Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File:                     YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier:          K7pWziVV2mp/8IpfRbYkH8lVgo4bVYMWEL6RWqNfnJU=
Subject key identifier:   6D:14:7B:01:71:12:F1:04:C3:C7:B4:9F:D1:2D:FB:D8:46:A4:A5:0C
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       07AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number:          079F
Signing time:             Sat 18 Oct 2025 22:45:37 +0000
Manifest this update:     Sat 18 Oct 2025 22:45:36 +0000
Manifest next update:     Sat 25 Oct 2025 22:45:36 +0000
Files and hashes:         1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: oX2C75xh0+WL3jts2aPEaApTDzN8tbXv/Pd9/BnGsk4=)
                          2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=)
                          3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967 (0x7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Oct 18 22:45:36 2025 GMT
            Not After : Oct 25 22:45:36 2025 GMT
        Subject: CN=68f41891-5ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:9d:23:a0:71:8e:f2:c1:8c:04:a1:26:47:
                    7a:98:9c:a8:de:09:74:45:c7:39:6a:8c:1a:fb:58:
                    6c:df:6b:c1:e9:96:df:1a:51:41:41:60:d5:95:00:
                    7a:25:15:18:a6:d3:19:db:4a:23:19:3d:52:84:c4:
                    e6:c4:46:06:91:4c:91:63:3d:9a:4b:59:62:10:12:
                    fa:cd:d7:5f:e1:ee:e4:fe:17:66:66:e6:cf:bb:0e:
                    50:88:a4:a5:75:fd:87:5c:5b:02:0e:57:c8:07:0a:
                    da:34:ea:4e:2c:50:c0:37:ee:ae:5c:3d:da:2d:9e:
                    a7:71:f4:b7:51:0f:3d:3a:56:d1:d2:1b:53:6c:58:
                    18:b3:5f:e9:36:1b:7b:9c:b0:ff:99:a3:f7:a5:34:
                    14:d0:0a:75:79:05:e0:6b:85:10:fb:e2:26:4d:09:
                    5e:54:4c:d0:71:6f:11:e7:e4:4c:5a:b2:6c:cc:b6:
                    44:17:12:05:76:f2:d0:df:c6:aa:d7:15:20:e9:c6:
                    de:42:bd:b8:bd:39:90:f3:9b:71:0a:ce:3e:31:4f:
                    98:30:39:0f:8d:fd:13:91:8d:bf:d3:26:ee:e3:f4:
                    31:64:ed:15:35:c9:33:fe:bd:a7:25:36:73:af:35:
                    7e:eb:7b:81:24:bc:e1:4e:1f:26:b4:cf:db:07:aa:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:7B:01:71:12:F1:04:C3:C7:B4:9F:D1:2D:FB:D8:46:A4:A5:0C
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:57:9b:cc:a1:d9:ff:5e:4e:42:2d:56:5c:a3:bf:19:ba:ac:
         42:0d:56:d6:f9:fa:d2:e4:0c:0d:f5:92:f1:1f:0f:d0:d2:06:
         09:aa:5e:d0:ac:ca:14:2e:d7:90:bc:2a:6e:80:49:2b:b9:cc:
         17:ea:09:b7:79:64:2e:60:c8:8f:a5:9b:af:a4:8c:4f:34:d7:
         17:11:0d:a9:d2:57:b9:86:d2:35:a9:44:ed:c0:a7:70:4e:e8:
         30:8b:fb:70:05:c5:93:c2:8a:18:7a:d4:22:8e:bb:e6:31:3c:
         c5:19:37:c1:06:f4:7b:dd:06:1d:e7:3c:bc:14:e7:32:9f:8d:
         42:ee:34:1a:8c:7b:4e:25:d0:4b:03:88:da:d6:53:54:8c:5f:
         6d:55:f4:30:48:11:c6:68:85:a2:0a:70:fa:42:31:fc:66:ad:
         10:8e:e3:db:6a:67:8d:8d:0c:98:e7:20:b8:d2:09:9a:d9:1e:
         fe:bb:18:96:e5:8d:8f:01:9d:4d:c6:c4:dd:60:ac:94:14:5f:
         25:13:65:f0:cc:fb:25:66:87:b5:03:93:38:b0:ed:ae:51:bd:
         07:be:d7:49:25:43:63:f2:95:34:0c:fc:d6:07:eb:93:a2:9a:
         f4:b1:0e:ea:c1:4b:70:6f:1f:55:e5:e6:bf:2f:53:30:d0:29:
         f1:d3:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:19 2025 by rpki-client