Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          c3K/tfHRXP7nmIYKxdcCSrKTctcmtExWc099KM48Da0=
Subject key identifier:   29:90:7A:56:B6:03:06:E2:97:8D:20:3F:78:19:E3:84:14:F3:F3:BC
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          2E
Signing time:             Sat 19 Jul 2025 07:58:06 +0000
Manifest this update:     Sat 19 Jul 2025 07:58:06 +0000
Manifest next update:     Sat 26 Jul 2025 07:58:06 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: esaVopxlTeSHIt0NDo1NL5leUxzvE3FzfnhdmqQ8aU4=)
                          2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: AsQWM+7HuozWTCBGDmXSa7QBPRIjHi4ee9IcaHPhl78=)
                          3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: bD+Fep8IQgDA8vluXrT5vCvPbCgLZmMh8P2tGfHiM1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Jul 19 07:58:06 2025 GMT
            Not After : Jul 26 07:58:06 2025 GMT
        Subject: CN=687b500e-948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:0d:17:d4:82:2f:82:76:b4:7f:a9:e1:d8:
                    04:81:c0:5c:9d:ac:31:3d:a1:b2:47:74:fb:55:cc:
                    3f:e9:e1:7e:31:c2:ac:2e:f5:09:1c:2e:2f:54:6d:
                    e3:49:14:aa:a4:01:25:8d:d2:ad:fa:4a:14:9c:03:
                    cc:68:bc:c0:36:3a:2c:e8:43:84:eb:ab:dc:9a:8a:
                    be:57:ee:63:28:d8:f3:f8:93:ee:06:50:2f:0e:7e:
                    f1:09:de:1b:b1:47:4f:d2:87:02:83:f4:d9:a2:99:
                    67:50:d9:de:bc:ce:74:54:12:7a:1d:7b:d9:a1:cd:
                    ed:39:36:b0:ca:33:91:9c:3b:f7:1c:59:9f:bb:54:
                    b2:e1:5d:9a:6f:88:d9:0b:d6:f6:34:37:6d:24:ee:
                    ec:4d:4b:24:07:8d:ae:f6:eb:dc:ee:29:bc:a2:44:
                    09:1f:29:90:93:87:8e:30:46:d9:d3:17:ea:55:83:
                    4b:b6:da:30:28:d8:3e:90:ad:f3:2d:67:c9:82:98:
                    01:cd:fa:b9:2d:db:95:8f:75:4d:6d:8e:a3:31:78:
                    f8:85:20:e5:08:15:98:b1:12:50:74:9c:7b:f4:a7:
                    9a:8b:d4:dc:7e:25:50:20:a7:8c:e7:78:4f:4e:ea:
                    94:39:e7:68:ce:8b:68:c8:62:fb:74:9b:47:49:80:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:7A:56:B6:03:06:E2:97:8D:20:3F:78:19:E3:84:14:F3:F3:BC
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:84:bc:3f:59:f1:63:ae:f2:7a:b3:7e:1f:41:51:61:0e:91:
         21:88:13:e5:e6:95:d3:4e:60:0f:9f:2e:6e:7a:cf:9b:a2:a2:
         a7:f4:ee:d3:c8:8e:69:ef:64:ab:e9:8c:2e:3d:38:1e:7f:98:
         09:2b:02:fb:30:c2:bb:8f:9c:28:96:1a:37:7b:a4:f3:ca:3f:
         65:a5:dd:3e:36:d3:b0:8a:fb:03:4b:bd:5b:ac:b1:17:e4:96:
         e1:18:74:82:71:38:d1:2f:38:ea:5c:a9:51:c0:af:18:0a:b6:
         90:d7:37:44:10:ed:55:1a:f6:21:d6:aa:4d:fa:c1:d7:a4:f4:
         13:ab:85:1f:c9:b4:a1:c2:c4:5d:cd:6b:b0:06:43:d4:cd:dc:
         68:87:9f:4a:3f:8f:14:08:e3:f7:2a:1b:dc:05:65:d0:37:50:
         f9:81:e3:7b:0c:82:30:cf:4b:6d:27:98:fb:8e:1e:fe:b2:48:
         1b:f3:bd:9c:55:bc:b1:3d:76:cf:87:31:76:58:cb:a4:14:4e:
         96:e3:6f:70:36:d2:84:52:dd:5e:c8:51:ef:29:1d:cb:bb:96:
         c4:16:77:f9:b8:ec:5f:08:4d:d5:55:99:db:4e:1c:70:2f:d1:
         54:ba:98:57:7d:e6:70:19:20:48:dd:cd:92:4d:1a:90:e5:38:
         13:84:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:43:24 2025 by rpki-client