Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          k74JrmOmmKeDYBk4IKlt1mfltB09Cm86A6gSuDAXkXE=
Subject key identifier:   1C:A2:E6:F4:F7:60:E6:EF:30:B6:85:93:B6:4C:4F:2E:D0:0C:D0:E5
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       07EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          07E6
Signing time:             Tue 04 Nov 2025 21:12:35 +0000
Manifest this update:     Tue 04 Nov 2025 21:12:35 +0000
Manifest next update:     Tue 11 Nov 2025 21:12:35 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: C4d4q/IGp6GdaHENqQ0QdA2HYCiaFaC8kV+j/BBPiNg=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Nov  4 21:12:35 2025 GMT
            Not After : Nov 11 21:12:35 2025 GMT
        Subject: CN=690a6c43-e315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:4c:29:66:5e:3e:62:29:61:c2:84:71:ca:
                    a1:ba:d5:2f:35:0c:40:04:f6:5b:fb:c1:95:0a:ee:
                    71:7a:8e:9c:3b:0c:9a:37:56:e7:22:a7:6d:56:de:
                    84:6b:88:f2:72:5a:4a:c5:39:25:a8:63:06:66:9d:
                    a0:8a:ba:94:2a:3e:40:63:56:7e:ec:85:ab:f4:17:
                    ac:89:4a:81:cb:7f:7a:d8:55:27:12:08:2c:f7:e8:
                    3e:3d:cd:35:9f:44:4f:5a:c8:ab:0b:21:66:03:e5:
                    a8:8b:d7:d4:12:39:be:08:ce:dc:27:70:6e:dc:da:
                    50:9e:cb:46:a7:06:ff:ba:e8:53:9e:84:b7:be:1a:
                    f4:50:cf:8d:03:b3:7f:93:33:1c:d1:59:0b:03:39:
                    09:2e:77:06:cd:b9:42:46:ab:d1:66:d9:4e:42:df:
                    6e:a0:74:b6:a6:2a:59:36:65:41:4a:f9:b3:22:19:
                    f2:ed:6e:24:b8:eb:d4:72:55:79:0e:44:d9:fc:da:
                    1d:db:31:ec:b8:ec:ef:a0:8f:b2:49:d4:61:85:be:
                    21:f4:e3:ec:8d:0c:65:db:50:9c:11:3c:4b:51:5b:
                    3a:4f:7a:34:af:ad:5f:70:a8:f5:ec:46:27:1d:35:
                    e4:40:e2:c7:78:2b:d9:cc:f0:55:0e:cf:88:a8:ac:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:E6:F4:F7:60:E6:EF:30:B6:85:93:B6:4C:4F:2E:D0:0C:D0:E5
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:06:a1:80:ed:8f:c9:a1:75:28:dc:2c:70:4e:10:02:77:ff:
         ed:5d:9f:2d:d7:f0:6e:f5:a1:8d:78:b0:24:b7:ef:3f:54:29:
         1f:20:1c:ff:09:6e:47:fd:d1:b6:f8:7c:bf:58:d5:9b:d5:1d:
         9b:b1:fb:e8:ef:3f:68:b4:19:a9:12:aa:3c:6a:19:c0:88:ee:
         d7:a8:5e:4b:fb:b7:72:78:d9:25:73:e4:26:9d:4c:0b:35:62:
         66:73:cf:e5:ab:62:fa:7f:86:da:74:55:26:f0:c0:9f:0f:1c:
         88:84:28:9f:95:64:ce:de:0c:73:8e:be:f4:f4:82:af:62:3d:
         6a:99:34:d5:3f:f0:d4:6a:44:80:b8:d9:c5:27:68:5e:bc:72:
         6e:30:6c:76:bd:a5:0b:38:e5:31:d2:8c:13:c7:5b:d6:a9:e4:
         6a:e0:ab:76:25:46:11:64:82:66:2b:f9:16:c5:2d:69:0c:21:
         55:2f:36:7e:bd:2f:44:ac:65:a9:28:ea:6d:38:c9:4b:87:85:
         40:84:9b:90:c7:57:ba:3e:3e:5c:65:ef:49:76:13:3b:f3:ec:
         c8:15:b9:1b:dc:f6:28:fc:e5:17:f8:1d:eb:96:a6:fd:4a:97:
         58:78:21:65:95:55:80:ec:cd:43:75:1c:e7:8e:58:4d:a7:cb:
         1d:90:f2:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz
QUE5MTEyRTYwHhcNMjUxMTA0MjExMjM1WhcNMjUxMTExMjExMjM1WjAYMRYwFAYD
VQQDEw02OTBhNmM0My1lMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaNMKWZePmIpYcKEccqhutUvNQxABPZb+8GVCu5xeo6cOwyaN1bnIqdtVt6E
a4jyclpKxTklqGMGZp2girqUKj5AY1Z+7IWr9BesiUqBy3962FUnEggs9+g+Pc01
n0RPWsirCyFmA+Woi9fUEjm+CM7cJ3Bu3NpQnstGpwb/uuhTnoS3vhr0UM+NA7N/
kzMc0VkLAzkJLncGzblCRqvRZtlOQt9uoHS2pipZNmVBSvmzIhny7W4kuOvUclV5
DkTZ/Nod2zHsuOzvoI+ySdRhhb4h9OPsjQxl21CcETxLUVs6T3o0r61fcKj17EYn
HTXkQOLHeCvZzPBVDs+IqKz3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByi5vT3
YObvMLaFk7ZMTy7QDNDlMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5
RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk
Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpBqGA7Y/JoXUo3CxwThACd//tXZ8t1/Bu9aGNeLAkt+8/VCkfIBz/
CW5H/dG2+Hy/WNWb1R2bsfvo7z9otBmpEqo8ahnAiO7XqF5L+7dyeNklc+QmnUwL
NWJmc8/lq2L6f4badFUm8MCfDxyIhCiflWTO3gxzjr709IKvYj1qmTTVP/DUakSA
uNnFJ2hevHJuMGx2vaULOOUx0owTx1vWqeRq4Kt2JUYRZIJmK/kWxS1pDCFVLzZ+
vS9ErGWpKOptOMlLh4VAhJuQx1e6Pj5cZe9JdhM78+zIFbkb3PYo/OUX+B3rlqb9
SpdYeCFllVWA7M1DdRznjlhNp8sdkPLc
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:20 2025 by rpki-client