Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier:          Eo9M72rHrM8iq9EuEiVGTIq4FGVN8mx49WrI5S+SJvo=
Subject key identifier:   EA:2E:B2:63:76:0B:9E:1C:45:73:33:6F:6A:1B:46:19:BA:05:3F:ED
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number:          043E
Signing time:             Mon 03 Nov 2025 00:23:44 +0000
Manifest this update:     Mon 03 Nov 2025 00:23:44 +0000
Manifest next update:     Mon 10 Nov 2025 00:23:44 +0000
Files and hashes:         1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: PcVHPNz7WZ8l5FMd/zQv5x2ooTJXdcns5aAyQwHvnUg=)
                          2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: 6yvR3WdEIl+m0VS2V1qa7J3UvweV10+1ZEVpXrlDYAc=)
                          3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: cKCBs+iXK9mKTKUEcpQQ6Sz2FB2iRN0G07D7yQIwB0A=)
                          4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: vGWAfraKDZQAlToukyO5sNChFtgkll9GKUzJk3M3Lm4=)
                          5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8VvyEs0cT5gb0Pa9QyQkLFctUkO2J8xm2GTLEwroWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Nov  3 00:23:44 2025 GMT
            Not After : Nov 10 00:23:44 2025 GMT
        Subject: CN=6907f610-12dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:9e:7e:23:36:3e:d8:94:45:7a:c8:26:56:
                    0d:07:fa:af:7e:3e:0c:80:c6:3d:6c:23:1d:79:08:
                    5e:af:8d:89:8a:42:da:fa:58:b1:3a:4c:dc:10:57:
                    7d:9c:99:8a:75:30:82:f1:03:de:67:9c:a6:db:79:
                    0a:4a:d9:fb:14:76:61:6d:d6:4e:f9:80:02:ba:76:
                    64:1a:a7:1e:57:60:f1:1b:1d:0a:45:34:15:5b:05:
                    84:33:f2:b1:65:5b:7d:7e:f3:d2:5e:d8:d0:da:17:
                    73:3a:07:ac:ce:0c:91:8f:da:bf:47:3d:7d:13:63:
                    43:71:7f:17:1d:4f:00:2c:3b:7b:bb:45:57:65:52:
                    08:8a:93:2b:0e:e3:aa:7b:c6:67:e9:e2:60:24:55:
                    7b:d3:7f:d9:8c:8d:54:09:53:4e:c1:8f:fd:f5:50:
                    3e:ee:10:d3:f2:88:32:d9:1a:65:8c:1a:e1:6e:fb:
                    ff:81:e7:bb:4f:38:4c:fd:d9:56:0b:0c:d1:68:dd:
                    c4:ad:c6:12:ff:34:95:9c:98:5d:0f:99:d2:b9:cf:
                    98:e1:af:8b:97:81:62:b1:8a:f6:52:74:ef:36:cd:
                    78:1e:60:9c:6f:66:ce:6c:d3:f6:07:2a:a3:0d:dc:
                    8f:79:3e:44:21:86:94:b3:17:53:4a:6a:80:5d:a4:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2E:B2:63:76:0B:9E:1C:45:73:33:6F:6A:1B:46:19:BA:05:3F:ED
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:ab:f1:38:01:20:39:ca:2c:ee:d2:b1:8d:c9:32:2c:01:
         67:96:57:55:4c:b4:29:eb:de:0f:b5:ac:aa:6a:1d:50:8a:ad:
         2b:1d:39:f2:d1:3b:a9:a8:09:c3:b4:5b:7c:25:a7:d3:07:41:
         0a:48:d8:88:99:5e:f3:64:f7:11:71:96:38:ad:d9:78:a3:51:
         03:a7:16:b3:77:df:81:bf:ae:8a:5d:2d:28:f0:04:ce:d5:f1:
         4d:73:94:2a:05:7e:f6:46:b1:65:50:ff:3f:b7:e9:10:74:3d:
         53:66:1d:8d:a6:c4:fd:b3:e8:5c:36:e7:6d:80:4f:03:79:83:
         e4:fa:8b:92:f8:f4:2d:d7:f9:3d:4a:f9:d6:9c:f3:58:5a:6a:
         98:62:1a:92:07:d9:57:a6:e6:7b:cf:c6:8a:16:4a:90:d1:5c:
         56:11:dc:38:dd:3a:bf:17:15:ef:2e:3f:64:2c:be:8b:ed:15:
         2c:6a:74:02:f6:ca:d0:99:e9:61:1c:74:f6:80:7c:50:7b:38:
         87:a8:f3:54:75:04:14:ef:94:b8:87:9b:62:67:b1:17:97:4e:
         cb:a1:a9:41:88:6d:ec:35:dc:6b:17:a6:0e:32:0f:69:69:c0:
         b3:74:1d:29:04:a6:09:da:d1:2b:a8:62:b0:77:8f:f8:cf:a2:
         ea:db:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:18 2025 by rpki-client