Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          Mm5TAgb5Iw933t1vve8N7tObC7GKdWgqccvIUTUij0Q=
Subject key identifier:   FB:B6:6D:C8:98:87:5F:0F:F9:38:FD:4C:D3:2D:B8:16:32:A2:F7:E9
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          062A
Signing time:             Sun 02 Nov 2025 22:45:28 +0000
Manifest this update:     Sun 02 Nov 2025 22:45:28 +0000
Manifest next update:     Sun 09 Nov 2025 22:45:28 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: 3D5quidlVKorWU0Iu0IeBiHNH5GCNdhZFMW2dcxFHTg=)
                          2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Nov  2 22:45:28 2025 GMT
            Not After : Nov  9 22:45:28 2025 GMT
        Subject: CN=6907df08-7482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:ee:c8:96:bf:de:83:0e:f3:f7:71:2f:87:
                    74:06:72:c2:b2:f4:39:3e:9c:cb:2c:fd:ea:ad:f8:
                    bd:75:a4:9f:99:60:56:1a:c2:55:c7:a2:c1:02:2a:
                    9c:05:aa:3c:30:4d:d9:5e:81:c8:af:ea:06:be:c3:
                    12:98:07:07:87:6a:87:8b:56:39:d3:e5:4b:25:7c:
                    30:5a:37:8a:d0:43:23:1c:70:61:fb:08:7a:08:f4:
                    af:22:76:0d:61:bb:42:ff:02:8f:d8:de:fe:76:06:
                    93:a9:74:1c:72:73:5b:c0:9a:d9:7a:79:7f:ac:e0:
                    bb:a1:ea:ce:de:ad:bb:02:2d:98:4f:44:90:4b:e4:
                    50:ed:6c:72:de:78:e6:ac:0e:e6:b8:e9:d6:63:88:
                    10:6b:f2:f2:9a:44:57:dc:db:9d:3d:81:0a:32:8d:
                    c8:45:ae:e7:50:8b:49:c3:1d:47:0f:0a:64:8a:37:
                    c0:dd:b1:27:9c:bf:db:26:2b:14:27:dd:72:52:7e:
                    91:9c:dd:6b:72:90:ef:d5:6b:b8:a1:d3:f2:f7:e4:
                    b5:d1:5a:3c:1e:e0:9c:e6:47:e7:1e:41:74:4a:d0:
                    35:e7:3b:fb:d5:56:20:b9:d1:c6:9c:a1:83:72:ea:
                    db:46:e5:84:64:97:3f:91:d7:2d:f8:8a:32:01:5a:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:6D:C8:98:87:5F:0F:F9:38:FD:4C:D3:2D:B8:16:32:A2:F7:E9
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:43:e1:40:74:97:14:5f:65:6c:18:b0:9e:07:11:06:4a:59:
         2e:55:ab:be:04:ec:d0:c5:49:a8:c3:aa:62:90:c3:6c:5e:ce:
         ea:d4:25:ce:77:d1:d8:a8:fe:95:d1:6e:e1:11:b4:f4:25:01:
         f6:f9:8c:ee:78:bc:04:63:a2:c6:b2:70:3f:e6:77:75:09:4b:
         83:b2:90:c2:3e:2d:34:54:c4:e4:7b:16:2d:d4:6b:fc:25:25:
         6f:0b:bd:bc:92:23:ff:df:33:56:b6:f6:df:8f:f5:ab:3a:5f:
         e7:9b:88:b7:75:76:1e:da:75:ae:30:62:97:14:45:c8:0f:e1:
         d7:5d:96:8c:fa:67:3b:5a:90:91:02:2d:94:59:97:1e:06:ba:
         52:93:f4:d6:56:87:ea:a2:ee:ca:d3:fe:ed:f2:46:8e:11:f9:
         c9:40:90:d6:c5:ed:f8:99:eb:50:8b:de:1c:ba:3e:45:95:ea:
         67:d6:35:9e:c1:4f:42:32:1b:80:9a:bc:63:a5:5a:29:b3:53:
         27:84:0f:59:22:a7:fc:78:bb:44:ad:3b:7a:a1:d5:b6:1a:21:
         b0:6d:c9:ea:6a:ed:aa:85:6c:64:46:5a:92:19:ce:14:17:93:
         c2:96:07:fc:98:3c:6b:9b:bf:f4:60:9c:e4:62:b1:56:95:41:
         fd:33:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:03:55 2025 by rpki-client