Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
File:                     yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json)
Hash identifier:          v4lz+QKbxWc34cOG7/aTFoaNnl5zeNT0CnrZhftfR+M=
Subject key identifier:   FE:0E:15:3E:82:4F:27:04:26:D2:62:F2:44:01:9D:D5:44:10:98:86
Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC
Certificate issuer:       /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
Manifest number:          EA
Signing time:             Sun 19 Oct 2025 08:21:09 +0000
Manifest this update:     Sun 19 Oct 2025 08:21:08 +0000
Manifest next update:     Sun 26 Oct 2025 08:21:08 +0000
Files and hashes:         1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: Sp2G6Kt78qezndbnJOB7vgq/Ppt738ncD9aaLz5xYTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl
                          rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
        Validity
            Not Before: Oct 19 08:21:08 2025 GMT
            Not After : Oct 26 08:21:08 2025 GMT
        Subject: CN=68f49f75-00a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:0a:e9:76:a2:ef:5a:85:6e:b3:c3:6e:90:
                    49:17:35:a8:06:62:9d:11:52:bf:50:c6:b2:43:d7:
                    f7:0f:6a:8e:1e:c4:bd:65:55:c4:b7:da:2c:51:a1:
                    5a:8f:10:b3:11:c7:2d:c4:8b:8f:50:76:eb:51:71:
                    16:55:6f:c7:69:0d:e8:ff:e9:9e:99:c9:0e:b6:b1:
                    f9:49:52:4e:5e:63:ff:92:ae:52:92:da:c5:a9:ca:
                    ff:f4:13:1b:14:5d:0b:13:69:55:e6:47:a9:00:dd:
                    e0:7d:b0:a9:9e:38:e7:11:87:26:16:0e:ed:3a:a9:
                    5d:f3:b8:f1:b0:39:ca:40:df:bd:4e:43:e9:39:f1:
                    8f:ad:b1:b1:84:86:83:f4:ae:aa:86:96:fe:11:30:
                    fb:45:af:7c:ae:77:17:68:d9:c1:75:1e:26:bb:b9:
                    19:f0:cb:e1:18:3f:2d:91:04:49:17:fb:22:bd:ff:
                    a9:2f:81:27:93:e9:94:2e:25:4d:72:34:42:87:2e:
                    ca:9e:7b:fe:74:11:1d:86:24:d5:ec:a0:1f:ba:8e:
                    58:87:24:81:ca:d3:36:4f:dc:a4:41:df:04:79:8b:
                    be:d7:4f:74:c7:3b:a8:2e:0b:74:dd:11:a1:03:35:
                    de:ae:a7:a5:21:44:62:d9:f2:43:ee:7b:51:c3:0e:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:15:3E:82:4F:27:04:26:D2:62:F2:44:01:9D:D5:44:10:98:86
            X509v3 Authority Key Identifier:
                keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:17:74:b9:0d:a6:be:88:aa:ad:ed:90:31:27:b2:ba:1a:88:
         d8:c6:d3:ef:fe:03:b4:2e:d5:30:ce:31:16:b8:c2:cd:6a:a9:
         0a:a6:3b:1b:8d:4c:ae:e9:d0:83:d9:20:3d:56:0c:eb:60:ac:
         e2:aa:dc:71:13:04:3e:7d:a9:95:66:31:58:8c:27:70:cf:5e:
         63:2a:f2:91:85:e3:0b:e1:83:5b:6c:d8:c1:e6:7e:38:41:b1:
         a2:cc:98:64:42:62:5e:b3:e1:cf:21:6d:26:b2:41:3c:2e:76:
         5d:42:ce:41:ee:fe:dc:33:02:68:d1:61:f4:d1:26:57:15:c9:
         0e:7e:d6:ab:47:8c:ad:40:1c:35:19:a7:06:1e:88:6b:d2:e1:
         8a:84:0b:6d:ac:8f:73:c8:06:f5:7c:3d:df:7e:6b:a6:3f:ba:
         f8:d5:d8:a5:d2:c8:27:73:b5:7b:16:af:69:2f:88:5a:01:d5:
         7c:54:29:14:1a:dc:a3:91:3e:98:78:1a:e3:37:ff:e2:fb:84:
         2d:f7:56:67:21:50:f4:c1:d2:36:b5:6c:fa:cb:54:df:ec:2c:
         9b:ab:a0:31:7e:83:70:97:88:58:3e:26:b3:8a:a8:06:29:17:
         0e:b8:08:bc:ca:23:40:2e:82:04:92:2e:f0:f1:76:e4:54:bc:
         e5:53:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:53 2025 by rpki-client