Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File:                     yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier:          RHvFSi4L3RPcLuhz43dKL2J5IpW1gL290eROzxWXy20=
Subject key identifier:   8D:AD:77:E4:C7:63:04:45:FC:2F:A3:15:B6:56:AA:60:8E:E8:65:49
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer:       /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number:          CB
Signing time:             Fri 17 Oct 2025 08:59:15 +0000
Manifest this update:     Fri 17 Oct 2025 08:59:14 +0000
Manifest next update:     Fri 24 Oct 2025 08:59:14 +0000
Files and hashes:         1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: ZCGG7/+uqIx/T8aY+uYS+gHT98R0o0sJwhciYX99Ros=)
                          2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
        Validity
            Not Before: Oct 17 08:59:14 2025 GMT
            Not After : Oct 24 08:59:14 2025 GMT
        Subject: CN=68f20562-770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:98:10:82:af:a8:70:aa:b5:fa:f7:72:c3:
                    6e:e6:67:d2:96:b9:2a:e6:30:c1:83:a4:4d:74:1d:
                    39:14:98:b5:de:92:c0:d0:47:b6:e4:ec:84:a1:a2:
                    62:a9:60:73:9a:96:d5:e8:37:cb:7f:98:8c:bc:91:
                    c7:1e:9d:33:5b:0d:e0:78:71:09:54:df:c9:ae:f6:
                    79:40:a3:e6:83:6a:cd:f4:5f:b6:7c:19:5b:7d:22:
                    23:2c:4b:f9:e0:5f:6b:f1:74:2c:ae:ee:e0:da:50:
                    90:6f:80:08:2f:80:58:5f:7d:13:1f:c9:0e:fc:8a:
                    9c:ab:27:00:b2:65:6d:a9:ea:01:5d:cb:be:0a:2e:
                    b5:63:ec:1d:77:a3:fb:54:5b:33:94:11:a1:eb:02:
                    24:c1:c6:02:44:11:a2:27:b4:af:6f:c5:ab:30:48:
                    a9:3b:f6:06:c5:26:7a:85:6e:28:b6:e2:b5:1c:ef:
                    5d:27:fc:a8:ae:60:56:de:90:ea:34:46:bb:43:da:
                    e9:a4:38:c2:9d:a5:56:ab:d3:14:65:b1:e8:87:31:
                    bd:f6:af:b5:fe:83:c4:22:92:37:60:f1:35:e8:b1:
                    41:bb:e7:d1:02:1d:32:22:59:7d:c7:73:e9:6c:32:
                    03:4b:46:de:26:a0:12:fb:ca:fd:3d:9e:1b:a3:a4:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:77:E4:C7:63:04:45:FC:2F:A3:15:B6:56:AA:60:8E:E8:65:49
            X509v3 Authority Key Identifier:
                keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:fa:b2:d6:a9:50:8a:ff:03:b1:3e:77:18:4e:97:24:a3:
         4c:3f:cd:1e:4f:68:14:5a:aa:da:04:7b:f9:02:5a:bb:9d:0f:
         73:78:d0:32:c9:8b:b8:ef:3c:b6:65:3e:43:31:55:ca:c7:dd:
         d6:38:99:b1:f5:5a:08:a5:45:77:e4:f9:68:ea:23:1c:cd:bd:
         a0:63:f6:73:f9:7e:19:df:14:3a:59:40:c7:cf:84:99:96:2e:
         c5:de:07:39:04:3a:a8:a5:cf:43:6c:af:66:78:d6:b9:32:36:
         3c:f7:67:b4:e6:3c:f0:d5:d6:a1:cb:1e:29:38:05:25:3f:3b:
         77:2f:e6:79:59:94:6d:9b:b6:95:bb:84:32:f1:6d:70:c3:a7:
         a3:de:35:a5:01:9a:1e:87:21:32:fb:1d:cb:59:e3:ff:0b:75:
         5b:76:ec:5a:a5:8c:93:d0:59:95:45:22:ca:59:2b:6c:3a:a6:
         2e:cf:60:76:b4:20:3b:f1:f2:70:38:af:b9:c8:5e:97:fd:d6:
         6d:6e:46:54:c4:ab:7b:d1:f0:74:7e:8a:a0:ab:a1:f0:cf:49:
         67:3d:f6:4b:72:f5:e2:4f:f3:ae:69:10:ec:aa:c3:8a:23:6f:
         17:51:e2:97:4c:20:32:a0:30:10:d2:1e:2c:ee:04:43:52:cf:
         3e:b3:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 23:36:32 2025 by rpki-client