Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          dhTMQLaJkP1aMkp28fgSkX8vOlZHpAK0TEFKduT2ck8=
Subject key identifier:   16:DE:83:07:EC:E9:EA:34:25:69:55:26:E7:23:CE:94:26:61:C3:E2
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0B1B
Signing time:             Sat 18 Oct 2025 21:24:28 +0000
Manifest this update:     Sat 18 Oct 2025 21:24:27 +0000
Manifest next update:     Sat 25 Oct 2025 21:24:26 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: Ka+R94rx8VqPivvi+EKTWZoy3PvW8r4eG68I0ZTGy9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Oct 18 21:24:27 2025 GMT
            Not After : Oct 25 21:24:26 2025 GMT
        Subject: CN=68f4058b-4168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:62:5d:a8:93:12:46:f0:dc:ec:7a:01:ab:
                    ad:2b:47:b4:11:5e:a6:d7:94:a7:5e:5e:56:48:25:
                    80:db:86:2b:17:31:40:d0:72:87:fe:34:76:f5:e7:
                    dd:e7:07:29:13:7b:3f:af:8d:1b:f4:0c:ee:05:3b:
                    96:11:31:d5:be:28:29:8f:97:85:bd:c9:d4:03:ca:
                    9e:9c:b6:44:59:33:ec:c2:d3:39:5f:fa:66:77:c6:
                    b4:e1:53:b9:92:53:d8:47:c6:5b:2a:42:a5:5e:6f:
                    a2:f6:e7:e3:df:cd:a7:81:c2:39:ac:fd:77:d2:66:
                    d0:80:38:66:5c:bb:c9:f2:77:34:ee:55:4c:57:ed:
                    b0:35:43:84:49:ae:b6:44:49:35:0b:83:ca:25:a8:
                    77:df:2c:6b:4e:b1:e9:4d:4c:c4:e8:0d:f2:66:7d:
                    27:8a:e7:d7:74:8b:dc:f5:86:5c:13:20:17:20:f4:
                    53:a3:fc:dd:9c:12:44:e9:c5:03:29:2c:da:50:7c:
                    a0:d0:36:60:d4:4c:6f:0d:d0:11:0c:34:55:c5:6e:
                    47:3e:56:88:31:76:42:7e:95:54:93:11:b9:22:64:
                    cb:a7:2a:34:15:a3:ee:ed:f0:4a:8a:a7:37:37:6f:
                    e4:b1:75:22:4a:20:00:1f:ff:87:ad:f9:b7:5c:42:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:83:07:EC:E9:EA:34:25:69:55:26:E7:23:CE:94:26:61:C3:E2
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:d9:aa:ed:27:e1:be:31:7b:ec:86:cf:ec:0e:3d:cd:fc:
         ee:e7:65:2f:c7:c2:c9:5d:0b:58:34:98:ec:0f:31:1c:cf:69:
         b6:cc:ee:3d:35:60:ef:c9:7b:48:26:8f:f4:8d:f6:55:53:62:
         41:83:85:8f:57:30:47:f6:cf:e4:4a:e4:b8:bb:f6:83:09:e7:
         ee:60:2e:7d:5c:8b:be:47:16:7c:03:a7:98:ab:de:c6:de:7b:
         bd:22:99:0b:c7:93:ad:33:1d:4f:14:f4:32:49:25:97:6b:0c:
         fd:bd:cf:a3:72:54:42:24:0d:65:de:c4:ea:46:c2:d2:1f:41:
         fb:03:d1:34:2e:db:16:87:0e:13:88:0d:8f:28:1e:e9:a4:bd:
         c4:2f:62:c0:84:05:41:99:3b:91:51:0f:21:41:58:97:c5:e6:
         eb:ce:5f:66:00:f2:99:5a:42:ae:6d:32:c0:a1:da:1c:3a:da:
         d3:07:96:e1:ce:11:c8:91:7e:e1:a7:ca:9d:5d:2b:9f:73:28:
         ed:5e:7a:43:83:e5:38:d7:e6:81:e2:53:bc:03:10:a1:82:ab:
         34:63:18:d5:1f:07:c6:83:e8:ee:ee:42:b7:df:37:cf:8e:71:
         9c:2a:47:42:25:41:53:44:51:99:8d:58:b8:1e:c7:d7:4e:dc:
         9a:43:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:29 2025 by rpki-client