Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          zLYBYOJnzER+8MVG2uLmGA/CWL7qwqg2WW3+7ydXIS4=
Subject key identifier:   88:85:26:C8:9A:38:52:6E:BE:90:8A:33:57:93:F1:23:DB:53:93:5C
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          057F
Signing time:             Sun 02 Nov 2025 23:17:05 +0000
Manifest this update:     Sun 02 Nov 2025 23:17:05 +0000
Manifest next update:     Sun 09 Nov 2025 23:17:05 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: YcYTovVnZcqg7dmFFIAvN6623cEQCt3FxX4TNqD49fs=)
                          2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Nov  2 23:17:05 2025 GMT
            Not After : Nov  9 23:17:05 2025 GMT
        Subject: CN=6907e671-142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:36:66:80:9d:0d:85:e9:98:21:e9:d9:fe:
                    3e:a6:1e:00:57:82:b2:93:23:53:74:f6:d2:4d:79:
                    c0:fe:6a:8c:68:1c:27:80:43:ee:0d:17:12:ff:c9:
                    b3:58:3a:ac:01:a6:fb:39:0d:c3:d6:af:9e:2f:5e:
                    e0:f4:e7:ff:4e:ee:ec:0f:93:0b:a3:79:60:82:e9:
                    65:2b:f2:a5:e1:ad:47:76:7e:f6:39:10:e5:d9:79:
                    a9:81:65:3e:00:65:81:78:a2:3b:19:4a:52:c7:64:
                    3a:1b:f4:4b:97:96:6b:bc:1e:04:97:7e:6b:0f:2e:
                    14:0c:be:6a:01:2d:85:27:8d:17:90:6e:99:d3:64:
                    b4:e5:3d:3e:aa:a9:ae:d1:34:fb:ac:a4:81:8c:dc:
                    f3:fb:c0:21:d1:75:b4:94:8a:8c:24:e9:48:f3:0d:
                    6b:cc:7b:54:d0:00:5f:2b:fd:86:56:19:14:7b:10:
                    ac:85:f5:ca:33:98:65:8e:32:bf:0b:0a:7e:b1:ab:
                    ca:85:e4:cc:7d:e6:d0:bb:d1:d4:1a:1f:f6:16:40:
                    a5:84:64:42:0e:0c:fc:ae:4a:6a:1d:9d:83:dc:38:
                    66:ce:fa:4c:cf:2f:42:09:df:c9:b4:47:29:c2:47:
                    78:c9:cb:d3:8a:a9:d8:47:34:1e:e4:be:b6:73:2a:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:26:C8:9A:38:52:6E:BE:90:8A:33:57:93:F1:23:DB:53:93:5C
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:dd:5e:63:df:9f:f4:3d:18:4a:ce:42:31:a3:6d:91:3b:
         0e:b0:bb:46:6b:32:85:19:f1:73:88:e7:e6:2b:a4:f9:6a:32:
         87:0f:67:4e:4f:d8:c2:d0:ea:e1:b0:1a:de:66:0d:e8:c7:27:
         91:84:a8:4a:0b:ee:91:98:b5:a3:4d:24:22:7e:e7:a4:94:1d:
         7d:dd:f7:7f:38:51:d7:3d:bf:5a:4e:28:55:aa:91:b1:91:a6:
         e0:08:33:2e:c3:dc:6a:dc:51:05:5f:ca:c6:45:30:3c:2a:82:
         a1:c3:31:5f:90:40:4d:5c:f8:86:e1:af:6b:e6:8a:c4:6e:8a:
         7c:06:cd:ab:1f:7b:48:9d:a3:32:c6:f2:15:da:0c:32:92:56:
         c0:3f:ba:c5:44:91:15:d2:ad:f1:35:f1:56:64:a5:ed:bc:ef:
         62:1b:da:40:dc:55:9e:60:d7:ca:f8:8c:0d:71:4e:e9:8b:52:
         5d:9b:79:2b:d6:6f:15:75:4a:19:e4:59:cf:87:44:71:49:92:
         81:2b:b7:ee:f4:e5:ae:49:b5:db:b6:4d:27:f6:34:1e:84:6f:
         68:f1:de:bb:2e:93:38:a8:b5:82:e7:6d:c1:43:aa:45:3f:20:
         0a:0f:95:1a:f8:9f:0c:3e:d6:cc:38:fa:2f:78:06:f3:6d:e1:
         6d:69:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:16 2025 by rpki-client