Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          VryqEa6/MIlLH795exnDirzIBsGbadZRHGxE1dlj9vo=
Subject key identifier:   CC:7A:FA:82:C0:DB:34:CD:54:4E:3A:09:50:A0:2D:C4:AE:CC:81:92
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          045B
Signing time:             Mon 03 Nov 2025 00:09:58 +0000
Manifest this update:     Mon 03 Nov 2025 00:09:58 +0000
Manifest next update:     Mon 10 Nov 2025 00:09:58 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: nONwF8+xpgOInSMMpYB4quJbuQhfUj2rqhKKKoqiNNQ=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: TWpB8SYlmQe0Oub87LDVUVN1OX3Mn3l0w0LHkQpg6/s=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: FSPwgNEhxgo+ZEvd+XrJX3+bZfKJ3dVoRc7zxS/PsyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Nov  3 00:09:58 2025 GMT
            Not After : Nov 10 00:09:58 2025 GMT
        Subject: CN=6907f2d6-008d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:7f:5b:e6:78:92:e5:d7:f9:e4:3b:0e:b0:
                    3e:5f:52:68:5e:87:d2:18:c6:8b:a8:e3:44:40:04:
                    dd:2c:4f:52:83:44:0c:5c:c6:99:33:18:25:ed:70:
                    ec:df:d0:42:75:d0:68:fa:e5:76:a6:dc:10:31:70:
                    10:a0:21:5d:3c:49:55:89:36:61:08:55:36:b8:a6:
                    03:78:3c:49:82:34:0c:1c:d7:a3:55:08:3e:d2:54:
                    18:b1:e7:dc:1d:4c:4d:d5:54:1c:ed:f1:18:22:02:
                    1e:73:d7:11:88:1f:5b:48:4d:a0:f3:3b:f5:df:3f:
                    0d:4b:5b:73:58:84:f5:17:5e:e8:ea:f2:83:aa:0d:
                    64:19:cc:7a:e3:a8:ba:83:f2:a6:dc:4c:6b:09:57:
                    80:8a:e4:06:c7:13:a6:e9:d0:0f:d6:6b:ab:6e:0a:
                    63:d1:f5:12:8f:37:b7:f8:75:88:bc:c2:56:dc:6f:
                    47:f0:e7:ec:c3:e7:52:ca:28:bf:84:be:48:01:5c:
                    53:36:39:63:ea:77:79:38:23:02:5e:7a:5c:66:74:
                    1b:c5:ba:5f:a9:e2:4f:6a:d3:83:3b:d1:c8:1e:35:
                    28:0d:37:b7:70:e9:8a:18:d5:f2:2f:1c:66:20:cf:
                    dc:fd:44:9e:77:db:5c:c1:e6:db:50:4e:a6:a4:b8:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:FA:82:C0:DB:34:CD:54:4E:3A:09:50:A0:2D:C4:AE:CC:81:92
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:e8:55:7a:5e:7f:ce:df:66:c5:5d:b9:77:39:db:c4:25:
         c8:24:f3:45:90:48:63:6d:a3:da:70:d4:2e:4a:f9:55:e8:12:
         ee:13:c7:85:8a:dd:0f:47:9b:92:0c:c6:03:90:06:6d:26:94:
         38:f5:1c:39:82:ce:a5:f7:be:1a:bc:78:7c:b6:a6:f5:5a:f4:
         b0:89:66:55:f5:89:1b:5f:3e:3c:ba:51:2b:d3:33:08:21:78:
         bf:34:4f:13:7f:e1:ee:de:83:7e:14:97:bb:7d:ae:17:a2:86:
         36:c3:fd:c7:f0:23:e7:a3:9a:e9:2f:98:b8:aa:75:f9:69:cb:
         43:84:41:a5:3d:7a:67:4f:4d:c9:9e:61:7a:13:7d:97:e6:b8:
         e1:73:dc:fa:d6:23:59:ca:61:f3:50:8b:98:e1:9a:22:63:1f:
         c2:aa:b8:06:0d:21:23:6e:d7:80:8d:eb:0f:47:f2:c0:a6:16:
         8d:35:0c:46:30:fa:a6:27:04:ff:56:6a:6b:91:c5:2d:c3:bd:
         2b:4d:1b:1b:86:85:3c:35:64:e7:e3:51:05:dd:f7:97:d0:b1:
         e6:37:41:d2:13:d7:b5:6e:0f:55:78:5c:11:b1:e2:51:92:5e:
         e1:8c:41:ec:55:44:09:68:3d:43:c8:29:e0:2b:00:23:7c:80:
         e5:ca:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:36:09 2025 by rpki-client