Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
File:                     yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json)
Hash identifier:          zmxOYzYJK36Fex9WhaVXCnQQ30Sm949RIZMoDk0C3Us=
Subject key identifier:   44:BE:F9:CB:C2:E5:25:2A:F1:17:B2:66:41:66:42:11:4D:EA:0E:82
Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A
Certificate issuer:       /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
Manifest number:          06B9
Signing time:             Sun 02 Nov 2025 22:10:35 +0000
Manifest this update:     Sun 02 Nov 2025 22:10:35 +0000
Manifest next update:     Sun 09 Nov 2025 22:10:35 +0000
Files and hashes:         1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: 6BXnFKucrNH/BJKKZ/cOenhxC2Qac28gw8QMc8eKi8s=)
                          2: 89283C80809211EB938F4016C4F9AE02.roa (hash: XR/AocxlHs3JH5B6YCwM4YFgAXn6/2T8ovPAbIrIeuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl
                          rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
        Validity
            Not Before: Nov  2 22:10:35 2025 GMT
            Not After : Nov  9 22:10:35 2025 GMT
        Subject: CN=6907d6db-f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:cc:8b:e3:8d:cf:b8:88:c2:ef:d9:eb:58:
                    c1:de:e8:09:8f:f3:20:30:8b:66:44:ac:33:e5:94:
                    7a:9a:78:56:20:b9:12:df:47:41:78:37:99:89:25:
                    02:a9:26:15:c6:94:05:2c:6b:35:e7:fe:d8:e4:1a:
                    9c:41:c0:9c:a3:30:1f:bb:9b:7f:25:27:e9:c9:ec:
                    a5:33:c6:34:37:9f:31:4c:1c:86:ce:29:0a:d3:b5:
                    36:b1:9d:a1:1b:68:79:94:e4:32:07:09:ef:aa:f3:
                    46:7a:5e:dc:35:21:9e:d8:47:60:1f:4c:f5:1d:71:
                    5e:bf:12:05:02:db:de:1d:85:c4:bc:3c:17:57:a2:
                    1d:cd:e2:a1:30:f5:d0:19:6b:70:b2:dd:ae:51:bd:
                    82:3d:f0:9a:d9:11:86:66:0f:a0:06:4c:27:1e:20:
                    48:91:1f:7a:e9:b8:2d:27:55:ca:d8:28:8c:e3:fc:
                    38:b6:ae:5c:33:62:03:db:32:23:c6:06:9c:d5:eb:
                    3f:18:87:db:13:e8:3f:1f:ba:6e:a5:4e:99:b7:9c:
                    11:9f:df:6a:f3:27:3c:95:72:15:bb:8a:cd:22:37:
                    fc:8b:30:92:fb:c8:cf:c3:65:f8:4c:2c:27:90:39:
                    42:56:3b:f7:81:31:e5:35:fc:d4:63:19:b2:89:07:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BE:F9:CB:C2:E5:25:2A:F1:17:B2:66:41:66:42:11:4D:EA:0E:82
            X509v3 Authority Key Identifier:
                keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:5a:15:0a:7f:e7:e2:8e:71:46:56:59:e1:94:7b:52:17:
         cd:e9:16:61:9e:d9:0a:c4:8d:39:6b:16:b4:32:33:a5:b6:d1:
         8d:18:8f:02:15:f4:dc:43:de:17:9a:9e:74:16:28:2e:8a:83:
         95:90:24:bf:50:35:e3:db:18:d9:71:51:12:c6:e0:f1:85:87:
         d1:85:39:b8:1a:cf:64:63:90:dd:f7:2b:9b:d4:fa:43:51:86:
         80:89:61:8e:99:b6:0a:e8:93:5f:d2:e2:6d:92:0c:e1:6f:38:
         2c:4c:2c:28:63:3f:8d:48:d0:2f:5a:36:a2:e2:6a:81:da:3d:
         5c:22:f7:8b:ea:ea:f2:e8:45:fa:77:3e:d9:15:4a:f3:da:df:
         9b:17:e3:c4:30:e7:f9:91:3c:da:d9:7d:4b:60:d7:42:7e:29:
         b5:ff:f9:b2:ee:1c:9e:86:73:cc:a7:a8:9d:05:4d:ff:18:22:
         9a:e5:1a:1c:ae:c7:3c:2a:89:9c:ef:22:ff:4d:a9:36:72:fc:
         a3:60:8f:5d:71:17:36:40:4b:28:24:cf:03:74:04:73:77:8b:
         6c:da:34:93:f8:b0:eb:8a:3a:f3:8c:ef:24:71:7c:14:f5:a4:
         28:36:ca:62:52:95:be:4f:f0:a3:bf:d4:8f:74:52:5a:a0:11:
         af:3d:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:03:38 2025 by rpki-client