Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
File:                     yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json)
Hash identifier:          fC5HkEgAKHcX0GprlntRHylpVXmNYLHXrzREiU9IHaY=
Subject key identifier:   33:6E:38:E9:F5:6C:2A:80:1D:EE:01:09:3E:44:9E:91:52:38:93:67
Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E
Certificate issuer:       /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
Manifest number:          02D2
Signing time:             Mon 03 Nov 2025 01:20:00 +0000
Manifest this update:     Mon 03 Nov 2025 01:20:00 +0000
Manifest next update:     Mon 10 Nov 2025 01:20:00 +0000
Files and hashes:         1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: e4kn1qsIhHCLFBveJ6w3f7FrdLa6h0vx6R7iwFPgwXI=)
                          2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: YECGFmsS3YqMK8QF+uRexbLFkUyQX0XL0w3iDLNMxig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl
                          rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
        Validity
            Not Before: Nov  3 01:20:00 2025 GMT
            Not After : Nov 10 01:20:00 2025 GMT
        Subject: CN=69080340-de2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:cc:e4:ea:f5:9e:90:65:79:0a:25:9d:1f:
                    cc:ba:76:22:27:03:11:38:71:9d:d8:a3:5f:43:9b:
                    15:ea:2b:55:ea:ed:e8:bb:75:f3:8d:a2:48:cf:8c:
                    d1:5f:0c:b9:f7:b7:0a:9d:26:48:e7:05:d4:05:a8:
                    17:d6:66:68:a2:6d:45:60:8f:f5:f3:11:c1:f9:61:
                    75:c3:f1:fc:78:d6:d5:43:d9:cf:19:8a:58:af:49:
                    56:16:56:fa:b7:11:b8:d4:f5:ae:23:af:c3:c9:fd:
                    ef:05:e3:87:cb:25:4c:f3:cd:61:e7:86:33:51:f8:
                    82:87:98:b0:7a:4f:e5:b5:50:b8:90:86:42:01:11:
                    06:7f:1d:25:73:58:20:15:1f:b3:6a:ee:81:8e:95:
                    5b:82:4e:94:92:32:ec:0a:b8:3e:bf:c8:39:c4:82:
                    66:7b:cf:c1:9c:80:3c:81:f4:5a:0b:79:a0:1b:4f:
                    3b:1c:cd:59:28:f6:a1:a5:f0:73:e6:57:2a:b8:94:
                    a4:05:f8:d2:82:8a:1e:7a:77:43:62:33:ef:35:92:
                    66:3e:d5:b6:ef:de:47:36:90:0f:49:88:a8:c6:79:
                    3e:40:69:2a:f5:dc:fa:d2:cc:12:04:06:af:50:90:
                    cc:9e:6b:dd:1e:ea:42:88:24:ab:9c:bf:b2:3c:83:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:38:E9:F5:6C:2A:80:1D:EE:01:09:3E:44:9E:91:52:38:93:67
            X509v3 Authority Key Identifier:
                keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:a2:f2:57:52:12:41:8a:9b:19:5f:1a:8e:64:d0:b7:fd:
         78:f1:ec:2a:24:31:1e:7b:03:1a:80:d1:46:95:45:95:b7:cc:
         e3:6f:eb:24:f7:f3:47:9a:1e:9e:bf:92:28:2b:54:56:45:eb:
         ae:52:0c:c9:5e:e5:a8:87:df:2e:e5:25:9a:3f:ca:32:29:2f:
         aa:fc:89:cc:1c:39:43:96:c3:e2:50:05:16:d5:bd:95:8a:47:
         ae:36:aa:f5:7a:d9:fe:c4:30:47:17:38:22:c7:67:86:fb:a3:
         44:6c:fa:89:2b:3c:39:0c:66:2f:d1:f0:b6:21:a0:a5:0f:24:
         68:43:4b:4a:3b:e0:ff:7f:2f:64:61:3d:bc:b5:be:00:d8:3a:
         07:d7:3d:9b:cd:58:64:5e:57:5c:77:3d:2a:21:fe:17:d1:1f:
         20:bb:58:c7:be:de:68:ce:7a:ab:5a:dd:1d:a4:db:29:b3:b7:
         44:1f:c5:8f:84:4b:2b:b5:4a:41:79:38:f9:f2:03:60:c7:54:
         24:0d:f9:3e:a8:19:fa:28:66:2f:a6:d6:ac:ad:41:0f:db:54:
         31:9c:50:cf:0d:ab:ce:80:5b:7f:9a:bf:97:25:f7:9c:7b:3d:
         45:76:58:29:f2:5e:bb:76:62:96:30:08:08:6b:a0:c6:21:78:
         b6:37:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:23:39 2025 by rpki-client