47:7e:ab:39:ef:0b:13:ca:
         f1:0a:f3:9a:1f:af:55:e3:04:7c:67:14:f5:10:a0:6b:a1:42:
         82:3d:6d:f5:a6:a2:12:b1:73:61:04:21:be:ed:c5:8f:d8:0e:
         da:42:f4:18:d0:2d:11:b1:6f:3d:27:93:84:ae:1f:6c:df:32:
         95:e4:0c:57:7e:95:6c:fc:5a:0a:85:67:3c:75:15:c9:41:1c:
         65:f1:e3:e5:4f:4f:8f:02:44:d1:51:30:34:19:15:9e:41:35:
         16:fc:ab:3b:1a:07:c6:7b:64:dc:e2:49:48:07:94:32:66:97:
         c9:37:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:38 2025 by rpki-client