Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
File:                     YvelRApaUxvswWNB8-4xM5YTfo0.mft (raw, json)
Hash identifier:          EUDSIXSBo2Er1U+gMQbYTE0OXbn1BJvWzb4WZqoZWFg=
Subject key identifier:   95:32:E5:B0:B2:31:D3:E4:7F:D1:C1:BC:33:E0:5D:16:11:6B:26:2D
Authority key identifier: 62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
Certificate issuer:       /CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
Manifest number:          7D
Signing time:             Sat 19 Jul 2025 06:58:54 +0000
Manifest this update:     Sat 19 Jul 2025 06:58:53 +0000
Manifest next update:     Sat 26 Jul 2025 06:58:53 +0000
Files and hashes:         1: YvelRApaUxvswWNB8-4xM5YTfo0.crl (hash: Rj84tD0cBUgyIyGdLqYkUoYVhh53st02Ty6Nz15AwSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl
                          rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127514, serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
        Validity
            Not Before: Jul 19 06:58:53 2025 GMT
            Not After : Jul 26 06:58:53 2025 GMT
        Subject: CN=687b422e-73a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:ff:10:f8:7f:ac:fb:a6:c8:2f:cf:ab:0a:
                    1d:2b:ab:76:c4:d4:b7:60:ad:5e:ca:ee:95:5b:3e:
                    dc:c8:8e:96:32:d2:7e:5c:c1:da:4e:0e:a1:83:da:
                    19:e4:fe:18:1e:8b:29:dd:da:e2:f7:a5:d5:ea:f0:
                    40:ff:54:26:7c:d5:a1:f8:72:e3:aa:a2:e0:6c:6e:
                    cb:44:59:f1:ff:2c:6a:39:9f:6d:42:a7:a7:2a:77:
                    0c:17:34:0a:f3:b8:7f:fb:0b:48:61:6f:3c:69:61:
                    87:ae:68:30:61:ae:f3:fb:34:3a:1c:a6:72:35:39:
                    02:a4:ac:b2:8c:49:0d:a4:79:3e:2a:fd:c4:fa:8e:
                    24:52:a5:9b:05:ef:3b:20:47:e4:f0:7a:e4:65:e8:
                    c9:9b:72:a1:23:fb:b6:cb:64:d2:9e:b8:36:e9:81:
                    5a:be:25:4d:af:fe:6c:63:26:ef:c2:c7:38:d5:cb:
                    cb:fb:cf:cc:50:8c:bb:49:f8:df:df:76:3c:08:dc:
                    51:9d:83:73:46:79:c5:71:f6:15:da:ab:04:22:c4:
                    14:73:e9:91:2d:e2:9f:aa:93:ec:31:8a:d7:73:06:
                    87:c4:d4:36:9b:ce:5d:42:29:aa:1e:de:8f:b4:fc:
                    1d:37:67:c8:4b:be:80:f6:ec:51:f4:f1:de:50:da:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:E5:B0:B2:31:D3:E4:7F:D1:C1:BC:33:E0:5D:16:11:6B:26:2D
            X509v3 Authority Key Identifier:
                keyid:62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:75:bd:52:5a:f6:08:15:ec:f8:d4:0c:ce:ca:e8:1f:16:49:
         82:bf:08:7e:f8:5d:23:e5:cb:2a:2c:ec:9a:88:d0:69:ac:82:
         9a:63:bb:ca:20:9b:7b:55:c0:37:15:7b:ce:3e:10:1b:e2:6c:
         44:2e:42:c6:af:42:31:4b:91:d3:8f:81:e2:3b:fc:78:00:9b:
         5e:f4:22:5a:c6:7e:90:2b:dd:f3:de:8b:36:f3:d1:7b:07:07:
         83:26:e5:4e:93:3d:da:1a:85:11:9a:de:f3:6c:5c:f2:ee:9e:
         c5:f5:9a:2d:8c:e4:3e:fc:f1:3c:83:79:de:24:b5:9d:0e:03:
         29:0e:4e:ee:a6:4b:8e:e4:e7:9d:c3:45:51:a1:26:a8:84:91:
         86:c9:87:10:40:92:c0:06:c8:cc:1a:b7:7a:09:ce:51:f6:d6:
         4d:a9:bb:09:9f:35:61:bd:d6:aa:3a:0b:f3:6d:26:5b:35:31:
         14:f5:19:84:13:18:9e:2c:64:67:17:de:4e:76:10:2a:3e:fb:
         2f:f2:69:e9:ec:4e:c3:f2:21:03:bb:f6:ea:4a:dc:cb:56:ea:
         95:53:78:18:f3:e2:67:cf:b2:8d:bc:58:4e:26:1e:f0:79:f1:
         0d:bc:e1:25:54:e2:54:5e:ef:62:ce:8a:b9:18:34:be:c4:60:
         cd:85:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:33:14 2025 by rpki-client