Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File:                     YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier:          Xgf30z9cFzkHMfrdj6Zmx+pGb3XR89hap4orUq+I1fU=
Subject key identifier:   A5:8D:4E:13:4A:D7:95:51:F5:73:D5:ED:4B:98:FF:D1:CB:C6:C8:C2
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer:       /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number:          E9
Signing time:             Wed 05 Nov 2025 05:34:01 +0000
Manifest this update:     Wed 05 Nov 2025 05:34:00 +0000
Manifest next update:     Wed 12 Nov 2025 05:34:00 +0000
Files and hashes:         1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: HZuOpR+59JOTxh0gTZy6ICahpa8f/ucLkuvtx1UOj8g=)
                          2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: cRgznzypgNObdJ5+nUBdFPZbJ/XSHjedbIfP0KuyG4Y=)
                          3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: Po3+3jwZqbergErT/CE07CzYXSwWNnVs3V/GDhF2/Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
                          rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
        Validity
            Not Before: Nov  5 05:34:00 2025 GMT
            Not After : Nov 12 05:34:00 2025 GMT
        Subject: CN=690ae1c9-158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:fc:fe:f4:31:63:db:52:79:82:fe:9f:6b:
                    58:e8:73:fe:12:89:48:79:bd:a8:5a:c9:8a:d5:85:
                    1b:7d:ea:58:d7:45:93:73:62:02:2e:86:d4:8e:66:
                    b0:ad:3f:81:ca:8a:1a:e6:ba:ad:c7:01:c0:51:d7:
                    6d:97:57:22:91:fd:66:84:97:17:69:20:a7:a9:31:
                    7f:52:c8:53:0f:c6:e3:dc:3c:4a:37:bf:1b:1b:52:
                    78:ad:1e:a4:92:5f:da:96:1f:29:49:b4:16:b5:74:
                    45:4c:3e:4f:65:49:22:ec:56:8b:95:cb:59:de:05:
                    e2:a8:5a:dd:f3:e7:dd:a0:c7:ec:8e:b0:47:ed:11:
                    55:b0:92:f4:ad:70:33:90:7d:94:ca:ac:27:1d:af:
                    a6:7d:13:2b:dd:bf:dd:c8:0c:2b:70:92:36:93:30:
                    42:f1:20:de:8a:e4:5a:f1:f7:53:0e:21:30:1b:00:
                    7d:17:64:40:d9:8d:a0:03:15:52:63:34:86:ab:87:
                    d0:42:3a:3b:42:e4:09:d2:79:17:88:67:fc:f6:4d:
                    ea:20:d2:6a:5b:e7:10:45:3f:a5:8d:c2:d9:b6:6e:
                    ac:4d:54:9d:24:97:b2:e9:1c:d5:8a:d0:ec:41:bd:
                    fb:05:3b:c1:db:34:09:84:4b:04:cd:cb:0e:4a:c2:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:4E:13:4A:D7:95:51:F5:73:D5:ED:4B:98:FF:D1:CB:C6:C8:C2
            X509v3 Authority Key Identifier:
                keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2a:2b:c3:87:58:19:56:d1:ff:50:c4:da:48:df:f6:12:09:
         e4:93:5f:a1:a1:3d:e4:ff:19:cd:38:dd:93:34:5a:46:55:89:
         d6:e6:7e:2c:5c:b6:5d:dd:f0:8d:b2:27:26:6e:53:f9:c5:aa:
         89:09:db:58:ba:97:d0:ec:1c:f3:6b:9b:3c:2d:47:a6:e0:08:
         5b:d1:c2:c5:fc:8a:c5:12:59:78:49:5e:f2:2e:3d:1d:79:94:
         3c:98:0e:6b:b5:71:28:a5:5c:70:ed:9c:a1:18:25:8b:45:45:
         90:38:a1:83:9e:c2:72:32:d7:4e:9a:4b:3e:ac:ff:79:a7:54:
         ed:ea:c2:a7:ba:a6:97:61:44:86:27:67:bd:6d:83:7b:4f:83:
         99:c8:b2:9e:18:9c:11:f5:d2:f4:ab:f9:09:d4:f8:2c:41:55:
         20:36:6e:ba:ea:b6:a2:bd:0a:6b:9a:53:f4:ec:db:a9:11:02:
         b7:ce:24:dd:4a:07:8f:16:55:20:c1:15:e6:4d:db:94:c1:34:
         70:5f:38:5d:4a:c0:a4:13:96:13:c9:a8:a4:96:57:25:73:6e:
         1a:f1:0d:0f:4b:ab:ff:3c:43:e6:7c:87:a3:7a:42:59:b9:1f:
         14:f5:94:f2:51:b4:ca:76:3d:1b:9a:59:9c:36:34:e0:f2:29:
         17:41:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:57 2025 by rpki-client