Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File:                     YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier:          iH8ZnlSXYh1WWXh7vp0XHfnUOZviiWk0cezw1pdca48=
Subject key identifier:   1A:F8:8B:C8:C4:54:58:77:FF:65:34:BB:77:69:39:C8:5E:AA:AD:7D
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer:       /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number:          B0
Signing time:             Sat 19 Jul 2025 06:15:50 +0000
Manifest this update:     Sat 19 Jul 2025 06:15:50 +0000
Manifest next update:     Sat 26 Jul 2025 06:15:50 +0000
Files and hashes:         1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: qMEg/EWfMU6U385eOoJ5jsxHEKtAtqa63x5PosN063c=)
                          2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: tP/YOIdnoY7zTO5p4ZVWJihHDwAVW3mBLrg6H6OaTlM=)
                          3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: AbR4JwNeIxvK28YKeU+rC69Mel7G0dy68L3LDpPyx/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
                          rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
        Validity
            Not Before: Jul 19 06:15:50 2025 GMT
            Not After : Jul 26 06:15:50 2025 GMT
        Subject: CN=687b3816-7c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e6:74:49:14:2f:3f:1c:ff:45:88:71:5e:5f:
                    c4:93:24:e4:32:4d:17:1f:bb:e0:d7:22:ff:11:d7:
                    72:71:0e:aa:cb:8d:f4:c4:69:69:ee:36:98:23:f5:
                    ea:d5:0e:e0:57:8b:ae:d7:30:c9:b7:b0:0b:f3:ce:
                    92:f6:a2:c1:6c:49:4f:54:10:a8:37:0f:ee:f8:ea:
                    f1:aa:27:2b:7a:1d:dd:25:04:c3:0c:cb:db:72:4c:
                    3e:db:6c:82:1f:61:0b:42:79:91:06:a6:db:a3:68:
                    fd:05:ba:60:b4:1f:8c:ff:4f:96:72:13:7d:98:f0:
                    c4:8d:15:d8:fb:cb:c9:f3:80:f0:1e:7b:c6:a6:b1:
                    14:9f:ed:28:74:e9:d1:73:7f:cf:8a:63:bc:8f:4b:
                    de:ba:c0:89:be:d5:a4:c1:f1:d5:3a:1a:77:d4:2e:
                    9d:3d:7c:f5:39:e4:c5:7a:d8:4f:b9:3a:3e:63:a4:
                    8c:2f:3c:e8:24:09:09:36:1b:ae:4e:84:ee:95:f9:
                    1f:13:b4:29:e5:c1:38:de:fe:6f:92:3b:ca:e0:96:
                    47:97:df:ba:89:86:07:98:6e:10:6d:2d:da:38:cb:
                    6e:68:71:02:73:01:3e:49:54:f0:1d:8e:4a:59:2e:
                    44:2a:47:11:5a:52:36:d4:50:45:b4:63:cb:db:53:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:8B:C8:C4:54:58:77:FF:65:34:BB:77:69:39:C8:5E:AA:AD:7D
            X509v3 Authority Key Identifier:
                keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:92:5c:70:f2:a3:84:36:42:31:e8:c7:b9:35:f3:ac:1a:
         c4:cc:43:88:2f:bb:ca:ef:9e:9a:6b:bb:d7:68:3f:36:7d:92:
         34:93:0c:eb:29:8e:20:1d:d3:0a:12:22:d2:d8:82:07:59:26:
         d7:65:02:c2:c6:f3:36:78:a1:30:5c:e7:ee:00:08:19:4f:64:
         76:87:51:cf:b2:70:f6:a7:33:70:12:32:52:b1:92:0e:3c:25:
         ac:f4:bb:dc:39:2b:2f:5d:56:1c:ae:40:e4:46:d3:dc:eb:ce:
         50:36:e6:b6:50:16:45:f8:06:70:ef:f8:6f:05:46:dd:ec:e7:
         c9:59:28:91:ac:e6:81:02:44:a0:c5:fd:18:55:c6:f1:11:58:
         36:c6:3c:3b:98:10:28:33:93:08:2a:57:76:5e:74:3d:90:98:
         95:2f:fb:0f:f8:fa:68:dc:31:2b:a7:06:30:d8:55:4f:c0:f4:
         44:f5:1c:14:5a:7d:a5:4e:7d:dd:5e:42:a0:12:ff:01:1b:37:
         22:47:46:cc:da:35:e8:a2:59:80:42:5c:aa:a9:8d:4d:f3:76:
         69:23:80:2a:0f:69:40:a4:62:7d:ef:4a:0a:62:b0:97:3c:e8:
         06:b9:3c:cb:22:61:51:cd:db:fa:1a:87:f5:2a:ab:d3:d4:da:
         91:8c:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 04:28:07 2025 by rpki-client