Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
File:                     YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json)
Hash identifier:          rkReOru9ZNRseYI+rGj/2fpOD8D4x+Qwu5DzFmtQcag=
Subject key identifier:   F9:1A:3E:56:74:95:86:1A:CD:39:E3:9D:5C:A6:8A:A5:C7:A5:B4:E0
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
Manifest number:          018A
Signing time:             Sun 19 Oct 2025 06:09:27 +0000
Manifest this update:     Sun 19 Oct 2025 06:09:26 +0000
Manifest next update:     Sun 26 Oct 2025 06:09:26 +0000
Files and hashes:         1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: LlehhpGVzYXUiMnKknAmFIfGnwwGhm8wtamDeTiXVXU=)
                          2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: SEbumSKURIV/eHCI58ieU83y5eYeF9FfOCAWx1SOX3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl
                          rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: Oct 19 06:09:26 2025 GMT
            Not After : Oct 26 06:09:26 2025 GMT
        Subject: CN=68f48097-e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:03:a9:76:ec:4b:95:6b:29:38:41:ea:34:
                    80:a0:d4:da:8f:cf:01:87:c3:08:c8:44:1f:da:b6:
                    28:93:07:c9:e2:51:04:88:ea:4f:28:f9:81:f8:6d:
                    73:68:ac:31:08:56:be:46:ab:f3:58:48:e6:ce:ef:
                    d2:2b:44:76:7e:63:40:60:ac:08:eb:35:c9:9b:20:
                    f5:0e:0a:78:14:91:69:a8:18:5e:b7:5c:82:2f:d2:
                    0d:dc:0f:37:98:3f:e6:ec:8e:d4:bc:08:63:f6:f8:
                    24:10:4e:df:1f:f0:4a:6f:1a:c7:44:78:fa:0b:81:
                    65:b1:1b:f4:58:54:14:e0:55:35:14:48:7c:b4:d0:
                    88:c9:4c:85:75:5d:bb:d0:98:7e:7e:94:65:52:63:
                    f6:85:e6:5d:fa:8e:45:05:ea:9f:f4:59:ae:5f:f8:
                    ff:82:71:5c:ad:46:69:61:4a:68:4c:ce:9c:d3:e7:
                    11:2e:81:ba:2d:bb:ef:69:a2:60:9b:ff:04:5f:70:
                    73:2c:2a:1a:81:e4:83:1d:5e:f4:e7:75:18:0f:8f:
                    5e:9d:40:4b:8a:00:96:83:43:54:b5:f1:34:ad:d6:
                    93:5d:94:31:78:0a:3b:21:ce:7f:f8:95:e9:f2:98:
                    6a:f2:a5:6e:f0:c6:bf:38:4c:d2:fe:09:3c:df:cf:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:3E:56:74:95:86:1A:CD:39:E3:9D:5C:A6:8A:A5:C7:A5:B4:E0
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2e:2a:2c:3e:73:da:44:1c:4e:95:e2:40:c7:d6:e4:92:b3:
         eb:5d:6a:57:20:d4:32:b2:d3:14:4f:10:b3:94:18:63:7e:55:
         e2:c3:f1:82:1f:c1:45:06:12:1b:5b:5c:5b:7c:c1:92:d7:58:
         44:ab:08:87:9a:41:f2:af:99:de:72:b6:3f:4c:a5:d5:7f:6c:
         b1:55:ae:b4:f6:1f:c2:92:4b:c8:4b:87:7e:66:f8:09:ee:06:
         4b:f7:e1:c5:48:26:58:56:0f:67:69:84:95:3e:3e:19:d4:17:
         ea:ba:da:84:1d:53:14:32:91:51:16:69:1b:2d:46:19:83:28:
         09:91:0a:eb:98:e4:ff:a0:9b:75:06:4d:21:ba:bc:e7:b7:c0:
         68:ff:5b:b3:64:46:6e:ff:9e:fc:8d:1a:97:0a:56:eb:f9:a2:
         36:ac:b8:39:05:02:51:f1:93:7e:a6:1b:d9:8b:8d:e6:4a:99:
         26:1d:40:dd:37:5b:2d:f9:4b:a8:2d:33:cd:74:99:5b:d0:23:
         f3:c3:68:47:96:df:e5:e2:f0:1b:7b:87:ed:a0:7b:57:02:e5:
         b9:50:0a:98:42:b8:5f:00:98:10:52:f1:30:88:94:3b:0e:eb:
         6d:02:40:8b:5f:cb:85:0f:8e:af:26:32:51:df:90:f8:38:bb:
         fa:11:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:48 2025 by rpki-client