Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
File:                     ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json)
Hash identifier:          fTe7QdeRZGYgc60Eg+e04K2mjRK8tPoGtTZu9V+o5pA=
Subject key identifier:   08:A3:70:2B:A6:71:5B:4F:13:D7:90:C0:65:37:14:A6:9B:27:CA:15
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Certificate issuer:       /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
Manifest number:          59
Signing time:             Sun 19 Oct 2025 10:31:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:31:52 +0000
Manifest next update:     Sun 26 Oct 2025 10:31:52 +0000
Files and hashes:         1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: TesyouLXiFK9j19plYEuscMO3rdADFM+p1g4dj7wiCY=)
                          2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 3wfdkAiEkFODU6B4YeHm0vdAyiuwr8rUvXL2nV5+auc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
                          rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
        Validity
            Not Before: Oct 19 10:31:52 2025 GMT
            Not After : Oct 26 10:31:52 2025 GMT
        Subject: CN=68f4be18-86c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:72:b2:29:62:d6:ab:c9:6c:97:95:74:75:
                    19:a4:5b:b7:79:06:e3:54:ae:eb:c3:f7:84:ca:7e:
                    09:d8:1c:40:a5:d3:7a:ee:40:73:cc:c1:81:12:8e:
                    0b:dc:4b:6d:32:2b:b7:37:75:71:65:ca:0b:7a:de:
                    fd:76:3d:cc:4f:a1:2d:7f:5a:10:eb:ab:27:d4:cc:
                    05:a3:ef:5e:a1:a6:92:4d:43:b9:c3:0d:53:43:72:
                    5e:59:36:9a:cf:fc:7c:93:c1:d7:79:0d:f6:d5:af:
                    94:27:3b:63:1f:3f:67:71:9a:2a:72:5b:e5:99:22:
                    4d:f9:85:cf:6d:51:0b:e0:04:75:f1:cc:4f:9a:46:
                    a8:5a:d1:d9:7b:2d:38:02:17:30:9e:cf:e0:33:3f:
                    99:2c:05:25:7c:2e:52:d3:f6:57:55:dd:a2:40:22:
                    cb:77:be:24:5b:ce:f2:3d:e6:32:05:a8:27:a5:66:
                    66:d6:ef:3f:db:11:91:f5:14:03:8b:61:66:46:0b:
                    79:fa:b8:38:6e:82:cb:8e:e5:fc:99:1e:9a:8f:1c:
                    da:96:9f:fe:0e:27:6a:58:9a:30:c9:25:c4:16:18:
                    2c:ec:22:4c:26:7c:18:ae:55:8d:d4:e9:4a:fb:9e:
                    7d:da:76:f8:84:3e:bc:10:33:1d:4b:ee:b4:1e:1c:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:70:2B:A6:71:5B:4F:13:D7:90:C0:65:37:14:A6:9B:27:CA:15
            X509v3 Authority Key Identifier:
                keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:06:3f:0b:2c:58:0f:d5:27:1f:6f:28:d1:ce:4d:89:c5:0d:
         46:43:e6:0d:79:71:9b:43:f1:21:29:23:7e:9c:f0:44:1c:4f:
         c3:1d:5b:8a:73:cf:35:3b:cd:6f:70:2b:10:66:1a:e7:27:f0:
         2f:9f:08:f6:c9:ab:44:8b:94:56:3c:f0:98:71:3d:f5:42:7d:
         57:40:da:2e:b5:41:df:56:39:5d:38:95:09:02:a8:12:59:eb:
         21:53:11:8d:c3:e5:ae:94:cf:71:be:ac:eb:a7:a6:e4:a7:c4:
         05:03:45:bb:2e:f5:cd:3a:ec:c2:f3:9b:5e:a1:63:2e:b4:42:
         76:c0:25:2e:2a:40:03:c9:20:06:c2:73:49:6b:01:13:95:fd:
         e4:76:90:ab:63:8d:50:fc:07:e7:ce:48:cf:c4:f0:70:75:d3:
         9e:6f:7e:c1:82:71:05:ba:a4:99:ac:99:cc:2b:b6:96:94:7b:
         a7:ad:9d:a9:c5:3d:7c:ea:d9:4f:9e:62:aa:fe:87:d7:0e:61:
         55:df:1f:fa:58:32:c8:d0:7d:61:81:eb:73:16:e5:5d:47:49:
         38:a8:ee:ea:d6:7f:4c:0a:7f:51:9f:df:2e:91:c4:75:b8:6e:
         f5:ac:37:53:54:95:65:b8:d3:12:65:2c:ee:5d:d2:a0:9f:02:
         8a:a7:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:12 2025 by rpki-client