Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          OgOmySI9FnRFeg1vsth/Bs4NgEOpQ+U4hc9nfAqVj28=
Subject key identifier:   A8:C2:F4:E7:AB:67:01:AA:9B:E1:1C:2E:79:38:5C:A5:B6:0C:BD:C0
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          01F0
Signing time:             Sun 19 Oct 2025 04:56:18 +0000
Manifest this update:     Sun 19 Oct 2025 04:56:17 +0000
Manifest next update:     Sun 26 Oct 2025 04:56:17 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: aQ95hSkf6d7VN5akvnUjTlqlx5zMYjwnpafSBdO5Fgk=)
                          2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: +zPuXVysVh8bWVHycQS8yrnVHucW3pGeXoMgUWYY4I0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: Oct 19 04:56:17 2025 GMT
            Not After : Oct 26 04:56:17 2025 GMT
        Subject: CN=68f46f72-06b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:e4:95:92:f5:8e:4f:d2:a4:fb:53:4e:97:
                    8d:90:25:d9:98:ca:17:e6:7e:ad:ff:23:28:64:56:
                    2c:6b:5a:c9:ab:fe:1d:7f:56:d2:51:1a:32:ef:5d:
                    85:00:2c:de:44:bd:b7:40:f8:be:44:29:4e:6b:49:
                    8b:3a:3b:92:39:b5:6d:e1:f5:d1:76:be:da:66:2b:
                    ab:fb:ba:85:16:a7:39:f9:6e:cd:36:6a:d0:1b:6f:
                    e7:12:18:54:07:af:a5:6c:e6:ad:96:22:32:31:53:
                    ef:d4:f4:8f:ff:bf:95:39:36:f8:e0:5b:4f:aa:42:
                    dc:d2:4c:0d:92:88:34:09:5d:b0:90:74:25:3b:b4:
                    1f:84:19:69:75:cc:88:b6:86:89:fd:0e:f1:91:8f:
                    a2:3e:05:cd:49:6f:2e:4b:35:bc:57:9a:37:99:af:
                    c6:af:78:d2:59:25:32:ba:0e:64:ea:2f:db:43:28:
                    08:01:a1:d7:a4:8a:69:14:33:f9:da:ac:86:b5:26:
                    1a:00:10:19:f9:8d:21:09:47:6a:38:a9:72:e2:1c:
                    e8:46:10:72:db:bc:c1:27:c8:50:bd:60:80:a4:0b:
                    2c:fa:f1:8c:7e:c2:e8:64:a7:5c:0a:41:ce:84:e5:
                    6b:b6:8e:04:20:1f:35:89:3f:b9:e0:47:d4:fd:6e:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C2:F4:E7:AB:67:01:AA:9B:E1:1C:2E:79:38:5C:A5:B6:0C:BD:C0
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:52:a6:f4:d9:59:eb:8a:00:ab:b7:3a:49:b3:17:fd:99:1b:
         9e:b5:95:45:70:70:da:d5:55:2a:06:7c:44:d3:56:10:c9:71:
         2a:4f:f9:8a:9d:15:d5:30:df:6e:ee:5b:8d:7b:9b:eb:61:f3:
         2a:ff:d5:e0:f8:47:9c:6e:08:09:f1:75:c4:f4:ba:b5:6e:13:
         04:3b:7a:a1:03:2b:6e:5f:b9:9b:c1:e5:07:12:9e:29:da:15:
         f6:ee:c7:dc:58:b9:49:f5:d9:34:3f:46:33:37:e6:dc:1b:9d:
         9e:23:c9:64:72:3f:40:f3:d8:57:bb:b2:23:a0:e3:5c:ab:7b:
         bf:15:bd:15:e8:ae:a9:fb:29:6b:99:f6:c5:c1:ad:76:4a:0d:
         fc:f1:40:43:d4:9d:06:6d:4b:09:a5:87:a3:68:bd:e5:a4:2b:
         60:cf:ec:92:a4:50:f9:d9:bf:42:d2:a6:41:48:d9:f9:e0:48:
         7d:28:6c:7c:4f:a7:35:41:c9:88:c6:30:ed:72:3d:57:2d:93:
         d4:f9:ae:e5:99:e9:35:b8:5e:4b:a6:b1:97:64:7f:ec:9b:06:
         fa:62:c9:89:28:b9:92:eb:39:6d:d8:7e:0e:b1:84:cb:3f:7f:
         ba:d5:2a:62:75:95:f2:ac:1d:6f:6f:e6:42:09:43:21:90:bf:
         44:82:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:31 2025 by rpki-client