Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File:                     YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier:          E4Ar2qNjSMaCnBE/MLwf6fz2RMuKSIFaikW6kiytejU=
Subject key identifier:   78:05:7B:35:1A:35:C2:97:56:67:45:DA:B5:66:DB:94:5D:F7:77:CF
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer:       /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number:          EE
Signing time:             Mon 03 Nov 2025 05:18:06 +0000
Manifest this update:     Mon 03 Nov 2025 05:18:06 +0000
Manifest next update:     Mon 10 Nov 2025 05:18:06 +0000
Files and hashes:         1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: vJc3H4R6YZqYH8VncoyfJfsk9BJGgBHesj/tTA2K33I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
        Validity
            Not Before: Nov  3 05:18:06 2025 GMT
            Not After : Nov 10 05:18:06 2025 GMT
        Subject: CN=69083b0e-bac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:2d:e8:ed:a9:50:3a:c6:c1:cc:94:58:43:
                    49:a3:62:a8:2d:cd:54:df:13:8b:4b:c4:5f:57:05:
                    d2:83:5b:df:58:21:73:7d:43:59:93:4a:30:67:84:
                    a2:d9:4c:81:83:7c:bd:0a:d5:9a:62:cc:28:20:01:
                    59:3c:6f:b6:7e:e3:3e:61:c2:7b:11:5b:ee:99:96:
                    34:55:c1:a7:d0:35:0c:c0:73:24:d5:7b:16:86:7b:
                    33:38:70:0e:1a:92:f2:02:99:9c:fa:59:46:3c:ad:
                    15:b9:35:cb:41:f4:3d:9e:1b:8d:0b:7b:7d:d2:cd:
                    f7:29:76:0d:10:d9:fe:d3:ec:00:1d:37:9d:1d:89:
                    9e:9d:80:05:73:00:9d:bf:99:42:d6:06:69:04:8d:
                    b1:ae:31:d8:3c:dc:35:bd:f1:29:45:dd:92:f7:13:
                    ca:2b:00:c0:60:ab:72:86:55:ee:15:60:dc:88:95:
                    e2:44:eb:c5:1a:d5:42:56:e2:0e:d7:64:d7:0d:bd:
                    03:de:57:0b:16:6a:2e:f1:42:9e:ca:8f:2b:af:fe:
                    d5:8a:6c:67:e4:dd:fe:49:5e:47:c6:16:f7:93:79:
                    e2:dd:c0:0a:5d:e0:ac:51:a1:a4:09:4a:6b:c8:f8:
                    06:b9:35:bb:b7:9e:92:0d:21:e4:a1:10:7c:d0:40:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:7B:35:1A:35:C2:97:56:67:45:DA:B5:66:DB:94:5D:F7:77:CF
            X509v3 Authority Key Identifier:
                keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:55:8b:1c:d5:68:f5:34:a0:f4:8c:40:69:10:05:42:39:7c:
         ec:c3:1a:6d:03:ba:e2:b5:da:dd:ad:bf:46:d1:76:50:9d:2f:
         19:95:7c:1d:88:80:08:6c:86:09:ca:48:f5:58:31:0f:c5:a7:
         e5:8f:d5:06:3b:a9:db:73:e6:18:60:94:da:95:56:8c:67:92:
         70:b2:aa:23:2f:c4:ab:61:d5:7c:78:90:60:48:0f:af:71:f0:
         81:53:f1:a4:70:93:6d:e3:89:6d:41:bb:12:b1:5e:df:c2:82:
         b8:ea:89:94:24:94:a2:28:90:f4:7f:1e:07:d5:d4:d3:4f:23:
         00:f4:79:99:8f:db:7e:26:fe:a3:e8:c1:f0:cc:bb:9b:f4:da:
         4d:0f:44:8c:a8:58:d2:25:a3:f5:32:54:e6:f5:7d:d9:10:f7:
         f5:01:af:5e:55:f0:ab:f7:4a:98:3c:bf:f1:5f:d7:9d:e6:9a:
         16:74:a5:8b:91:9c:dd:ed:90:5d:52:89:23:83:51:e3:f5:9c:
         49:51:7f:a8:6c:22:3e:58:78:f9:f0:e8:41:e4:67:88:90:f7:
         d6:81:5c:00:b6:67:79:a5:2b:e5:d6:4c:8e:44:5b:32:7c:c6:
         46:05:2e:c1:7c:c1:59:0a:1c:96:da:38:dd:1b:b5:2c:de:d5:
         81:88:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:32:01 2025 by rpki-client