Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File:                     YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier:          UG5yLBCFm5k62FpWZcL9hRQ+y/FW6Pne/9eUUpiSYC8=
Subject key identifier:   6E:C7:13:30:85:BA:20:F7:3C:C4:CB:BB:92:E9:E3:BF:70:D8:7F:BB
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer:       /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number:          1E
Signing time:             Mon 03 Nov 2025 07:47:36 +0000
Manifest this update:     Mon 03 Nov 2025 07:47:35 +0000
Manifest next update:     Mon 10 Nov 2025 07:47:35 +0000
Files and hashes:         1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: dJsbxjdArqDP0H7uwo2/yiBRTCQQI8qV2Unq7ve88ro=)
                          2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: AF9EblqIIR14Jg1fqI/l7p20Pg6bE92rpu7Zvd4y37I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
                          rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
        Validity
            Not Before: Nov  3 07:47:35 2025 GMT
            Not After : Nov 10 07:47:35 2025 GMT
        Subject: CN=69085e17-bb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:58:7c:3c:6d:15:4d:bc:b1:58:3b:88:76:
                    96:a1:57:bc:e6:51:15:f5:de:2d:33:6c:18:8d:39:
                    71:90:00:e0:4e:5a:b4:ce:0a:fa:e5:14:bf:07:c4:
                    61:7b:0b:d3:c8:93:14:65:7e:e9:63:60:ee:4c:29:
                    54:4a:d4:ad:6a:fc:07:21:63:f0:37:bc:49:d3:74:
                    c3:99:65:00:2a:9d:7e:0b:38:b1:e0:a0:6d:0d:d3:
                    0a:6d:fb:53:ad:d1:ec:84:70:29:f7:13:62:3f:f1:
                    59:f2:9a:2c:47:5c:66:b8:c9:dd:6b:34:a0:8b:84:
                    10:80:ed:b2:75:b5:05:ff:bd:22:e5:30:37:4f:42:
                    0e:51:a1:66:5c:fd:00:49:c8:3e:9f:80:5b:c4:2f:
                    34:7a:5d:1e:c8:78:04:75:aa:32:4b:70:40:15:1f:
                    70:c7:33:c0:02:9c:3c:90:28:83:71:f9:c7:f3:59:
                    8a:be:a2:85:c3:40:99:43:c8:62:15:05:30:60:36:
                    29:f9:d8:fb:52:f7:7a:54:5b:a2:90:38:07:e0:94:
                    da:f9:31:04:a8:b4:1d:6f:e5:f7:6b:81:46:6e:4c:
                    a8:cf:f9:fd:97:ec:9e:93:cb:0e:a0:16:d8:5f:62:
                    4e:3f:79:75:95:01:5c:0c:7e:62:21:0d:f4:c4:dc:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C7:13:30:85:BA:20:F7:3C:C4:CB:BB:92:E9:E3:BF:70:D8:7F:BB
            X509v3 Authority Key Identifier:
                keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1a:54:b0:bf:2a:d8:71:2b:bf:7c:3b:ab:e6:69:6d:de:3b:
         aa:06:34:7b:ae:ae:36:a4:41:36:e0:e4:a5:71:09:4c:5f:e9:
         50:60:e9:e6:5c:5e:8b:a5:58:74:1f:c4:8b:90:64:3c:f3:76:
         c6:32:76:49:f1:5a:93:99:53:20:ff:30:f8:01:12:28:b5:29:
         25:df:dc:c7:7d:4a:5b:2b:bf:93:8e:53:14:1c:ea:6d:57:1c:
         b8:22:ca:d0:22:97:ef:5e:8e:ce:51:b7:73:bc:9f:f5:6b:a6:
         57:49:d8:8d:6c:30:6b:3d:1f:ab:dc:b4:4e:76:b4:c7:f7:1a:
         80:0d:ce:e1:0b:07:d8:a6:63:7e:bf:b0:30:5f:30:1e:f5:cf:
         2b:a7:11:c6:da:ac:a1:4f:9d:01:45:d7:d6:ea:8a:ac:21:6e:
         ad:a7:0d:05:11:13:a2:eb:86:ee:f7:57:e4:b7:9e:b6:4d:cd:
         e9:b1:65:74:a0:87:48:99:ab:46:7d:18:7c:9c:6c:92:db:d4:
         b1:f8:e3:f2:c7:77:e3:d9:ee:bc:60:7f:f2:a7:8b:af:6f:6d:
         05:95:06:78:a9:0c:7d:d4:d7:38:89:df:24:43:3f:a0:36:f3:
         00:56:ed:6d:be:df:9d:fd:db:53:8b:68:70:14:c6:15:2e:75:
         32:30:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:31 2025 by rpki-client