Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File:                     yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier:          UgIkjIwcZlDToQClJXtGu4mjdx8lwm9fTTWxUebTDhY=
Subject key identifier:   19:AC:01:0D:C0:2B:CA:4F:39:A6:F1:8E:2C:08:60:23:66:8E:D3:99
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer:       /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number:          95
Signing time:             Wed 05 Nov 2025 06:39:54 +0000
Manifest this update:     Wed 05 Nov 2025 06:39:54 +0000
Manifest next update:     Wed 12 Nov 2025 06:39:54 +0000
Files and hashes:         1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: W++bmVfns/SF+WBg+QsR+AA8kbh7Fu3zWH5JWiCzBo8=)
                          2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
                          rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
        Validity
            Not Before: Nov  5 06:39:54 2025 GMT
            Not After : Nov 12 06:39:54 2025 GMT
        Subject: CN=690af13a-b051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:69:ac:b6:a7:6e:3c:0e:bc:06:01:54:b5:
                    67:b4:16:7e:90:cf:3f:29:b0:99:99:ca:1f:21:46:
                    6c:08:5b:c6:23:fb:81:2d:b7:7f:0a:0a:6a:78:94:
                    53:5c:3d:83:a1:30:a4:fb:cf:13:51:02:19:2d:98:
                    94:8c:98:12:85:ac:f6:92:a9:be:bc:ab:71:38:29:
                    19:08:58:0e:15:e3:04:bd:45:5c:3a:98:c0:bc:4b:
                    e0:05:4e:d9:14:3e:5d:16:b1:28:1a:60:6d:43:e2:
                    48:00:f8:a3:cf:56:a5:b0:27:cb:f6:81:7a:c9:6a:
                    48:7a:06:f0:8b:eb:4e:12:24:66:01:71:c5:d0:81:
                    4f:28:4b:b9:e9:e2:63:c9:d3:0c:2c:13:e6:2d:be:
                    e5:85:bd:ac:a5:61:a5:bd:10:cc:d2:93:d0:25:33:
                    46:a3:ed:54:e4:35:05:c3:02:4e:c8:2f:cf:b4:01:
                    ed:ce:0a:29:73:7d:8c:58:fc:b9:93:26:e6:16:c1:
                    08:06:76:cf:54:65:eb:e7:d3:85:af:a4:e3:68:49:
                    a9:3d:78:93:8c:96:14:b4:02:69:dd:4e:5b:82:b0:
                    9d:de:77:d0:32:f8:6c:82:3d:bf:41:28:a7:af:b6:
                    44:18:53:d1:11:12:9f:42:c9:92:4b:10:36:bd:7b:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AC:01:0D:C0:2B:CA:4F:39:A6:F1:8E:2C:08:60:23:66:8E:D3:99
            X509v3 Authority Key Identifier:
                keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:96:2f:cc:54:d5:33:e8:0b:62:47:61:65:97:1f:93:74:39:
         2d:12:af:21:1d:1b:1a:91:5d:4b:2a:8e:f1:24:6b:23:b0:8e:
         f6:79:40:82:b0:41:88:fa:16:27:34:ba:91:a8:e5:d9:d1:15:
         ed:77:9e:4a:de:59:6c:9e:d0:ca:8a:46:1b:50:c3:d6:41:7f:
         10:96:e0:b0:e0:09:da:02:73:ab:7c:b3:be:5d:17:4b:ac:40:
         fb:66:1f:17:6d:0c:16:ba:9d:f4:f4:c9:fc:9d:31:ed:ac:7c:
         9d:e3:97:79:23:70:f2:42:f9:c3:37:a9:51:48:65:12:67:b4:
         01:60:d7:16:26:fe:b6:d9:09:e3:a5:de:62:51:ff:f6:29:5b:
         90:5b:d3:e1:ae:fd:d0:ec:14:d6:f6:a8:2b:96:b7:b4:b4:65:
         6a:47:61:44:f8:15:05:16:24:cf:f9:cf:3d:8f:df:5c:98:1d:
         5b:b5:0b:cd:53:a2:f0:10:07:6a:d0:0d:74:5e:3f:8d:8d:d4:
         9f:f1:1b:8a:59:8d:32:21:42:86:a4:ea:45:2d:ad:b1:44:96:
         26:14:34:2a:d6:a3:37:26:82:3f:b4:51:43:fb:03:fa:b1:34:
         f3:fc:04:f6:b1:ab:da:91:0b:3d:91:0c:c9:dd:f8:75:ab:1b:
         a6:39:9c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:50 2025 by rpki-client