Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File:                     YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier:          VMeImFQO8IHEcJvvbtGFpiYakA41jIzKRdLWq+hcW68=
Subject key identifier:   86:25:68:9C:7A:C5:B4:EB:55:F0:2C:3A:92:90:B5:C8:E3:7C:BF:9F
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number:          0754
Signing time:             Tue 04 Nov 2025 21:46:25 +0000
Manifest this update:     Tue 04 Nov 2025 21:46:24 +0000
Manifest next update:     Tue 11 Nov 2025 21:46:24 +0000
Files and hashes:         1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: NMcnri3ZIWrp77OiKKosqkJRPb4oSQydvWh9Or8tU0o=)
                          2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=)
                          3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
                          rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
        Validity
            Not Before: Nov  4 21:46:24 2025 GMT
            Not After : Nov 11 21:46:24 2025 GMT
        Subject: CN=690a7430-7781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:b3:b7:99:07:a0:e4:ab:c2:0f:f0:ab:3d:
                    45:12:f8:10:a8:c6:9d:20:05:2e:06:b0:8e:02:25:
                    63:ef:f2:8c:37:b9:be:79:ee:a5:2a:6b:64:29:bd:
                    d9:a9:35:c6:8a:ca:83:ce:b2:d6:1d:9d:8b:83:f7:
                    53:33:11:5c:40:84:e8:ed:e7:b9:12:42:60:7f:6d:
                    73:b5:23:15:77:d5:ad:ba:8c:05:97:3c:4d:a1:21:
                    8e:f1:93:10:2c:42:21:9a:ae:f6:68:cd:b8:6d:fb:
                    69:40:ba:10:d4:02:89:87:80:5d:f3:73:e6:1a:9a:
                    3a:6d:cb:ef:2b:2e:f4:88:ff:89:27:67:cc:59:ba:
                    0d:af:65:e3:19:a7:c9:43:e2:2c:46:a9:7b:0e:72:
                    d4:81:58:3f:3b:47:bd:c7:0f:84:df:90:78:0e:83:
                    b1:c1:17:de:25:15:e4:a4:25:80:d8:71:71:d1:21:
                    e6:f2:3c:dd:67:bf:2c:27:f1:4b:e4:ea:07:99:e1:
                    23:0d:b3:ac:65:d8:66:b0:35:d2:81:41:dd:be:0f:
                    60:54:5c:81:69:c3:90:03:32:70:85:61:53:47:30:
                    85:47:e1:a5:10:23:1c:69:b0:ee:11:f9:b0:2f:27:
                    4a:4c:97:49:46:d9:8f:4b:af:2c:0b:e6:bd:93:d0:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:68:9C:7A:C5:B4:EB:55:F0:2C:3A:92:90:B5:C8:E3:7C:BF:9F
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:56:e9:17:6d:fb:a1:13:5e:b1:e2:4e:19:82:90:38:50:
         88:6e:10:9f:8c:9e:e6:00:24:a3:c1:37:e3:ff:f3:37:9b:bb:
         53:63:b2:1a:5e:92:6c:ab:4b:98:72:09:24:44:15:d9:9d:52:
         4c:fe:0a:16:88:08:f1:6c:04:c3:40:a4:e4:a1:e8:65:ac:49:
         ec:8c:ea:86:70:fa:32:6b:1d:dc:ac:ac:85:6b:3f:5b:50:1f:
         fb:ed:50:b8:57:3a:40:31:39:1d:60:f0:58:75:0e:11:46:70:
         5d:65:54:8c:e4:7c:be:b3:2a:ca:c8:07:5e:fc:09:22:51:df:
         ad:64:b7:4c:bc:2a:d2:b6:a9:4c:17:ed:a2:47:c5:20:3e:2e:
         e5:f4:b4:c7:69:15:98:c2:9c:a3:ef:58:0a:71:13:66:77:d8:
         d5:83:9b:64:84:d2:c1:0a:86:ef:5b:98:ad:db:c8:c0:dc:20:
         09:6d:b6:11:6b:29:bb:a2:78:4f:15:d9:bb:34:29:b9:20:8c:
         5e:7f:e0:9b:f0:04:5e:64:79:4b:5a:59:7c:9c:1e:d3:34:fb:
         2b:72:37:02:d6:9a:d2:a1:cc:26:48:2d:76:f8:96:59:d1:12:
         86:6c:96:c7:eb:96:3b:ad:92:15:45:62:b8:6a:d4:d1:62:54:
         58:87:22:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0
M0E5QTNFNEIwHhcNMjUxMTA0MjE0NjI0WhcNMjUxMTExMjE0NjI0WjAYMRYwFAYD
VQQDEw02OTBhNzQzMC03NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmeuzt5kHoOSrwg/wqz1FEvgQqMadIAUuBrCOAiVj7/KMN7m+ee6lKmtkKb3Z
qTXGisqDzrLWHZ2Lg/dTMxFcQITo7ee5EkJgf21ztSMVd9WtuowFlzxNoSGO8ZMQ
LEIhmq72aM24bftpQLoQ1AKJh4Bd83PmGpo6bcvvKy70iP+JJ2fMWboNr2XjGafJ
Q+IsRql7DnLUgVg/O0e9xw+E35B4DoOxwRfeJRXkpCWA2HFx0SHm8jzdZ78sJ/FL
5OoHmeEjDbOsZdhmsDXSgUHdvg9gVFyBacOQAzJwhWFTRzCFR+GlECMcabDuEfmw
LydKTJdJRtmPS68sC+a9k9AMtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYlaJx6
xbTrVfAsOpKQtcjjfL+fMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy
OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2
UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1xlbpF237oRNeseJOGYKQOFCIbhCfjJ7mACSjwTfj//M3m7tTY7Ia
XpJsq0uYcgkkRBXZnVJM/goWiAjxbATDQKTkoehlrEnsjOqGcPoyax3crKyFaz9b
UB/77VC4VzpAMTkdYPBYdQ4RRnBdZVSM5Hy+syrKyAde/AkiUd+tZLdMvCrStqlM
F+2iR8UgPi7l9LTHaRWYwpyj71gKcRNmd9jVg5tkhNLBCobvW5it28jA3CAJbbYR
aym7onhPFdm7NCm5IIxef+Cb8AReZHlLWll8nB7TNPsrcjcC1prSocwmSC12+JZZ
0RKGbJbH65Y7rZIVRWK4atTRYlRYhyKE
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:16 2025 by rpki-client