Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File:                     y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier:          Ey6f0h7u+gOjIZTG71crOVOg5catXl1q8L1P+YTPZ20=
Subject key identifier:   30:23:51:DE:29:84:AB:E7:54:3D:77:C6:35:F6:DA:93:B8:BE:30:C8
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer:       /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial:       0C41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number:          0C37
Signing time:             Sat 18 Oct 2025 19:27:47 +0000
Manifest this update:     Sat 18 Oct 2025 19:27:47 +0000
Manifest next update:     Sat 25 Oct 2025 19:27:47 +0000
Files and hashes:         1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: paU05iMWLa49554sJB66zSPKEF9VY+uKBE7O8+HLWLU=)
                          2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: d+PNEJYkgwfN/EWh9YAvK3NrsnGHrIa0Ji1QGqGUhS8=)
                          3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: 3gAyCRS9eTrSpT6uGMaC2W//L+1mB9VyFAfUFmHY1AA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
                          rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
        Validity
            Not Before: Oct 18 19:27:47 2025 GMT
            Not After : Oct 25 19:27:47 2025 GMT
        Subject: CN=68f3ea33-8aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:bc:d7:45:53:ab:00:c5:c8:5e:65:68:6c:
                    41:18:fd:80:62:86:66:f1:5a:21:a5:75:f0:11:cc:
                    cc:4e:19:29:04:4b:06:c8:10:5c:d1:80:f1:79:3d:
                    42:60:c5:fe:9c:5d:6b:7a:18:46:7d:b6:f2:36:20:
                    66:32:74:07:b4:2d:e9:01:a9:a8:7b:9f:ba:18:3a:
                    fb:d0:77:24:d0:13:4a:70:5e:6a:6f:91:56:41:2a:
                    37:4f:54:e2:c4:a2:07:fc:87:db:89:c5:e6:7a:a8:
                    a3:6d:9d:6b:18:e6:bb:19:68:5a:29:96:53:c0:0b:
                    36:85:9a:1d:51:65:77:03:11:b8:22:c1:39:94:f5:
                    77:a5:5a:52:1b:7b:09:79:0d:b1:0d:12:6d:c6:8f:
                    99:b2:b7:3c:9e:c3:0b:5d:f8:24:47:41:70:74:98:
                    07:5b:18:92:85:eb:0a:48:f8:a8:81:0f:27:c2:18:
                    36:bf:9b:aa:ff:33:bc:bd:41:20:15:61:94:52:71:
                    c9:93:92:51:81:8f:a1:62:27:6f:d9:82:a1:bd:ab:
                    23:9a:0e:b1:58:5f:57:77:05:59:f8:17:ff:1b:ff:
                    c3:98:05:65:2a:87:77:e4:09:d7:7d:36:65:bc:31:
                    92:76:e7:44:d8:1b:eb:b0:3d:1e:ff:db:30:f9:0a:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:23:51:DE:29:84:AB:E7:54:3D:77:C6:35:F6:DA:93:B8:BE:30:C8
            X509v3 Authority Key Identifier:
                keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:63:1a:d7:9e:66:e6:7f:2b:80:84:dd:c6:d6:cd:1a:24:
         af:32:25:9f:7a:f4:39:39:e5:19:39:57:92:09:34:38:0d:46:
         c7:87:73:24:cb:25:1c:b6:6a:86:bd:3b:b2:f0:d0:81:dc:be:
         11:f0:a5:3a:2a:c9:70:a2:bb:c8:65:98:90:96:a9:6e:40:02:
         45:e1:e7:19:19:be:26:98:be:75:9c:3b:cc:c2:32:ac:3b:67:
         d8:eb:d0:2e:4a:a1:59:f0:fd:14:fc:d8:94:15:ab:1d:36:85:
         24:4c:12:79:96:fa:8d:b5:ec:f0:87:c9:b4:76:a4:2e:ff:b2:
         4d:f3:c4:4d:db:3d:86:5a:59:d6:9b:73:9c:16:ef:57:36:0b:
         9e:ce:4c:0f:f4:cf:76:04:23:74:7f:d6:6b:ba:f4:05:7f:33:
         18:29:8e:7e:b1:61:8f:f4:c3:ad:94:d4:3d:7a:f9:f0:6e:61:
         8b:f1:95:8e:68:da:99:e8:d0:a4:6d:9f:c0:5e:0a:96:4b:a9:
         db:2e:d8:35:b4:73:ff:17:95:f0:fb:b0:c5:d9:7b:e3:a7:79:
         fd:b8:43:df:64:a7:1a:16:ae:cb:2d:10:ce:f3:c6:db:6d:74:
         6d:d4:5c:8f:ec:39:09:7f:d9:c1:da:95:89:d0:9a:03:16:b1:
         70:cb:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:03 2025 by rpki-client