Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
File:                     Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json)
Hash identifier:          tqRRlYfKXj0TtJymvRifPq/P08ik3d6p4A3xZet2460=
Subject key identifier:   48:54:36:08:D0:EF:08:EA:69:6C:82:B8:F2:64:05:C8:A0:F4:A3:41
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Certificate issuer:       /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
Manifest number:          EB
Signing time:             Sun 19 Oct 2025 08:20:15 +0000
Manifest this update:     Sun 19 Oct 2025 08:20:15 +0000
Manifest next update:     Sun 26 Oct 2025 08:20:15 +0000
Files and hashes:         1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: zU/v7IMhEXMqhX+BqkuQWfCUy0G7+dg35v1RQgIzpYY=)
                          2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: bllAWJknG6t7sgMmQWLY59vxPXpNHKXKelWOMC8ypAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
        Validity
            Not Before: Oct 19 08:20:15 2025 GMT
            Not After : Oct 26 08:20:15 2025 GMT
        Subject: CN=68f49f3f-9f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:f6:78:da:46:36:10:92:41:22:44:ee:56:
                    42:92:65:91:df:a8:3b:ce:b5:01:47:55:37:94:b5:
                    4e:e6:ef:8d:27:6f:1c:15:19:93:cb:52:30:2a:f4:
                    97:65:31:37:4b:cc:1b:f0:e0:13:30:da:28:fb:ad:
                    35:f4:2a:e7:ea:3e:ae:db:2d:79:1e:21:52:b4:ac:
                    f7:4e:ae:db:ba:c8:93:34:f6:0c:cf:9c:2a:70:2e:
                    03:68:32:a2:37:60:a9:cb:9c:55:7f:d3:fa:09:ea:
                    54:6e:2e:f5:23:f9:9a:52:76:30:71:47:c2:aa:7c:
                    2e:96:f9:f2:7e:e5:31:08:61:61:85:61:c7:7e:65:
                    ad:67:f1:55:ac:72:ac:dd:a5:97:e9:c3:6b:d9:15:
                    5a:e3:a6:1a:93:50:8a:35:4a:64:46:e1:1a:a2:79:
                    91:e1:17:37:85:cc:11:a8:e2:52:52:3e:cf:1a:10:
                    11:b8:c5:c4:2b:98:76:9c:9d:a4:6b:19:af:ac:1d:
                    a9:11:3e:ab:1f:a3:d6:75:bc:6e:3d:c6:75:ea:77:
                    0d:fe:07:02:bc:58:14:1d:8a:6a:75:ef:74:21:1f:
                    7c:03:1d:96:a4:fd:68:23:f1:69:64:53:b6:46:dc:
                    7d:90:47:2d:5e:fe:09:16:02:ed:4b:29:39:ca:95:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:36:08:D0:EF:08:EA:69:6C:82:B8:F2:64:05:C8:A0:F4:A3:41
            X509v3 Authority Key Identifier:
                keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:57:40:1d:10:35:00:30:3e:d5:b2:4a:29:7e:89:f1:9f:
         ed:5b:11:df:bd:17:54:aa:ce:82:d1:2f:93:99:83:ea:cb:bd:
         19:b6:ae:d0:75:0e:a1:cc:59:ad:4b:08:c9:a6:89:12:b6:86:
         a0:fb:ab:5a:e0:88:0d:51:0e:ae:ce:19:3e:eb:c5:9a:0b:c3:
         25:2b:d3:1e:a0:8b:74:31:87:10:ce:3b:06:df:3b:dd:5e:fa:
         dd:bf:ce:a7:1b:5c:1c:92:8b:1c:6c:1b:14:5c:47:14:e1:84:
         1a:84:dd:96:f8:57:85:42:f8:95:17:95:e8:86:69:74:d3:63:
         e5:de:89:01:be:a3:6a:56:1b:fd:4d:f2:23:ca:4b:0c:3d:cc:
         4a:a3:82:e1:64:e7:a0:87:f1:5b:83:3d:21:cc:16:8e:84:dc:
         a0:fe:d0:05:f7:91:1a:be:8e:8a:5e:e6:ad:61:c3:6c:e7:1f:
         db:6b:bb:de:68:6a:50:95:1f:50:32:ba:c0:05:e2:b1:3d:ac:
         05:5d:1e:6e:d8:75:82:71:3c:39:8e:4f:19:5d:c0:2b:f1:05:
         92:f4:6b:61:bd:e8:b2:bb:38:47:5e:ca:0b:4d:e9:35:3a:34:
         fd:03:c1:23:2b:84:d8:34:1f:34:5b:e9:80:4e:62:67:08:67:
         68:75:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:22:12 2025 by rpki-client