Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File:                     YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier:          Q5/EMEc/GULfJa2U/NMNo8Cequcxqfb6Rv3O7Ap0vXI=
Subject key identifier:   B1:50:66:47:61:49:FF:25:BC:47:2C:39:79:B5:F9:2D:91:B0:65:92
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer:       /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number:          02B1
Signing time:             Sun 19 Oct 2025 03:41:35 +0000
Manifest this update:     Sun 19 Oct 2025 03:41:35 +0000
Manifest next update:     Sun 26 Oct 2025 03:41:35 +0000
Files and hashes:         1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: V2nVEwl8hdhsueqv4S3oY28IpuOTAtIqi69zxZNJ0ps=)
                          2: 008C0876148311ED856EF438C4F9AE02.roa (hash: P+roK1MWVCeuqJ3VqTzxEcvXNnpNsDkqcE1YQV3b+P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
                          rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
        Validity
            Not Before: Oct 19 03:41:35 2025 GMT
            Not After : Oct 26 03:41:35 2025 GMT
        Subject: CN=68f45def-4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:e0:e6:ba:e1:8b:58:d0:9b:61:17:fb:3b:
                    b3:80:26:32:68:23:ef:d8:21:87:98:2a:a5:e2:23:
                    0f:77:98:dc:6e:96:a3:50:cf:dc:07:1e:0a:61:53:
                    20:8f:9f:a3:ba:39:4c:9f:4f:28:47:f1:63:be:0e:
                    86:a8:8a:5b:b2:8c:6c:eb:46:82:1c:43:5d:a9:3f:
                    01:b2:c4:63:12:db:4d:49:52:c0:99:39:32:ba:ba:
                    5c:0a:c1:ce:5b:ba:7b:45:6b:ab:d0:62:78:e5:aa:
                    47:b3:d9:0e:e4:aa:a4:c6:76:ef:b6:86:75:8a:16:
                    9e:2e:17:16:48:8d:c0:89:a9:59:2f:5d:df:37:c5:
                    5e:3c:d1:6c:dc:4b:54:24:09:64:45:ca:50:df:92:
                    78:a9:8b:ac:18:51:10:b5:37:94:28:14:7b:4b:72:
                    a7:18:8c:ef:36:ea:f6:af:e1:2a:6e:15:81:e4:b9:
                    9b:59:f8:62:30:7e:b0:dc:01:31:fa:63:0a:83:3e:
                    8a:ce:2c:ef:d1:49:50:46:21:32:32:74:d9:7b:75:
                    1a:86:c0:21:f7:41:88:c7:9a:cd:6e:45:1a:74:1c:
                    94:b4:95:14:10:9a:17:1e:c0:c0:af:f6:a6:c4:48:
                    33:87:04:78:df:dc:af:1a:a3:3a:55:20:16:6b:a1:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:66:47:61:49:FF:25:BC:47:2C:39:79:B5:F9:2D:91:B0:65:92
            X509v3 Authority Key Identifier:
                keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:22:69:ae:54:01:4c:77:6d:42:17:61:b6:8d:5a:be:71:30:
         da:26:39:44:f2:d6:5f:00:ff:d2:a8:97:3c:19:f3:75:0b:a7:
         9f:57:ba:7c:ad:c2:86:d4:ed:3d:ff:de:45:b5:3f:77:85:cf:
         52:0e:1d:a0:99:03:19:25:8c:b2:76:bc:42:9f:2f:bc:ae:87:
         4a:c0:69:d5:e0:97:7b:ca:e0:6b:7b:88:c7:56:75:6f:92:8b:
         6c:a9:ac:c1:70:1b:70:d2:e3:5d:ef:54:5e:67:e1:89:04:2f:
         7d:fe:77:18:a3:e0:4a:08:bd:12:de:75:83:59:46:63:5b:72:
         af:2e:d7:cb:dc:70:29:41:19:b5:37:4c:61:df:67:ee:6e:cb:
         32:c2:fd:e2:e3:a7:8a:fe:3b:6f:7c:92:f2:1e:6f:cb:b1:a1:
         c2:d2:ec:33:96:a1:2e:57:26:5e:90:48:94:a9:a2:94:0d:4f:
         42:70:d6:9e:ce:f9:fa:06:5c:92:ef:7b:2a:9c:43:93:f3:e8:
         53:90:4c:1d:ad:10:e3:2d:9a:13:a8:26:e1:cd:d3:c8:1d:df:
         f2:6c:1f:74:ea:11:11:d4:e3:5a:bd:89:8d:22:f0:7c:05:3e:
         52:b9:c6:f2:37:4b:ad:00:49:84:4e:3f:80:8b:07:12:45:fe:
         56:35:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:53 2025 by rpki-client