Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
File:                     YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json)
Hash identifier:          Awsc022fOhcXdHhf3BFVY/K923eqDvIkghsPr4qiqEg=
Subject key identifier:   25:15:3A:86:72:A4:16:D4:DE:AB:EE:68:DC:69:DE:70:C2:A2:40:95
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Certificate issuer:       /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
Manifest number:          95
Signing time:             Sun 19 Oct 2025 09:53:23 +0000
Manifest this update:     Sun 19 Oct 2025 09:53:22 +0000
Manifest next update:     Sun 26 Oct 2025 09:53:22 +0000
Files and hashes:         1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: tL3eepwoqaR8COaFMi+w98YOXYboc/pGQxLiBHwAPEs=)
                          2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: mzE4Rj9TzgxYoPFC7hLQmMNdU4o1ATX8k/0uu+bhb9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl
                          rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
        Validity
            Not Before: Oct 19 09:53:22 2025 GMT
            Not After : Oct 26 09:53:22 2025 GMT
        Subject: CN=68f4b513-41a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:4e:e7:8c:7d:24:54:8a:c3:26:eb:03:15:
                    25:f9:ad:a7:55:1a:9a:18:c2:96:a7:a5:77:d2:f6:
                    c2:53:cb:0b:29:58:0d:d2:25:d2:a7:bc:2d:ff:b9:
                    e7:5f:3e:8b:77:71:66:99:95:b0:f2:02:02:3f:be:
                    c2:07:68:0c:0a:0a:a5:d4:89:e0:a1:9f:43:fb:08:
                    55:14:90:21:3c:3e:e6:a3:04:48:86:37:e4:21:13:
                    10:2a:8b:fe:f1:58:ca:e9:b0:45:7d:d8:65:d9:65:
                    27:93:94:75:67:06:d6:0e:e5:45:a4:e3:57:73:00:
                    f0:f7:04:1b:eb:89:08:99:27:26:95:17:28:a8:2c:
                    ea:29:73:86:99:0d:b6:03:4a:b0:cd:fa:c4:c4:94:
                    e0:50:de:be:24:00:dd:74:f2:52:3f:e1:b3:35:c3:
                    04:f8:f5:48:32:7d:51:b1:05:8a:32:2c:20:b7:50:
                    9a:49:f2:72:69:3e:1d:b5:9a:a7:71:4d:e6:0c:16:
                    0c:f6:4b:25:d8:df:22:57:f5:46:17:5b:38:15:9a:
                    79:46:94:b5:d4:85:34:22:7b:9c:64:3b:57:ef:ad:
                    ef:78:d3:56:30:6f:8e:23:bd:9d:4b:a1:09:ed:ff:
                    11:de:ee:15:0b:f2:e1:7c:0e:69:1b:f2:8b:75:71:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:15:3A:86:72:A4:16:D4:DE:AB:EE:68:DC:69:DE:70:C2:A2:40:95
            X509v3 Authority Key Identifier:
                keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:45:87:ed:bf:f4:78:24:d0:4c:be:5f:9c:fc:fa:84:19:
         34:19:58:4d:e0:e6:b6:db:da:2a:a5:a7:e0:40:66:c2:91:68:
         bf:7a:c5:24:5d:63:02:16:aa:40:84:4e:94:46:ef:4b:dd:c6:
         49:29:39:ad:84:94:a0:1f:a4:07:91:11:88:dc:f0:68:d1:59:
         91:ac:83:01:f7:ea:a1:3d:63:85:dc:ab:72:d5:c5:32:86:8b:
         1e:74:a5:04:a2:1a:4b:28:b9:b4:08:28:c6:d3:b3:77:96:f7:
         58:06:69:bc:04:ca:b9:1f:e5:3a:3f:0c:4f:3c:46:8c:ff:34:
         33:9e:bb:95:52:4e:ba:3b:de:1a:de:71:c9:4c:76:c2:71:fe:
         65:f1:df:2c:03:42:8b:94:87:71:ea:90:1b:16:df:14:0d:b5:
         d5:f8:2a:d6:84:0e:78:a0:62:a6:40:bc:cf:2b:c1:25:eb:fe:
         10:2e:57:a3:85:d7:39:13:f5:f2:59:37:1b:c9:ee:23:3c:0e:
         94:50:3d:7a:bd:9b:ed:94:6b:e2:5e:b7:52:d9:7b:44:e8:e3:
         d8:47:59:ca:b3:7a:ef:49:e2:cc:ff:e5:39:49:d0:a3:33:d6:
         90:89:54:54:ab:c7:c7:75:9e:5f:1d:0d:f7:a8:fe:83:5d:ae:
         dc:39:24:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx
RDg4Q0YwQTYwHhcNMjUxMDE5MDk1MzIyWhcNMjUxMDI2MDk1MzIyWjAYMRYwFAYD
VQQDEw02OGY0YjUxMy00MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DpO54x9JFSKwybrAxUl+a2nVRqaGMKWp6V30vbCU8sLKVgN0iXSp7wt/7nn
Xz6Ld3FmmZWw8gICP77CB2gMCgql1IngoZ9D+whVFJAhPD7mowRIhjfkIRMQKov+
8VjK6bBFfdhl2WUnk5R1ZwbWDuVFpONXcwDw9wQb64kImScmlRcoqCzqKXOGmQ22
A0qwzfrExJTgUN6+JADddPJSP+GzNcME+PVIMn1RsQWKMiwgt1CaSfJyaT4dtZqn
cU3mDBYM9ksl2N8iV/VGF1s4FZp5RpS11IU0InucZDtX763veNNWMG+OI72dS6EJ
7f8R3u4VC/LhfA5pG/KLdXF+EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUVOoZy
pBbU3qvuaNxp3nDCokCVMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG
QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu
R3k1ckYzUUpGQ1VkaU04S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBa9UWH7b/0eCTQTL5fnPz6hBk0GVhN4Oa229oqpafgQGbCkWi/esUk
XWMCFqpAhE6URu9L3cZJKTmthJSgH6QHkRGI3PBo0VmRrIMB9+qhPWOF3Kty1cUy
hosedKUEohpLKLm0CCjG07N3lvdYBmm8BMq5H+U6PwxPPEaM/zQznruVUk66O94a
3nHJTHbCcf5l8d8sA0KLlIdx6pAbFt8UDbXV+CrWhA54oGKmQLzPK8El6/4QLlej
hdc5E/XyWTcbye4jPA6UUD16vZvtlGviXrdS2XtE6OPYR1nKs3rvSeLM/+U5SdCj
M9aQiVRUq8fHdZ5fHQ33qP6DXa7cOSRK
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:24 2025 by rpki-client