Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          6QwMeDdWmxUhPpy6BlDbMj+S8Hj8fL/a8lyDpa3NtKE=
Subject key identifier:   F4:C4:67:E6:28:30:B7:8E:8B:F2:29:53:4A:F6:74:1B:D1:45:DD:10
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          3B
Signing time:             Sun 19 Oct 2025 10:57:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:57:34 +0000
Manifest next update:     Sun 26 Oct 2025 10:57:34 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: li0He7JL3s3/A5hyw6bJLHd2wmLVDtc7I4W2LaSu0F8=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Oct 19 10:57:34 2025 GMT
            Not After : Oct 26 10:57:34 2025 GMT
        Subject: CN=68f4c41e-7249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:85:b9:ee:ec:d9:a0:7e:ef:4e:d3:11:66:
                    ad:ae:be:6e:f0:29:31:e0:e5:e5:c7:fa:61:fa:d6:
                    c6:d4:ac:5f:29:2e:dc:37:f9:42:6b:fb:d6:ba:1c:
                    a6:e2:1c:14:2d:70:79:e6:cb:43:55:14:22:38:bf:
                    00:f1:17:bf:25:be:74:07:e3:58:ac:f5:84:f9:c1:
                    5c:93:d1:ce:86:27:83:46:1a:78:74:fc:28:43:4b:
                    6b:e1:49:4b:9d:7d:02:ad:25:bb:bc:c6:22:ff:ad:
                    2e:7a:ff:eb:7f:95:a8:d1:10:f3:06:46:96:9b:e2:
                    2c:18:0c:18:a1:1a:bd:c8:0a:2f:01:c1:68:54:86:
                    51:99:c6:79:87:a0:bb:26:bd:c7:8d:65:50:e4:3a:
                    82:0e:99:9e:c1:4e:05:27:fb:fd:07:c8:35:6d:ff:
                    c0:8f:aa:1e:3e:a7:44:39:0e:83:47:9f:62:33:40:
                    48:cd:58:d9:9e:25:d1:93:84:f1:d2:f8:a0:26:43:
                    a4:6e:92:b2:ab:a1:4d:4d:5a:aa:62:fc:fb:8a:d6:
                    63:6a:5f:bd:20:ac:5b:03:d9:63:58:f4:b0:4a:1f:
                    14:d4:93:e7:93:09:9b:c9:de:ae:20:a6:79:07:e3:
                    4a:1d:b0:41:92:2c:3e:75:e2:98:e2:f3:9e:5c:f5:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:67:E6:28:30:B7:8E:8B:F2:29:53:4A:F6:74:1B:D1:45:DD:10
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:45:5e:f9:af:db:94:52:3f:4a:e6:cd:83:79:7c:2b:b8:
         be:e1:31:e4:75:5c:91:71:34:d5:d3:dd:8f:c9:f6:c1:e1:30:
         a1:e7:31:05:6c:d2:21:05:20:56:6c:ec:fa:74:8d:f9:06:bf:
         4e:b5:6e:86:85:e3:ba:ce:3d:a5:93:46:e3:83:83:cc:d0:57:
         25:4e:b1:83:89:6b:e1:a9:a4:82:92:aa:0f:85:93:6c:37:9f:
         fb:c3:9d:70:43:d1:5f:23:d2:dc:10:35:fd:53:98:b6:77:35:
         2b:0c:d6:86:b3:19:7e:34:e7:31:79:12:8f:a1:10:db:d4:e8:
         c0:e0:d0:e3:e8:32:53:a9:a6:f1:f4:68:1a:9f:43:91:52:0d:
         99:95:e8:7a:29:d7:9d:6e:18:d0:14:78:87:cb:9d:9d:a0:71:
         e1:91:20:d2:e6:51:2b:24:ae:40:7b:54:d7:b4:21:25:cc:28:
         45:f3:80:87:88:ac:7c:f8:b6:77:e7:b3:58:42:ff:41:85:da:
         a7:62:a2:54:15:57:92:5b:30:08:a3:a1:5f:32:7d:1e:04:e4:
         bd:ed:e2:2e:7e:f5:80:aa:90:0e:7a:88:0a:bc:2e:9a:d9:67:
         f8:36:86:9a:34:c9:c3:11:b7:f6:ae:80:dd:98:7e:d5:a2:a9:
         f3:aa:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:07 2025 by rpki-client