Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
File:                     yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json)
Hash identifier:          TZ1CjdU6iZ7GILmRGTNNdgfqljhaNMGq/6/lGYVpc9A=
Subject key identifier:   F5:7B:62:A6:79:C4:F6:88:29:99:85:8F:AB:53:D4:50:F7:53:25:90
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Certificate issuer:       /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial:       05D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
Manifest number:          05CF
Signing time:             Sun 19 Oct 2025 00:39:25 +0000
Manifest this update:     Sun 19 Oct 2025 00:39:24 +0000
Manifest next update:     Sun 26 Oct 2025 00:39:24 +0000
Files and hashes:         1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: WfFilucmThsGTX+vYvpUQn5jW9BILLtKHG8o1S4DTPY=)
                          2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: OTs+qw3AvV3H1ENDQyiXHEhtKPRt4PABgjp0FWH4nzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
                          rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
        Validity
            Not Before: Oct 19 00:39:24 2025 GMT
            Not After : Oct 26 00:39:24 2025 GMT
        Subject: CN=68f4333d-3a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:c8:58:e7:f1:8b:ab:05:11:5a:bc:4a:92:
                    31:8e:7d:ac:7f:fb:56:c5:37:96:4c:86:15:74:43:
                    d3:ff:cb:70:f5:bf:5a:31:12:d2:46:b2:4a:f3:31:
                    ec:f0:9a:0d:2d:70:3d:eb:f4:5c:a8:7a:25:7b:2b:
                    45:74:3e:fd:ff:62:b7:63:c1:4c:1c:98:51:a3:3e:
                    35:8e:2b:74:d7:13:54:3f:eb:53:7c:a3:bd:aa:e2:
                    f5:5f:58:10:9c:58:74:45:10:3e:c4:86:20:9c:17:
                    a6:05:eb:5d:dc:3d:c2:e6:b9:a2:00:9c:de:fa:d2:
                    b1:ae:0f:1e:b7:90:52:bb:03:a3:8a:d1:5c:9d:14:
                    e2:82:7f:d9:26:09:95:b2:c8:18:e2:3b:c5:53:e3:
                    cc:96:75:e7:e5:21:84:6e:40:7e:1e:b0:6a:cf:9d:
                    05:69:70:08:4b:f0:41:d3:05:49:ed:91:55:4e:fc:
                    d5:f6:f7:87:80:25:9c:56:51:4a:b4:31:28:bd:5f:
                    0f:fb:5a:1d:71:42:ad:ff:11:ed:62:16:f4:88:9c:
                    3f:ac:89:4b:9c:e5:ad:4a:c2:20:01:19:63:f4:b1:
                    c7:92:0e:af:64:90:95:57:5a:83:55:9a:b7:33:3d:
                    88:6d:fc:b8:19:8f:d6:d6:e7:92:20:c3:4d:85:53:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:62:A6:79:C4:F6:88:29:99:85:8F:AB:53:D4:50:F7:53:25:90
            X509v3 Authority Key Identifier:
                keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:55:ac:fc:cd:eb:0d:38:1a:55:4f:bd:90:68:22:78:99:45:
         ac:d3:df:a0:9b:bc:d1:6d:58:4a:ae:5d:58:39:2f:89:4b:ec:
         b4:af:fb:05:f0:3e:cd:65:02:2c:26:94:cf:67:74:c0:a5:02:
         3d:de:19:e6:ec:df:57:18:81:3b:20:46:3d:52:13:af:42:61:
         8b:2b:51:85:69:0e:75:ef:2c:51:0a:ce:da:be:85:7e:dc:e4:
         d7:ef:fc:9a:ee:10:b5:7c:61:ab:d4:93:d1:a8:bc:1d:58:cf:
         8c:43:30:a9:4a:12:88:a6:9b:7a:d8:6d:92:b8:ae:30:15:dc:
         d9:74:ff:b1:bf:89:57:ec:ec:08:ed:09:f7:99:31:46:1d:5c:
         fb:fb:8c:d2:f9:84:de:87:4f:91:cc:06:5b:bb:c4:60:14:d7:
         06:8c:ee:2f:f0:6d:ad:32:21:87:c6:2d:64:f9:24:54:5c:7b:
         26:ed:9f:fe:73:41:bb:96:11:91:a1:aa:b4:02:2e:7b:28:e1:
         6a:e0:a2:de:0c:c8:2f:1f:cb:2f:13:6b:23:73:b7:8b:2a:15:
         3c:a8:4e:c4:bf:43:d0:2b:e2:6c:3d:0f:c2:3c:81:e6:61:22:
         e0:60:7a:9c:3d:60:41:6e:11:bd:93:ab:7d:48:9d:99:ed:f7:
         14:8b:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:44 2025 by rpki-client