Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
File:                     yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json)
Hash identifier:          8UhgXm4aCKc74WI64K3JHEUHugocAGZVhyxe/KNDxLU=
Subject key identifier:   C8:A1:AF:DB:35:22:53:70:E9:BB:0D:84:D0:91:0F:B1:B2:48:9F:85
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
Manifest number:          A4
Signing time:             Sun 19 Oct 2025 09:30:40 +0000
Manifest this update:     Sun 19 Oct 2025 09:30:39 +0000
Manifest next update:     Sun 26 Oct 2025 09:30:39 +0000
Files and hashes:         1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: +nifVxQatXeywT6Wy9c/A86PPF3LNDM5ZviuryRgPrs=)
                          2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Oct 19 09:30:39 2025 GMT
            Not After : Oct 26 09:30:39 2025 GMT
        Subject: CN=68f4afbf-c76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:a4:4d:1e:4e:bb:48:ea:d5:a9:a4:d4:ae:
                    18:7d:fd:ac:42:03:3d:a6:31:32:28:7a:3b:04:ed:
                    2b:44:35:b6:85:b9:96:3f:bb:ac:54:73:2f:ea:0c:
                    70:d4:b1:44:8a:e3:a1:b1:5e:83:c2:b1:f6:47:dd:
                    81:52:80:6b:df:66:f5:9a:14:a1:55:e8:22:2c:be:
                    5c:05:0c:93:bb:db:7f:60:eb:33:61:2d:91:6a:f1:
                    65:65:7e:2f:45:83:fd:55:d2:b9:30:5e:f0:e2:04:
                    07:86:fe:c7:08:9c:6c:2d:5e:c9:32:0e:ec:c3:d8:
                    f1:ac:96:4f:e5:ef:b4:b5:3b:1f:93:53:86:97:cb:
                    fa:98:35:8c:03:4f:fd:2d:07:71:31:a8:6b:60:c0:
                    8a:b1:5d:8f:ed:08:cf:94:06:ab:6b:66:77:16:41:
                    18:29:6f:4e:d6:6e:25:69:bb:89:be:60:ff:cb:57:
                    4a:2d:dc:4c:46:79:8a:2f:4b:8c:78:ff:69:8a:c0:
                    4a:a6:3c:a4:a8:f8:05:db:24:8d:96:38:d4:46:82:
                    48:45:80:a1:1e:80:54:ed:ea:ee:fc:d1:c3:99:8b:
                    5d:52:1d:84:e8:73:a6:84:1e:82:16:0f:0d:bd:be:
                    84:73:8c:b3:ab:cd:70:99:45:a9:a4:0d:80:31:87:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:AF:DB:35:22:53:70:E9:BB:0D:84:D0:91:0F:B1:B2:48:9F:85
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:fc:e6:af:31:39:b2:ae:5a:3e:28:5a:dc:d6:98:74:2d:
         a0:43:65:26:12:86:26:f4:f9:57:23:21:48:65:6f:df:98:37:
         77:13:7b:3a:e4:54:ea:58:3a:8c:f8:07:50:54:46:9b:47:8f:
         cd:17:ce:27:db:3e:cc:90:31:3c:b9:d9:94:01:78:b6:48:f6:
         94:09:84:3b:8f:aa:10:90:09:24:6d:9c:30:c5:40:2a:58:a9:
         c9:e3:72:c9:d7:c5:6f:1e:12:18:76:11:49:dd:1a:dd:56:c0:
         cb:c6:b3:2a:ea:19:2e:af:56:73:73:5c:15:19:a8:be:ec:80:
         ff:c0:3d:3d:a3:5c:de:e7:a4:5b:35:e0:22:f1:8d:21:1b:88:
         b2:68:c0:dd:b6:59:2f:dc:9d:2d:a7:05:24:79:f2:a4:db:3b:
         32:4b:fd:74:43:c5:af:64:63:4e:f0:54:92:5f:f2:c2:ab:ce:
         b6:cd:5c:2c:85:ae:26:3d:6e:5a:47:3c:95:82:a6:af:f2:a0:
         6e:db:9a:ec:29:62:97:b7:d7:6f:e1:b0:61:8d:47:dd:b7:28:
         aa:d3:d7:07:17:14:db:b9:8f:ce:68:e9:db:be:5a:d6:72:d1:
         60:a1:5b:72:a5:75:8c:97:10:ca:8f:11:d9:61:71:f7:a1:59:
         56:f1:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:12 2025 by rpki-client