Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File:                     Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier:          W7pZsG5t9E7u4QR4bKxxaaYk0kNwm+tl80uQQ3a0iUk=
Subject key identifier:   46:2E:21:45:43:35:F9:02:45:AC:B1:72:82:9B:12:94:E6:17:71:AB
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer:       /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number:          0628
Signing time:             Sun 19 Oct 2025 00:21:34 +0000
Manifest this update:     Sun 19 Oct 2025 00:21:34 +0000
Manifest next update:     Sun 26 Oct 2025 00:21:34 +0000
Files and hashes:         1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: et30D45OONWTa3czY7GAuhX0JthrXn7S8eueDk3LDJY=)
                          2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
                          rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
        Validity
            Not Before: Oct 19 00:21:34 2025 GMT
            Not After : Oct 26 00:21:34 2025 GMT
        Subject: CN=68f42f0e-b403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:0c:11:94:96:ac:06:39:81:9f:57:6e:e9:
                    e2:f6:c7:b3:2b:16:6d:c0:16:1e:f5:ee:c0:07:f4:
                    f5:e0:5d:87:3b:47:f4:9a:9a:a8:a5:45:e1:6b:4a:
                    91:f8:cf:6d:50:fa:81:54:e0:49:8a:4a:58:11:80:
                    96:75:6d:5f:46:ad:d5:e8:2d:77:18:eb:ed:14:7b:
                    6c:5a:d8:d6:58:a6:b9:d1:77:61:73:52:bd:00:35:
                    f9:e0:db:54:ba:25:14:e8:06:4d:da:c1:24:23:23:
                    bd:03:13:01:e1:e6:34:2f:d3:06:39:33:33:c3:6e:
                    52:6c:31:96:a8:28:4f:e0:18:78:77:11:33:f9:9a:
                    07:32:e2:d2:a7:d1:32:ef:63:80:05:06:b9:82:b0:
                    b1:55:23:d1:57:58:33:16:13:41:71:c4:a3:ce:7c:
                    9e:c4:14:f0:35:45:b4:b2:6c:aa:b3:74:14:b9:77:
                    29:2d:89:2a:51:27:df:b4:85:3b:8e:70:f5:31:42:
                    5e:18:5a:cc:f7:f8:02:7b:bb:b4:4f:2b:f9:aa:de:
                    07:c2:9c:45:25:1e:9a:e4:9d:ba:49:50:f6:2b:35:
                    b2:5e:58:97:dd:fe:9d:91:38:95:54:97:90:05:7a:
                    60:2a:c4:3d:f2:1d:fc:fe:02:37:33:69:49:07:2c:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:21:45:43:35:F9:02:45:AC:B1:72:82:9B:12:94:E6:17:71:AB
            X509v3 Authority Key Identifier:
                keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:66:bb:af:25:e4:1f:d3:ac:cd:70:0b:3d:97:29:ef:ef:
         76:09:70:53:7c:79:f7:37:43:36:90:81:7c:bb:6c:6d:94:54:
         b5:b0:76:b3:8c:34:81:28:81:f4:85:92:1e:2f:98:de:1a:0b:
         ee:e3:be:44:66:bb:a6:b9:b8:b5:be:9b:69:72:1a:96:5f:ff:
         e7:bc:92:36:fb:8c:cf:bc:0b:f4:8b:d2:1a:9d:68:c6:bd:7f:
         da:4c:70:42:82:f2:50:b5:ae:6b:be:fe:d5:1f:9b:54:8d:20:
         36:d9:df:d0:cc:b1:6a:cc:a6:29:72:03:21:7e:49:93:9f:1e:
         b9:84:62:6c:8e:59:35:f7:c5:5f:34:48:5b:93:cb:79:d2:09:
         0d:5f:87:bb:fb:bf:1e:11:07:25:57:4e:43:e7:1d:37:3f:ca:
         a2:a7:24:85:c2:1a:a9:52:ea:cd:93:89:0a:49:f4:2d:86:89:
         34:50:56:a3:43:5f:09:d8:2b:11:b2:c7:eb:6a:28:90:5b:52:
         8d:94:9c:a1:c5:c4:67:0d:e3:fe:33:d9:c1:11:aa:71:11:fd:
         2c:e4:e0:5a:8a:8f:75:a6:fe:81:38:81:09:71:9c:19:e5:0a:
         0d:85:97:7b:af:1c:51:24:ba:66:ad:2f:d2:77:f2:41:6c:19:
         30:76:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:23:41 2025 by rpki-client