Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
File:                     ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json)
Hash identifier:          TStd+0qRsLsC3ObiJm60/LXa76Wp0p17dGZSm6QmNpU=
Subject key identifier:   B0:C0:87:2D:E1:21:A6:87:51:43:85:03:6B:FB:07:97:DA:D9:A0:05
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Certificate issuer:       /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
Manifest number:          0F
Signing time:             Wed 17 Sep 2025 08:48:49 +0000
Manifest this update:     Wed 17 Sep 2025 08:48:48 +0000
Manifest next update:     Wed 24 Sep 2025 08:48:48 +0000
Files and hashes:         1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: a0M8L+Q07nxMzNxjYLNi+T18tcDUBdm+I3Yxr8SviuM=)
                          2: AE999E1E7F7F11F0B11FE740C4F9AE02.roa (hash: gOmLk9d78U2D5m5t6v74LTuBEyzyY+12QDGRiKX5u0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
                          rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
        Validity
            Not Before: Sep 17 08:48:48 2025 GMT
            Not After : Sep 24 08:48:48 2025 GMT
        Subject: CN=68ca75f0-6ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:9a:68:e3:9b:92:00:b2:cf:c8:18:79:c7:
                    1b:f0:f6:67:62:72:0f:25:81:91:54:b5:56:69:eb:
                    11:80:02:a7:2b:44:2b:a7:17:f9:8d:6c:01:84:45:
                    24:70:27:99:77:23:88:a0:7b:a5:23:f5:df:17:ab:
                    3b:fa:85:1a:a0:af:f5:fe:cc:87:d7:00:a7:59:d0:
                    24:db:31:d9:58:03:55:a5:36:4c:53:f7:fb:37:2c:
                    58:87:48:08:c3:c6:f0:5b:13:a6:6c:10:cf:55:53:
                    4c:6d:9e:b2:e1:0e:47:db:12:4b:02:75:76:5b:f8:
                    f5:72:2e:6d:93:fb:a6:58:42:31:6e:13:58:0c:54:
                    09:91:65:d4:bd:79:e4:03:70:0e:1b:f2:d5:ac:d5:
                    5d:54:5e:dd:3b:79:44:03:ec:2a:a9:89:9c:d1:d4:
                    e7:df:3c:60:fe:e2:f1:2b:91:1b:a2:6f:c2:9d:23:
                    04:74:ce:3b:42:5a:cd:3a:4c:ae:68:07:91:67:ad:
                    04:67:c8:c7:b3:4a:9b:c9:a5:e8:17:fc:99:6b:7f:
                    e4:ae:2f:50:62:ff:37:9a:01:d6:1f:f5:d5:90:cc:
                    89:80:95:cf:31:74:da:e8:24:e0:84:07:ce:f3:5b:
                    2e:09:70:c5:33:58:43:43:5a:b5:48:34:72:9f:59:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:87:2D:E1:21:A6:87:51:43:85:03:6B:FB:07:97:DA:D9:A0:05
            X509v3 Authority Key Identifier:
                keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:55:37:40:29:54:02:b1:4a:00:46:b9:df:15:80:54:14:
         aa:e0:a8:91:a8:a3:b7:60:78:3d:cc:8f:97:d1:18:5e:ca:f2:
         92:db:ce:dd:24:ff:0a:92:89:58:e4:94:8b:1d:da:40:e4:c5:
         94:4d:89:0f:37:eb:7a:77:dc:79:64:0c:3d:c0:4a:5c:a2:a3:
         72:10:09:c7:b1:73:8b:4d:37:8a:c6:c3:35:fe:ff:20:0f:b8:
         03:cc:be:1f:d0:4c:ab:53:a5:f4:fd:05:77:dd:6d:1c:c6:91:
         63:58:81:96:b6:90:72:fc:d8:48:ae:ac:3f:43:53:08:03:99:
         26:08:7d:5e:5b:5e:0f:81:09:ca:8a:1c:bf:54:62:0a:92:99:
         dc:fb:f3:66:13:a3:49:6a:d8:1d:b2:f5:70:8d:22:a6:fe:60:
         1d:e4:fe:9c:cd:36:7c:55:27:11:8a:1f:4f:36:86:1d:0c:9b:
         fd:ed:ea:91:70:49:c8:a6:1e:32:21:6e:9d:38:6c:38:27:2e:
         72:29:af:08:d9:f5:ae:98:78:11:ad:71:dd:2f:76:07:dd:f5:
         4c:3a:be:89:90:23:0c:59:c6:66:61:37:ce:d2:0b:3d:85:56:
         7d:af:2c:b9:71:4d:bb:75:49:e6:98:c0:ca:cc:73:55:3d:10:
         fc:f9:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:14:22 2025 by rpki-client