Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          /l1WZ1mZL8RzSaAfwO9ocwF5VxBRNjyUiU7Sl4Y0AOs=
Subject key identifier:   DC:79:D7:C9:C9:68:8A:BB:64:A1:A2:CC:0B:2D:10:5F:10:02:34:92
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0DF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0DD9
Signing time:             Sat 18 Oct 2025 18:32:07 +0000
Manifest this update:     Sat 18 Oct 2025 18:32:06 +0000
Manifest next update:     Sat 25 Oct 2025 18:32:06 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: 1ITdGrZhvQcTXBkygJE8bdalrB6hb7Uy4Zom+eV5U68=)
                          2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=)
                          3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=)
                          4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3569 (0xdf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Oct 18 18:32:06 2025 GMT
            Not After : Oct 25 18:32:06 2025 GMT
        Subject: CN=68f3dd26-e9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:5c:b7:92:45:f2:bf:ef:22:83:ed:59:dc:
                    4f:ad:4b:9c:7a:c6:13:c6:b3:9b:29:45:a2:54:6e:
                    59:35:fb:ab:b5:f6:fd:04:e8:72:10:a4:9b:51:a9:
                    81:58:1a:18:76:49:e6:62:b8:54:5b:8f:e8:6a:a2:
                    35:6c:7e:21:fd:e3:eb:41:e4:c1:8a:10:fe:cc:a3:
                    94:a7:6c:8f:05:28:9d:0e:e7:9b:2f:9d:7a:9b:b1:
                    1e:5e:69:21:b3:8d:14:f1:1c:10:87:5a:44:93:bd:
                    16:f4:65:88:d9:89:7d:31:2d:cf:c9:e9:36:82:16:
                    f6:3e:7b:c0:af:a2:90:d3:6d:b0:57:34:0a:aa:82:
                    d4:de:4d:4d:49:6e:9f:9d:32:4c:81:30:9c:c3:d7:
                    2b:c3:e5:77:20:cc:63:d3:0e:ed:20:f6:47:74:40:
                    6f:75:92:60:73:c9:dc:f1:4a:73:72:ea:71:a6:36:
                    5a:e3:b4:6f:e4:a9:b7:d2:b6:9d:49:07:b6:b8:d9:
                    92:34:50:dc:5d:f7:95:d9:7f:16:e0:c8:6c:36:74:
                    89:73:93:d1:65:48:64:a6:68:09:a5:05:57:7d:8d:
                    7e:8d:47:9a:79:23:aa:f7:13:84:50:4d:04:02:e2:
                    2b:92:06:c8:59:20:f1:87:ee:db:85:d3:c6:15:f5:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:D7:C9:C9:68:8A:BB:64:A1:A2:CC:0B:2D:10:5F:10:02:34:92
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:5c:d3:75:04:a3:e8:e6:15:e9:10:89:81:df:b7:62:74:
         b6:b2:91:07:1b:0e:54:99:d2:e9:ee:10:bb:d7:14:96:0d:43:
         43:e9:c5:c3:6b:4e:c7:e5:75:a5:7b:6c:e2:30:dc:e6:74:d1:
         30:20:4e:d8:5d:68:6e:64:7d:bf:e6:0d:a6:16:c8:aa:94:ea:
         e5:9f:5f:96:9c:bd:39:60:76:08:6b:5d:60:9b:d0:a9:5d:2f:
         cf:58:78:8b:e2:4a:af:57:30:29:25:cf:43:78:03:db:f4:02:
         22:54:ec:d6:0a:97:57:d1:da:9a:c4:1f:85:57:05:3e:d2:26:
         c7:42:85:85:88:a6:c8:6b:f6:ca:19:2c:f2:63:80:5d:8b:38:
         14:aa:b8:c3:f9:69:b6:99:e6:8a:b0:06:7a:86:02:3f:93:8a:
         f9:93:54:51:6b:13:fa:e4:48:71:36:5f:c1:04:d8:db:b9:62:
         94:62:0c:41:13:1e:d6:68:12:4c:42:88:ad:a6:7e:2c:77:9c:
         a2:9b:2c:87:a5:4b:b0:b4:fa:82:44:05:6b:5c:45:4e:a6:2d:
         cf:cc:b8:b3:7d:24:a7:ca:e0:d5:a3:e4:c7:c6:3f:12:70:1e:
         bb:e0:75:25:ef:2e:de:10:d0:4c:73:ca:0f:06:76:3b:77:4c:
         7a:6b:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:48 2025 by rpki-client