Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File:                     YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier:          u2SEWiD0uhji6DkrwCf1XqONTWvSOUwDKalEvRrnNOk=
Subject key identifier:   ED:9C:A5:97:27:C2:DB:DA:A5:1A:36:5A:32:4A:2B:23:70:96:00:2B
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer:       /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number:          E7
Signing time:             Sun 19 Oct 2025 08:23:41 +0000
Manifest this update:     Sun 19 Oct 2025 08:23:41 +0000
Manifest next update:     Sun 26 Oct 2025 08:23:40 +0000
Files and hashes:         1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: 7SBxHKNAGhv3d3FnxPWtD2OK0uyTEeZIbWJUn6ztv5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
        Validity
            Not Before: Oct 19 08:23:41 2025 GMT
            Not After : Oct 26 08:23:40 2025 GMT
        Subject: CN=68f4a00d-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:0b:b5:39:eb:80:2f:9f:14:30:7d:2d:51:
                    40:02:18:3a:14:93:5b:48:76:e5:c3:63:62:ce:8c:
                    44:d9:a5:dc:73:d0:4e:5e:22:55:24:1e:13:69:be:
                    8e:11:b0:a3:66:32:d7:54:bb:27:0f:21:54:b5:59:
                    65:92:e9:91:56:09:78:90:d6:08:54:36:02:91:d8:
                    8a:75:8e:ea:bb:96:61:a3:51:65:e0:eb:9e:6c:56:
                    d9:77:66:6b:2c:81:fa:a3:61:3a:b6:58:b5:50:14:
                    5f:7c:b2:07:b3:7e:ac:d5:d6:58:9e:0e:d8:ab:52:
                    af:1e:ca:7e:76:3b:eb:ce:1b:65:9c:d1:e2:fd:09:
                    94:11:73:be:5a:e2:91:8f:93:83:05:da:f2:eb:3e:
                    22:cf:9a:07:4c:6f:f0:99:6c:e7:ae:e8:aa:c7:ce:
                    61:a0:9e:5c:b9:f1:96:60:4d:8b:d6:35:fd:a8:59:
                    05:03:11:71:1d:19:5e:fe:4c:fe:f5:33:91:8d:fe:
                    ed:64:82:64:58:a5:35:03:37:70:18:f0:5c:4d:3e:
                    7b:b6:7d:d2:ad:21:30:e0:c6:4b:2e:bc:85:44:87:
                    cc:74:c3:12:16:19:70:97:e6:b1:8c:49:fc:e1:fd:
                    21:9f:40:7c:6f:77:63:b5:ce:b5:29:28:48:20:86:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:A5:97:27:C2:DB:DA:A5:1A:36:5A:32:4A:2B:23:70:96:00:2B
            X509v3 Authority Key Identifier:
                keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:06:51:8a:64:1a:6d:9b:27:2f:90:8d:e2:c7:5d:b0:62:3e:
         a7:05:08:51:5a:8b:fa:6f:af:b6:4e:36:9d:95:f5:b1:b3:b8:
         57:62:20:a9:98:39:df:f5:05:8d:09:62:07:71:09:aa:36:6c:
         2f:19:c1:10:1e:ee:36:47:fc:e8:a5:e1:38:89:a0:d8:00:7a:
         a8:da:bb:b8:48:b1:d3:de:c1:2e:8d:bf:b3:58:28:42:a7:78:
         17:e4:6b:9e:e6:b0:74:68:b1:ad:53:64:7d:90:5d:bb:97:f9:
         1f:8f:15:af:74:db:24:ea:db:d1:61:20:b2:0e:a0:21:e3:97:
         0a:3c:f7:76:6f:1c:1e:16:0f:eb:01:27:3a:c9:02:27:b5:af:
         eb:6b:df:20:cd:65:bb:e7:06:eb:db:21:2e:b4:a0:5e:9f:aa:
         fa:d6:77:06:94:e4:6b:a6:ca:a8:46:f4:a5:a6:02:54:ee:93:
         f0:39:35:c6:c8:ec:79:3e:87:93:57:cd:d1:c8:5d:a9:12:87:
         03:a1:29:61:bb:14:02:63:d7:60:20:82:87:01:43:59:3d:27:
         8b:d6:81:ce:fd:17:b5:fc:2d:59:b2:9f:fe:30:37:04:32:44:
         22:68:2f:b8:d7:fa:d4:55:d9:74:2c:21:81:a3:e2:0d:00:ca:
         73:37:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:17 2025 by rpki-client