Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
File:                     YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json)
Hash identifier:          EWjhaj/o73ym2qxwJQrdptsQcKfKHmKaeq38FaawPSc=
Subject key identifier:   29:09:39:29:C7:B5:CD:17:CE:8C:7C:5D:3C:43:51:B7:B5:F6:90:C4
Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
Certificate issuer:       /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
Manifest number:          7C
Signing time:             Mon 03 Nov 2025 06:51:16 +0000
Manifest this update:     Mon 03 Nov 2025 06:51:15 +0000
Manifest next update:     Mon 10 Nov 2025 06:51:15 +0000
Files and hashes:         1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: wvOlrNrQIZ7781DMyxKpg4ACNbjmJE1GfxkNgnVSyE8=)
                          2: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: eZIpW/uAc6VvUgj1mUM1+YMtbcurUKE2lt2tc7badCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
                          rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
        Validity
            Not Before: Nov  3 06:51:15 2025 GMT
            Not After : Nov 10 06:51:15 2025 GMT
        Subject: CN=690850e3-254a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:a2:ab:8f:23:8d:c3:99:ae:d6:8d:a7:93:
                    94:29:27:56:3d:74:63:aa:f9:c7:89:e4:ba:d7:39:
                    3c:0e:7c:c4:0b:bb:05:8c:e4:0b:fd:57:e3:cc:df:
                    7d:69:27:f4:3a:fa:42:90:3e:cf:a4:2c:88:83:cc:
                    8c:2a:f0:c4:b9:41:03:07:23:43:01:a6:44:62:3a:
                    01:44:4f:04:d3:e0:25:d9:52:24:57:68:ac:33:b3:
                    09:b5:31:1b:9f:9a:6a:a8:29:6a:63:8b:e7:b4:e8:
                    d9:83:e0:59:e5:88:e9:8f:5e:47:51:0e:5d:92:1f:
                    2b:e2:95:9a:f4:47:ea:27:68:27:fd:d2:7a:2f:7e:
                    02:0e:68:4e:48:c2:c3:2e:78:4f:66:4c:07:5a:14:
                    53:d1:e1:c2:24:b7:b9:72:8e:92:b9:0b:e0:42:ac:
                    ba:73:35:7a:6a:58:14:03:63:21:9e:77:dd:1a:aa:
                    17:7e:1b:f6:1b:2e:8b:ba:4c:a9:cf:7d:3c:c2:80:
                    7e:7a:ac:36:d6:9b:85:52:ac:10:98:e1:eb:af:6c:
                    04:b2:4b:e5:7e:e0:bf:6b:60:e0:0c:7f:f3:17:6f:
                    c9:90:f0:72:84:1f:5b:1a:3d:60:b3:46:5d:dc:07:
                    61:d5:2f:6e:2b:89:c8:85:38:42:d0:14:94:95:cd:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:39:29:C7:B5:CD:17:CE:8C:7C:5D:3C:43:51:B7:B5:F6:90:C4
            X509v3 Authority Key Identifier:
                keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:a8:a6:05:70:23:50:7b:27:a3:0b:82:5f:08:0d:65:fc:
         28:e9:27:a7:32:3b:b4:7b:88:f6:a0:b8:52:11:f5:93:25:0b:
         5e:89:f0:32:62:02:54:0b:6e:1f:1b:b5:09:64:84:30:4d:d1:
         70:cf:2c:99:f7:3a:a3:46:7f:05:5b:b6:a2:b3:b2:9e:c8:d6:
         a8:5f:38:5a:23:7a:0b:b7:29:47:27:9f:fc:b3:bf:d5:db:6c:
         cb:2c:d5:e1:f9:f0:03:44:eb:55:e1:57:18:69:91:1e:ad:59:
         db:59:e4:d0:e7:ec:6e:0b:e2:c2:9e:0b:fc:b3:21:8d:07:4a:
         13:de:1c:9e:50:ec:c8:a6:2e:a5:8f:e3:89:d4:e4:7c:28:e6:
         69:94:0f:a4:86:26:d2:54:5d:a4:9c:db:a2:84:e6:89:43:9c:
         88:50:0f:b5:9b:12:ff:73:31:1e:d4:83:b6:ce:c1:5c:cb:59:
         d4:3b:f5:d2:a1:de:b0:37:67:15:23:e5:67:ee:c9:4e:bd:6f:
         63:40:d3:d5:bf:07:59:bf:42:b5:51:09:3a:de:14:f6:d8:82:
         9c:90:16:2d:8d:e9:0c:15:e0:63:df:4c:75:7a:2a:23:4a:6b:
         e8:05:58:c7:7a:c5:ca:d7:31:fd:20:d5:69:9b:cb:e3:7d:80:
         2b:a9:d1:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ExOUYxMTAvBgNVBAUTKDYyQzcxRjZBRTkxNjI5Rjg1NENBOTQ2NDE3NjFCNjUy
MkNENDgwQzMwHhcNMjUxMTAzMDY1MTE1WhcNMjUxMTEwMDY1MTE1WjAYMRYwFAYD
VQQDEw02OTA4NTBlMy0yNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FCiq48jjcOZrtaNp5OUKSdWPXRjqvnHieS61zk8DnzEC7sFjOQL/VfjzN99
aSf0OvpCkD7PpCyIg8yMKvDEuUEDByNDAaZEYjoBRE8E0+Al2VIkV2isM7MJtTEb
n5pqqClqY4vntOjZg+BZ5Yjpj15HUQ5dkh8r4pWa9EfqJ2gn/dJ6L34CDmhOSMLD
LnhPZkwHWhRT0eHCJLe5co6SuQvgQqy6czV6algUA2MhnnfdGqoXfhv2Gy6Lukyp
z308woB+eqw21puFUqwQmOHrr2wEskvlfuC/a2DgDH/zF2/JkPByhB9bGj1gs0Zd
3Adh1S9uK4nIhThC0BSUlc2fJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkJOSnH
tc0Xzox8XTxDUbe19pDEMB8GA1UdIwQYMBaAFGLHH2rpFin4VMqUZBdhtlIs1IDD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE5Ri9COUVBMDRDNjA1
OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi9Zc2NmYXVrV0tmaFV5cFJrRjJHMlVpelVn
TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdNTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTE5Ri9COUVBMDRDNjA1OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi9Zc2NmYXVrV0tm
aFV5cFJrRjJHMlVpelVnTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUuKimBXAjUHsnowuCXwgNZfwo6SenMju0e4j2oLhSEfWTJQteifAy
YgJUC24fG7UJZIQwTdFwzyyZ9zqjRn8FW7ais7KeyNaoXzhaI3oLtylHJ5/8s7/V
22zLLNXh+fADROtV4VcYaZEerVnbWeTQ5+xuC+LCngv8syGNB0oT3hyeUOzIpi6l
j+OJ1OR8KOZplA+khibSVF2knNuihOaJQ5yIUA+1mxL/czEe1IO2zsFcy1nUO/XS
od6wN2cVI+Vn7slOvW9jQNPVvwdZv0K1UQk63hT22IKckBYtjekMFeBj30x1eioj
SmvoBVjHesXK1zH9INVpm8vjfYArqdEF
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:53 2025 by rpki-client