Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          Doo3RQpyHKPFTZ8pU5JD1mGwJYAL09oIRgzSkm7c/zY=
Subject key identifier:   11:AF:49:6E:D6:BA:D5:DC:6B:03:57:DF:E0:3C:07:6A:50:76:E4:F7
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       19FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          196D
Signing time:             Mon 20 Oct 2025 16:46:38 +0000
Manifest this update:     Mon 20 Oct 2025 16:46:38 +0000
Manifest next update:     Mon 27 Oct 2025 16:46:38 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: b1K+S6RF21ibLUz4+q851b+FauZ7+qB481uyLksaKK4=)
                          2: 897785E099AA11EE9E218060C4F9AE02.roa (hash: Hbvrl5qt3755vAHPJTM1ht4CNvz+/1G82ZsixjxL3vU=)
                          3: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: nBufo1kIX8wiHW05HK56kjkzuY8kLzWX8hul7hd+tSI=)
                          4: 64F859DA812611EDA597255EC4F9AE02.roa (hash: rBeoIA3irlO1Deytx/F8atxZ8cpZ0/tW3IVa0ZmI0Ng=)
                          5: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: k+AAWBwdOcaG1er130l80X1HT3IwfL4MKpto67md1U4=)
                          6: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Ujge7k/lW8pB/Dx6DwlTSva6Rx5jbEwksa1MWF/rwvA=)
                          7: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: 8BZnHd6aGsdJmphgS32PS3wAYQMMb45rh9EbaJkomOw=)
                          8: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: m235rMsu+BzhfmXOYnBQggbCKWWyvZ/zw0hFkBbbwgI=)
                          9: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: AMtq6/+OGfNb8zZYL0wKHdGiK4TvIJSI20dtRQ6bo7c=)
                          10: 12D80792792E11F0B9B60F74C4F9AE02.roa (hash: JU1ZLnQX51v+5AW8aATgyNYwEMRuGDz2e2Gl9piZupo=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: RTrVR5wL9yOQXY6b1OrprvdMWmvSxZvI7qM3sOKAsPc=)
                          12: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: U1zVQ5bqYpLe5FAQ5Vpdv4iV73y5ug6j2NtqdB0U6DA=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: iwLGgkob40yON+N3mwyjlp9Fh6761bLtwjZcibQClEM=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: gkJptkaETgFISWJvcQGnHB0jn74oacHoYRhEpbDvdJY=)
                          16: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: E1uTNeLdjmVHLcuJqLs/moW5iBQyqjH1xn1TM16vxig=)
                          17: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: vD8uFo9ZdrCHkm7kGVREsqduAN/X3LQWjfNNIMx3BBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6651 (0x19fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Oct 20 16:46:38 2025 GMT
            Not After : Oct 27 16:46:38 2025 GMT
        Subject: CN=68f6676e-2a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:42:02:3d:15:2b:0d:be:8b:ce:fc:32:80:
                    76:ed:05:d4:56:3e:48:1e:60:38:83:e0:12:eb:05:
                    c7:2f:34:b2:6a:69:43:54:ef:6f:8a:3f:1c:92:74:
                    04:d7:50:0c:12:63:e7:8f:de:8e:c0:48:e3:b7:a2:
                    47:08:2e:d9:df:d1:d7:97:4a:d0:12:34:5d:5d:ba:
                    f0:36:ea:40:31:8a:e8:13:ab:e2:0b:73:d1:93:5a:
                    ef:19:62:d0:2b:d2:7b:6c:a4:76:d5:7a:44:3a:7c:
                    47:3a:d2:c5:73:b4:66:5e:a2:d5:05:cf:04:52:26:
                    6d:b2:38:c2:18:87:53:bc:f0:67:00:26:78:02:9d:
                    f2:fc:49:88:2e:dc:98:0f:53:e4:8c:22:e1:cf:81:
                    cb:32:ba:ba:d2:fe:f6:6a:75:32:9d:c4:a7:7a:77:
                    5a:9a:5f:37:9c:65:a5:b8:cb:a9:a8:2b:16:7d:6e:
                    a0:73:3f:08:66:7e:cc:0c:a5:d0:a0:a7:91:1f:22:
                    80:f5:ac:52:f1:c7:52:20:52:ae:a9:3e:16:82:1d:
                    e3:df:bf:0c:79:f9:f1:4f:70:d2:2e:1e:cf:11:4f:
                    d2:ba:55:95:f3:c3:a8:bb:70:75:2c:14:48:1e:38:
                    06:a1:47:f0:40:6a:c0:24:1f:d7:57:bb:96:00:1e:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:49:6E:D6:BA:D5:DC:6B:03:57:DF:E0:3C:07:6A:50:76:E4:F7
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:44:0a:d2:14:1e:8d:4a:ea:bd:f2:1d:b7:7c:33:9a:7a:
         ab:86:e6:0d:7e:6c:6f:99:ce:e9:2e:45:2a:89:3c:e1:0a:42:
         5d:b1:29:3b:64:56:9e:c5:ec:65:57:d7:19:6d:40:4f:50:9e:
         3e:38:c4:e1:04:41:75:e9:17:55:93:4d:b9:72:a2:c8:4a:ea:
         61:f9:dd:07:c4:0d:00:62:9c:d4:77:b8:76:99:69:3e:16:f3:
         36:bc:22:bf:8e:44:ea:b3:ec:a3:7e:a1:4f:16:0a:c3:8f:5d:
         34:e2:6f:2c:0b:d9:a8:32:f1:d4:f3:a4:2f:8c:62:56:38:30:
         e6:4f:b7:10:07:7e:48:71:bb:95:da:c3:04:e6:42:6c:f5:ba:
         88:75:ec:e1:cb:e9:21:a3:14:5b:7c:6c:4d:f9:d3:83:8a:1e:
         96:fb:7f:2c:49:ef:d9:73:0e:67:64:0d:95:76:e3:ad:56:a9:
         cd:58:ff:47:f5:bd:e8:c4:35:fc:3c:fa:0c:4d:d3:ff:e6:72:
         90:9d:98:33:bd:35:f1:a3:1f:e7:0f:c3:6c:9f:4f:2a:e5:ad:
         45:a6:13:c9:87:5f:9a:23:c3:cb:50:e1:83:ab:07:31:f1:38:
         ae:16:e6:e3:7d:dd:dd:e9:bd:93:5e:85:c5:ce:d5:5c:25:6b:
         50:70:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:31:42 2025 by rpki-client