Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File:                     Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier:          UZuuLFk2iHuIenGO353NmODGmFBC3r8+y9kMwJRzah8=
Subject key identifier:   8A:D5:05:48:1A:1C:05:9B:93:32:2E:90:E1:C3:CB:26:57:D6:79:9D
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number:          07BD
Signing time:             Thu 18 Sep 2025 21:35:00 +0000
Manifest this update:     Thu 18 Sep 2025 21:35:00 +0000
Manifest next update:     Thu 25 Sep 2025 21:35:00 +0000
Files and hashes:         1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: tbYURnRlOG71pXTeUMtptTlXd/qz9S7a+sZnjKZueYI=)
                          2: 48728BF269DE11F091F06044C4F9AE02.roa (hash: qHU7CHCh9djOeViHgP7ASLDtgTeMrocsk+wRZ/L1H3w=)
                          3: 53093BC469DE11F094E16744C4F9AE02.roa (hash: Z9ENCoYktHrHj7xMnXsFyIMnIK8bl+DDfDd3+qqwk1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: Sep 18 21:35:00 2025 GMT
            Not After : Sep 25 21:35:00 2025 GMT
        Subject: CN=68cc7b04-ed39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:10:ff:bf:90:6c:c7:81:9f:86:d9:4e:5d:
                    66:e5:b0:f2:ed:db:d0:0e:0e:3c:5e:ca:fc:40:b9:
                    20:b8:95:01:55:41:a5:71:ca:f8:eb:76:54:6d:05:
                    c1:dc:ca:0e:cb:8c:07:72:17:6a:16:cc:25:be:cd:
                    c1:55:85:7f:86:85:96:5e:45:9e:6b:9e:3c:9f:ee:
                    20:a7:b9:d8:88:7a:87:ab:34:aa:f7:a7:91:44:f5:
                    04:55:62:81:e5:cc:e0:3e:af:3e:67:65:f7:a2:a5:
                    ec:a2:55:b7:aa:42:74:1f:0d:62:e2:d6:ca:56:98:
                    68:76:c8:94:bb:61:57:36:6d:a5:21:67:d0:b1:7e:
                    0a:68:ef:34:4c:0a:d8:e6:ef:ab:0a:29:c0:17:f4:
                    cc:6e:c9:85:31:b6:6b:1f:97:0e:8c:31:c2:c9:8e:
                    68:ef:c5:8f:fa:55:1b:f5:ba:13:79:98:5f:a5:80:
                    07:7b:c2:11:37:2a:cd:e2:e4:df:cd:14:dd:05:bc:
                    bf:f7:ac:e8:4d:70:9a:62:86:0e:05:9e:09:55:fa:
                    47:64:3a:15:c8:8b:c0:64:67:f6:89:42:c2:f0:f3:
                    fe:54:0b:7a:8c:48:b9:9c:b8:9d:bc:4f:4a:09:11:
                    21:ab:11:a5:e9:9b:1c:50:e9:37:ae:ae:78:53:2b:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:05:48:1A:1C:05:9B:93:32:2E:90:E1:C3:CB:26:57:D6:79:9D
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:54:a5:e1:68:84:e7:34:d0:e3:3c:bf:cf:82:11:40:f4:
         e2:37:a6:c2:90:d8:f5:ac:75:24:88:10:cf:6f:b8:54:e7:86:
         5e:5a:4a:25:82:4e:0e:89:04:31:e2:e2:82:ec:4f:e6:85:bf:
         db:32:cc:2e:55:97:bc:4c:fb:41:1b:3d:5f:52:65:f2:fa:a5:
         64:28:16:2f:45:d4:67:fa:b2:94:df:a4:53:18:90:c0:af:37:
         29:d5:cc:2e:18:4e:89:1e:26:76:33:c3:3e:e7:7c:75:08:3e:
         84:e1:86:c6:27:a5:05:b5:fd:1f:29:1d:e0:d1:b5:40:8c:12:
         4f:be:57:db:68:9a:ba:4c:9f:00:dc:26:14:94:58:d3:2e:38:
         c4:a5:76:4d:73:e4:99:5e:bc:75:ba:5a:76:dc:e6:a6:fd:2c:
         bd:f4:14:8f:d2:31:7b:cb:9c:ca:74:33:a0:62:12:51:4d:54:
         68:c6:1b:c1:4e:2b:a2:47:23:88:a3:51:2a:d4:bd:2c:8a:9c:
         b4:33:4c:98:f9:b3:11:67:cc:67:c3:4d:88:8b:bd:e7:81:67:
         a0:7d:7a:dd:9e:a9:f3:66:d8:9c:ac:6e:7f:11:8a:bd:f4:16:
         b9:34:53:ab:d0:d8:70:18:16:b9:69:c3:2d:9e:1b:27:ba:05:
         fc:40:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:22:18 2025 by rpki-client