Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          npkdoXdrN7wJ507JAstio9OYu4JYKyNX/md5T/vk0jk=
Subject key identifier:   09:8C:E0:63:E8:9D:B5:48:18:0A:E5:1B:81:8E:21:62:43:1D:8B:BC
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          04BC
Signing time:             Sun 19 Oct 2025 01:42:31 +0000
Manifest this update:     Sun 19 Oct 2025 01:42:31 +0000
Manifest next update:     Sun 26 Oct 2025 01:42:31 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: FLrfZHyQtdZGCDZL8sDh9i9DEATsoWP7kAaAbu92lHI=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Oct 19 01:42:31 2025 GMT
            Not After : Oct 26 01:42:31 2025 GMT
        Subject: CN=68f44207-f06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:a2:c7:a6:e5:50:4e:30:c9:52:17:01:02:
                    15:cc:6f:eb:50:65:ec:b7:8e:20:d4:4c:f4:c9:50:
                    29:ee:c0:43:79:41:5a:e8:f7:1b:77:e8:dd:d6:f3:
                    fc:2e:7f:00:f9:89:4a:68:81:3f:71:c6:d8:b9:c3:
                    be:cc:e8:d6:9a:9a:07:8a:09:80:dd:ae:86:79:c6:
                    b7:4d:40:29:51:b3:0d:ba:c4:3c:d0:bf:b3:5d:30:
                    db:b1:bd:5a:34:98:48:a6:53:4f:01:51:93:62:07:
                    a0:80:a0:e9:e4:d4:63:73:d8:56:f3:14:2b:68:a8:
                    ca:d6:2d:1c:01:ef:71:a4:83:41:4d:dc:ed:42:7c:
                    e3:81:02:47:c6:8d:06:19:d5:e9:e7:54:5f:cc:5b:
                    71:2a:0a:bd:be:c4:3f:a1:92:af:34:4b:26:ce:09:
                    ec:3a:b4:c9:57:e2:a4:41:e2:b1:57:7b:70:df:32:
                    63:0c:09:ac:20:6a:46:15:27:f9:37:47:69:50:f8:
                    e7:c2:27:3d:14:0a:cf:93:2c:04:6d:32:f6:39:65:
                    1d:21:e5:a8:e1:56:e0:c7:9e:c5:ce:d8:28:c9:71:
                    c3:57:23:5e:1e:01:08:88:a2:24:6f:47:f4:86:2d:
                    c2:6c:f7:14:25:20:ba:02:18:65:68:66:68:a2:c4:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8C:E0:63:E8:9D:B5:48:18:0A:E5:1B:81:8E:21:62:43:1D:8B:BC
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:67:2d:b4:7a:84:b0:f0:41:33:b6:cf:c6:9c:59:3f:cf:
         f6:6d:0b:b0:15:f5:96:8d:60:5e:7c:da:39:e7:f5:e8:d0:f5:
         f7:52:39:d7:b0:fa:23:09:17:31:4b:90:c2:51:4f:4f:fe:c5:
         6d:8e:ea:72:84:31:8e:73:0d:69:5e:23:81:03:c8:20:94:5a:
         5f:42:ad:0f:60:3b:57:23:b3:b5:93:49:66:b1:cb:ad:98:fe:
         a3:8f:e9:19:6b:7d:1d:73:97:df:f9:52:30:c5:6b:0f:61:be:
         6d:15:22:56:49:30:a4:f6:d8:e3:ec:28:90:6e:5e:10:16:6f:
         19:66:ff:c9:8e:f0:d7:dc:5d:ca:8a:70:10:cd:5d:44:d4:51:
         21:3f:02:a3:85:aa:82:80:fd:fc:2c:4c:6a:e3:b9:c0:8c:a3:
         37:9b:15:a5:61:ee:e4:1b:46:b3:c7:b4:bf:6f:0f:d3:0d:71:
         f8:7b:b4:5c:30:0d:cd:05:cc:2a:ee:cc:6c:cd:23:16:09:7e:
         a3:de:13:9a:4e:fd:8a:8e:5f:08:42:da:24:2c:bc:ae:d0:51:
         43:09:bf:6a:eb:ad:1f:e9:2a:cd:cc:bd:d5:37:11:7d:83:6b:
         5f:39:92:93:85:ca:74:89:48:e5:ab:b8:7b:ce:59:ea:75:b3:
         36:4b:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:17 2025 by rpki-client