Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
File:                     YtERnxiOP3wTVfZTngZDbaJo_50.mft (raw, json)
Hash identifier:          tdtD4MFoTkRGgyBVAs4ldrc32jC1LEFfDC2fQTGELEE=
Subject key identifier:   B1:4C:39:66:AB:05:BC:FC:D9:38:36:00:2A:3B:37:AA:E8:EC:C1:B7
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
Manifest number:          03EE
Signing time:             Sun 19 Oct 2025 02:36:04 +0000
Manifest this update:     Sun 19 Oct 2025 02:36:03 +0000
Manifest next update:     Sun 26 Oct 2025 02:36:03 +0000
Files and hashes:         1: YtERnxiOP3wTVfZTngZDbaJo_50.crl (hash: x74QFsQlKl72WAnzj35TVhHP6eSgC6b8+RmDjeVp1aY=)
                          2: 09BF3678E79211EEAB391A25C4F9AE02.roa (hash: 8STm5JCtlJF0yZZEwdcOv0CXQmhqF6nmo2RHv6oiWw4=)
                          3: 280B8550FD3611EEB7932778C4F9AE02.roa (hash: QYx3ckvhlG8UbcO//8DSYx2doUr0+tHIgxJNAciGpb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
                          rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266, serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Oct 19 02:36:03 2025 GMT
            Not After : Oct 26 02:36:03 2025 GMT
        Subject: CN=68f44e94-c06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:cb:08:88:08:53:2c:77:f8:a9:48:e2:c5:
                    23:c9:8f:6f:15:ec:25:71:d0:ea:14:45:a4:3c:4d:
                    6e:0a:67:b1:1b:2e:d6:cb:69:1d:ee:0b:86:5a:b5:
                    08:04:14:5d:59:f6:3b:02:21:a4:30:d2:8b:0e:67:
                    20:fa:af:0c:1b:f2:fc:d2:bf:91:9f:d6:fd:b9:c4:
                    eb:80:04:6e:cf:1c:9c:43:9a:d8:86:3b:e0:4b:85:
                    ce:5c:79:ae:e2:af:3a:14:2d:28:5f:40:2f:f2:1e:
                    7c:3c:e4:4e:83:d6:3d:d2:66:11:50:c3:f9:a9:fd:
                    1e:a2:61:0f:e1:56:d1:f6:2b:a5:21:8c:32:81:a5:
                    e0:75:8b:80:1c:a3:2d:ed:46:9b:94:08:9e:1e:84:
                    19:53:48:59:a9:b5:30:69:ef:48:75:bc:be:ce:e8:
                    83:c1:5c:0a:c0:f0:28:11:53:9d:61:69:70:1d:8a:
                    1e:00:33:31:9f:d8:ba:38:7d:1b:c7:ad:4b:6e:e3:
                    2c:72:32:fd:64:79:cf:eb:9a:07:66:0d:d2:6b:a1:
                    24:cc:e2:9e:c5:e9:10:2f:93:b9:c1:ba:9e:86:68:
                    ed:5a:48:a6:ed:cd:f2:16:be:ab:61:53:9e:83:fd:
                    ff:83:93:36:bd:72:96:8c:21:d9:8a:25:3d:85:af:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:39:66:AB:05:BC:FC:D9:38:36:00:2A:3B:37:AA:E8:EC:C1:B7
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:0a:36:69:bc:ac:6c:08:56:b5:c7:a1:18:de:11:67:5a:
         eb:ee:d1:dc:2c:f1:97:5a:25:64:d6:a4:26:08:07:2d:70:aa:
         6a:aa:b6:85:3b:12:8f:f9:95:2f:24:4d:99:a3:5a:6b:4d:2c:
         94:f2:70:5b:cc:cb:69:56:05:c8:80:ba:4b:e7:b4:5c:39:9d:
         ca:3d:57:00:2b:0e:e1:c1:83:83:e2:85:4d:16:a1:08:a8:69:
         28:75:cd:8c:9a:cf:ff:67:5e:8b:e6:11:83:0a:d8:80:16:de:
         86:4e:bd:6c:7e:3a:69:15:d4:78:17:7f:10:03:e3:b6:fa:52:
         45:7a:d5:56:b2:1b:3b:72:e3:26:d2:7b:ef:7a:d8:d2:dc:53:
         22:e9:ff:9f:d3:63:bb:28:84:87:d0:fa:53:db:50:4c:22:b4:
         48:02:3f:93:95:de:4c:93:1d:93:e0:cd:ef:3a:be:59:83:0d:
         cb:0a:c9:fd:f5:cb:2d:1b:0a:a6:b4:47:57:75:3a:75:b5:ab:
         f2:e0:b5:b0:5e:09:a3:4d:f5:7f:77:f2:2e:e3:c6:cf:05:4d:
         f6:ec:a2:c8:5f:78:24:4b:02:aa:de:43:33:af:d2:53:17:31:
         c9:ae:a0:5a:dd:b4:ed:08:d7:3e:1c:9b:44:e9:bf:32:35:f1:
         4a:de:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:23 2025 by rpki-client