Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          NK4FO3Bq96dfrgEZXkT7Ge2dRii9CfhyKT/T3IXbOyw=
Subject key identifier:   72:6F:C1:C9:61:BD:0C:BB:F2:E7:39:A7:21:19:00:67:64:85:E4:D0
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          1975
Signing time:             Tue 04 Nov 2025 16:32:17 +0000
Manifest this update:     Tue 04 Nov 2025 16:32:16 +0000
Manifest next update:     Tue 11 Nov 2025 16:32:16 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: tBQh8IM50CjuEj65bukNcfyH4rGE7SVXXlzK2ub5bLE=)
                          2: 897785E099AA11EE9E218060C4F9AE02.roa (hash: Hbvrl5qt3755vAHPJTM1ht4CNvz+/1G82ZsixjxL3vU=)
                          3: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: nBufo1kIX8wiHW05HK56kjkzuY8kLzWX8hul7hd+tSI=)
                          4: 64F859DA812611EDA597255EC4F9AE02.roa (hash: rBeoIA3irlO1Deytx/F8atxZ8cpZ0/tW3IVa0ZmI0Ng=)
                          5: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: k+AAWBwdOcaG1er130l80X1HT3IwfL4MKpto67md1U4=)
                          6: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Ujge7k/lW8pB/Dx6DwlTSva6Rx5jbEwksa1MWF/rwvA=)
                          7: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: 8BZnHd6aGsdJmphgS32PS3wAYQMMb45rh9EbaJkomOw=)
                          8: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: m235rMsu+BzhfmXOYnBQggbCKWWyvZ/zw0hFkBbbwgI=)
                          9: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: AMtq6/+OGfNb8zZYL0wKHdGiK4TvIJSI20dtRQ6bo7c=)
                          10: 12D80792792E11F0B9B60F74C4F9AE02.roa (hash: JU1ZLnQX51v+5AW8aATgyNYwEMRuGDz2e2Gl9piZupo=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: RTrVR5wL9yOQXY6b1OrprvdMWmvSxZvI7qM3sOKAsPc=)
                          12: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: U1zVQ5bqYpLe5FAQ5Vpdv4iV73y5ug6j2NtqdB0U6DA=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: iwLGgkob40yON+N3mwyjlp9Fh6761bLtwjZcibQClEM=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: gkJptkaETgFISWJvcQGnHB0jn74oacHoYRhEpbDvdJY=)
                          16: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: E1uTNeLdjmVHLcuJqLs/moW5iBQyqjH1xn1TM16vxig=)
                          17: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: vD8uFo9ZdrCHkm7kGVREsqduAN/X3LQWjfNNIMx3BBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6659 (0x1a03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Nov  4 16:32:16 2025 GMT
            Not After : Nov 11 16:32:16 2025 GMT
        Subject: CN=690a2a91-b419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:78:39:c6:4d:e7:3f:b6:56:d9:9e:4b:4d:
                    25:8d:80:f5:a3:5e:e0:a9:b6:6b:91:b8:ed:83:8a:
                    49:ff:20:47:10:40:77:4c:26:0b:cb:70:84:97:67:
                    25:ce:a2:90:f3:18:e7:f1:c1:ae:75:78:b2:99:1b:
                    95:34:74:3c:85:25:bb:b1:f3:e5:b7:6d:e8:fb:0b:
                    b8:8b:60:db:e6:4a:6a:88:bd:c0:47:80:ac:98:aa:
                    bc:12:cd:77:da:7c:98:7c:a3:33:c5:1c:14:17:43:
                    bd:8a:10:ef:7a:c9:58:4d:cb:c1:a0:ba:49:8a:72:
                    a5:c0:bf:48:95:bb:ed:ee:dd:65:2d:cf:56:29:36:
                    df:a1:5e:01:db:1a:d7:36:ce:e0:bc:5d:4e:45:17:
                    50:43:19:cd:8f:e7:9c:a3:1c:7c:72:1b:e0:1d:06:
                    fd:a7:f6:2a:ae:ec:46:77:ae:48:1d:10:9b:a9:f0:
                    5a:58:fd:30:c1:77:4f:35:b9:f0:f1:db:bb:a2:46:
                    75:d4:46:0f:84:b6:d3:63:72:9a:b3:3e:d4:03:45:
                    32:69:15:e1:9a:36:f8:b9:d8:43:da:dd:41:d4:4f:
                    95:8d:40:fc:23:fa:b3:c8:80:ae:2d:80:8e:a5:ff:
                    27:12:67:c5:32:7b:9f:72:21:99:9a:38:d2:93:4b:
                    f4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:C1:C9:61:BD:0C:BB:F2:E7:39:A7:21:19:00:67:64:85:E4:D0
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:22:22:f1:02:f4:dc:10:85:18:fa:94:0b:fc:b6:66:c7:05:
         e3:72:c0:08:fe:6d:a0:5a:e7:2b:da:51:63:dd:e3:ce:72:ae:
         bb:4b:53:8e:79:74:68:63:de:02:0f:cd:5c:9a:e3:ca:8b:11:
         98:87:ae:1e:e3:62:12:01:47:d7:53:d7:2f:d7:89:a0:f2:73:
         3c:5b:73:84:a3:0d:95:18:63:d1:0c:ce:8b:31:3b:c6:b4:00:
         63:56:ba:77:04:63:68:63:48:6f:f7:37:88:90:08:a2:39:39:
         c4:96:d5:71:2a:f5:a3:78:74:38:22:ef:ba:cd:57:46:11:3c:
         a2:96:85:bd:cb:12:08:8e:02:67:c6:5c:03:47:14:35:9b:23:
         74:20:b8:26:93:2b:92:04:65:9b:52:50:a3:9e:54:3c:7c:d2:
         0e:af:7c:92:5e:60:0b:a3:79:fa:34:b0:a2:c8:46:5c:68:e9:
         94:fb:5d:50:cd:4b:e8:0e:d7:f1:c3:6e:40:a6:87:29:03:58:
         59:84:d6:60:b8:45:10:27:96:05:fb:49:6e:3c:f2:dc:ec:97:
         3b:29:09:37:17:cf:5a:50:c0:43:e7:1d:f7:5c:b3:1d:ac:4f:
         ee:ef:f1:68:73:03:42:df:d1:38:c5:47:78:ad:09:57:f7:bf:
         41:3f:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:49 2025 by rpki-client