Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File:                     YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier:          OZ8XOcvEjIxR9TP+oy2WmB3bxaig3ID1LOPOpJuUkdk=
Subject key identifier:   DE:7F:D3:88:2F:4B:92:29:92:BB:A0:B0:30:43:C8:FC:26:88:4E:A5
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number:          B4
Signing time:             Mon 03 Nov 2025 06:25:18 +0000
Manifest this update:     Mon 03 Nov 2025 06:25:17 +0000
Manifest next update:     Mon 10 Nov 2025 06:25:17 +0000
Files and hashes:         1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: zrtS7WwJNOWmDXLOXiRyiLoR8B+nyVHBKabstpAsWgk=)
                          2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: Nov  3 06:25:17 2025 GMT
            Not After : Nov 10 06:25:17 2025 GMT
        Subject: CN=69084acd-cdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:dd:78:fe:b1:5a:e4:f9:0e:be:bb:a5:27:
                    1b:18:7f:d1:92:d4:eb:5a:0f:98:f2:c8:9f:a4:ec:
                    81:cd:98:6b:76:b9:14:42:0f:2a:a6:6a:91:41:03:
                    55:b8:4f:f5:54:97:65:70:cd:bb:f7:db:1e:e4:b3:
                    85:90:19:63:d0:7d:3e:b3:10:e3:07:f0:ed:71:0f:
                    33:97:3a:98:ce:71:cb:87:e0:5f:f0:29:4f:66:3e:
                    c7:f6:3f:aa:25:61:cf:41:77:d3:e7:f7:f6:66:13:
                    93:15:1c:7b:bb:72:e8:93:5e:2a:ac:2a:d2:9d:e4:
                    35:4a:85:36:05:5b:6b:5f:dc:e1:e6:b7:76:ef:ed:
                    29:c7:0e:08:cb:c2:c2:1f:43:34:36:80:35:98:6a:
                    3b:8d:3d:b5:d2:61:bd:b5:a6:c6:bb:dd:fa:56:81:
                    5d:61:a0:45:ff:0c:cf:c8:b0:8b:e7:4d:bf:1f:13:
                    29:d3:cf:8c:64:3d:7c:6f:a3:91:47:47:5c:4e:64:
                    e5:53:01:bd:c6:b7:a5:cf:c7:17:e4:1b:23:5e:35:
                    88:24:60:d3:3c:25:db:12:65:ea:cc:87:bf:6c:69:
                    51:6a:2d:c6:8b:53:77:74:58:85:6b:cb:fe:70:f1:
                    d5:ec:bc:a0:32:dc:27:29:29:15:f6:43:0c:10:33:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:D3:88:2F:4B:92:29:92:BB:A0:B0:30:43:C8:FC:26:88:4E:A5
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:6b:9f:4b:1c:f2:f6:c9:76:fb:6c:e5:cc:e1:12:a0:7e:
         02:f5:41:ed:13:7d:db:c6:fb:68:76:4c:3c:d5:51:06:cc:29:
         f7:73:e4:f5:11:74:cc:7a:64:92:e1:d8:f6:aa:a2:f4:96:eb:
         51:ef:c7:61:3a:c4:eb:3c:2d:3f:0a:18:75:d0:e0:b8:f4:07:
         82:fd:fc:e0:13:27:41:6f:90:bc:20:79:c6:f4:29:3f:16:1d:
         a7:bb:c1:0f:9d:09:f1:b4:3d:d8:08:f1:ae:1c:6f:e7:13:4c:
         02:c6:33:36:3c:4c:30:8d:5c:73:b5:87:aa:74:fe:d0:30:28:
         fc:46:c7:6a:4d:c1:50:66:64:c5:ce:4c:d3:da:4c:79:2a:9d:
         cc:32:45:0a:60:cd:ec:d9:f8:24:b2:85:9b:26:81:2a:0a:f5:
         17:4c:85:b3:08:9a:3d:21:59:d0:f7:d0:dc:57:b4:ae:29:6a:
         5a:2c:0d:bb:d1:d1:ed:da:9a:99:3d:bd:d5:1e:14:fb:ff:28:
         f8:a4:3a:51:68:ae:27:d6:e3:2e:eb:1c:2f:de:3a:5f:ad:28:
         27:f8:67:74:5d:ba:01:f1:32:61:17:58:80:40:94:ad:7e:82:
         7e:f2:55:57:41:d8:0b:db:55:d9:01:12:62:6f:8f:03:ba:ca:
         f4:96:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:18 2025 by rpki-client