Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          tF0w6yIftgJ90kWaBTHUrsmiL+9kcuSZKSP4tuzyXqE=
Subject key identifier:   B6:B5:9C:5B:DA:3A:41:34:ED:06:7A:85:D1:38:C6:4F:69:CC:FB:6B
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          0115
Signing time:             Sun 19 Oct 2025 07:54:19 +0000
Manifest this update:     Sun 19 Oct 2025 07:54:18 +0000
Manifest next update:     Sun 26 Oct 2025 07:54:18 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: upD1/HkmwWSjv4XKc43GMVuVRa2lXAoqdPBi7qAJVAg=)
                          2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=)
                          3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: LUt9DJS6Jpbs8PDzvIpOLhLuEq85uifRo0wnGTYcGuc=)
                          4: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 1i0d6pr2ELd59qaQmu9345pITiiNAhlVL8hxc+i1TcY=)
                          5: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: 08jGNnEflD8e5x3Cs8u4vH+jCRzHFAlUOBfwuUSSNb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Oct 19 07:54:18 2025 GMT
            Not After : Oct 26 07:54:18 2025 GMT
        Subject: CN=68f4992a-0cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:ca:6d:b0:e1:c1:2d:70:b8:1a:f7:49:a9:
                    d3:a2:26:3e:50:40:13:86:c1:f1:9a:06:68:cc:65:
                    a7:a1:17:b8:84:a8:08:ff:12:24:84:4f:57:91:f2:
                    b4:67:21:97:fc:c7:02:cb:0f:19:e6:5e:68:16:9d:
                    95:c3:38:ee:64:26:21:28:c6:c4:86:4a:8b:7b:b1:
                    e5:6a:da:17:6a:68:d5:f9:a3:f9:a4:0c:0a:8e:67:
                    b3:21:e9:6f:6e:ae:fb:c7:45:16:b4:e9:b7:89:66:
                    60:c8:fa:16:bf:34:a8:85:9b:0e:b3:90:66:fb:18:
                    ac:2a:2a:66:6c:33:c0:04:0b:99:44:3e:a9:ee:ac:
                    c0:83:c1:19:51:ae:72:3a:fc:b0:68:13:26:9c:64:
                    cb:18:01:e0:07:f2:b2:5a:fc:f2:ad:31:53:8b:fa:
                    e0:be:8b:0a:ca:ca:34:12:42:c3:52:ef:ed:24:4a:
                    37:48:3b:05:8e:af:74:82:ae:f0:35:1f:09:bc:f5:
                    d1:9c:30:a9:6c:e0:7a:c7:58:63:c6:1e:d5:6b:d6:
                    22:de:6c:60:78:42:3d:b9:15:bd:06:37:1e:1d:07:
                    29:e3:0c:05:11:69:ac:7f:4b:f9:77:cd:ea:5a:7b:
                    17:5c:1f:79:0b:e1:3a:79:db:ea:74:16:06:38:97:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:9C:5B:DA:3A:41:34:ED:06:7A:85:D1:38:C6:4F:69:CC:FB:6B
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:eb:d4:7c:15:df:ce:de:81:4d:5a:e9:32:1b:11:f8:90:
         e6:67:78:36:d1:b2:8c:04:41:5c:44:64:8d:f0:dd:49:00:13:
         b7:e9:65:99:64:76:4c:65:91:3d:40:7e:34:53:00:c4:96:43:
         9b:92:8b:b9:f7:69:bd:62:a1:b8:d3:e7:b6:f8:05:35:34:5a:
         cf:f9:6d:2f:b4:c2:e3:e2:2a:52:e9:37:7a:89:ec:0e:fc:96:
         3f:5f:ad:28:ab:f2:7b:5c:55:b0:5b:65:15:e7:a4:52:89:e9:
         37:d0:fa:a1:d6:7d:09:0a:fd:ec:9f:4d:86:c0:0b:48:e3:1a:
         57:e7:6f:b3:c2:92:37:ad:b7:d2:b6:3d:82:af:8a:ab:17:5b:
         55:72:4f:e9:7f:da:00:72:55:81:e2:e5:79:b0:65:d0:52:32:
         54:a9:60:e8:c2:d3:1a:1a:a1:98:74:5f:fb:de:3f:96:b0:35:
         72:72:89:d8:2f:61:b0:46:f1:5c:2e:5e:ea:8b:e7:95:b4:cd:
         d1:00:02:db:7b:41:c8:25:6e:97:6c:18:43:a4:5c:ce:7a:68:
         3b:21:e0:50:4b:a8:d8:8a:16:16:5f:26:00:43:ca:f3:a0:03:
         08:58:9e:f6:c9:5f:e3:93:06:86:64:9c:59:4f:10:d1:58:36:
         0c:86:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:52 2025 by rpki-client