Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          e+H+LsYZKoGSRIYKY9WKUUaCbMwAT2recUfwsNdTKgQ=
Subject key identifier:   29:E3:B8:F3:C5:34:F8:BA:42:CA:FB:75:5B:37:C8:ED:9E:DB:EB:F1
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01AD
Signing time:             Sun 19 Oct 2025 05:46:10 +0000
Manifest this update:     Sun 19 Oct 2025 05:46:09 +0000
Manifest next update:     Sun 26 Oct 2025 05:46:09 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: NKQKoFfEuV3UfmThenCSjQ3wLdOBx+LBU5MZQXeFcWI=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: CaEKHRoKKS0xih9+MI5NnGo2p0uXvy+Gde+CICjV6ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Oct 19 05:46:09 2025 GMT
            Not After : Oct 26 05:46:09 2025 GMT
        Subject: CN=68f47b21-161f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d9:5c:c8:fb:aa:dd:96:2d:35:b3:12:3e:ca:
                    38:a2:23:60:48:80:79:ee:13:92:d6:eb:d1:b1:7c:
                    4e:3d:c3:5c:0b:4d:0d:6d:9c:39:f0:be:5c:e0:31:
                    9a:9d:03:b6:3a:46:d5:2b:bc:14:0a:0b:58:04:29:
                    c4:56:4e:32:43:0b:7d:37:cb:90:3c:61:c9:11:b1:
                    55:4e:5a:98:0e:04:4c:90:e9:ba:13:94:1e:41:8e:
                    4e:40:3c:ba:28:ab:de:a8:99:16:ad:d9:7e:f0:58:
                    da:eb:74:84:32:a3:3a:02:24:22:9b:ca:50:c7:0a:
                    f7:9b:59:07:db:cd:f2:6b:69:b7:dc:13:8b:f5:7d:
                    87:3d:b6:5f:b3:fd:81:be:cf:41:37:87:38:dc:8a:
                    7d:8a:67:01:70:2e:2f:f0:ff:ea:12:9c:37:1a:4d:
                    9e:ab:9f:3c:29:d6:94:f1:ea:f9:7b:a1:f0:bd:f3:
                    67:ce:f4:cb:75:8f:c7:c4:53:9a:44:3d:93:b3:9b:
                    9d:af:6a:2c:a1:08:4e:ff:b8:da:a5:a4:d1:27:eb:
                    1c:f4:60:96:40:2a:de:2f:df:c6:9c:0f:23:28:ec:
                    d2:6e:45:6f:7b:0d:72:90:37:a6:62:8d:2a:7c:d2:
                    ae:04:4f:e7:ef:6c:5b:d9:56:d1:d0:9e:06:4d:b5:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E3:B8:F3:C5:34:F8:BA:42:CA:FB:75:5B:37:C8:ED:9E:DB:EB:F1
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:34:48:2a:8a:24:6e:4c:45:39:b5:fb:4c:0c:db:c2:15:
         ea:85:d8:67:9b:8e:0d:4a:ef:c3:10:8d:a1:1e:b4:cd:6d:f5:
         23:b9:1b:a3:14:f1:4f:31:db:64:34:89:c4:d2:65:d4:8b:33:
         7b:17:42:6a:f3:dc:16:d9:41:5d:85:f9:ba:9d:9f:85:63:90:
         26:f7:12:d5:cd:32:25:ee:b6:4b:6d:82:92:bd:4b:c5:15:da:
         d5:d2:cc:89:9f:20:c6:ab:7b:d6:9e:e7:56:92:6f:af:f3:09:
         23:61:ff:78:18:05:50:b4:d1:b3:23:ed:87:38:2f:46:2f:fe:
         ed:d6:17:64:df:81:da:f8:d1:d5:1a:6c:9e:ad:88:c6:f0:59:
         f0:a4:48:a2:dd:80:66:c8:90:97:01:aa:81:db:83:5e:b8:cd:
         1a:23:be:2a:9c:71:0b:f0:e7:a5:21:d7:6a:a5:66:5e:5a:00:
         47:22:d8:19:d2:ea:9c:bd:59:0e:ed:82:99:b5:b0:0d:4c:dc:
         39:3a:dd:cc:92:e7:16:8b:b3:f2:7d:d5:b5:0b:a9:f0:d6:6c:
         3e:31:7b:b3:2b:f9:11:e8:52:4d:88:bb:63:de:e7:29:bb:24:
         e8:83:d8:8d:4a:dd:d7:aa:10:28:94:1e:1c:15:09:14:fc:6f:
         ea:0a:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:13 2025 by rpki-client