Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File:                     Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier:          MtQ5e7hs8EgrwjCNg60NLrIA7c0xR9O/xeCqu1xG1Ek=
Subject key identifier:   F3:66:83:04:33:8E:5B:25:F4:DD:A8:4B:E2:ED:12:E6:1F:2F:98:98
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number:          01BE
Signing time:             Sat 19 Jul 2025 03:11:23 +0000
Manifest this update:     Sat 19 Jul 2025 03:11:23 +0000
Manifest next update:     Sat 26 Jul 2025 03:11:23 +0000
Files and hashes:         1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: 6iAuw66i4Q4+8Bbhau1B65MHy/aiQnMz+eFKa+flGN0=)
                          2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=)
                          3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Jul 19 03:11:23 2025 GMT
            Not After : Jul 26 03:11:23 2025 GMT
        Subject: CN=687b0cdb-53aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:bc:2a:65:e0:1f:84:0c:9d:6e:aa:57:fb:
                    b9:42:2f:e5:be:f7:bc:76:8e:d6:55:8d:e2:1f:d9:
                    64:3b:2d:bc:fb:f1:af:e9:7a:ec:6b:dc:4b:1d:e1:
                    be:bf:a3:0e:a5:6a:b2:8d:f8:2e:cd:ae:c2:46:89:
                    18:89:69:e6:71:1d:63:31:a0:07:5b:2a:1d:fd:3a:
                    ae:1c:99:fb:e5:3a:26:23:55:f5:a1:2f:31:c6:de:
                    ad:a1:1b:28:2b:f0:47:99:4a:b8:c6:0f:37:8e:f6:
                    3b:6e:79:52:41:f0:79:1c:49:72:c0:c4:77:82:72:
                    b4:e6:05:62:44:15:f2:f3:79:1c:a0:b3:4c:59:60:
                    d5:d8:ce:7b:3b:4f:f0:45:c6:16:00:8e:1a:1b:fa:
                    5a:7e:93:b5:9f:e9:b6:20:37:3d:1d:b5:2a:01:65:
                    45:80:f3:8b:51:4a:8e:75:48:6a:3c:73:6f:b3:ac:
                    a9:4c:36:5c:6e:a8:df:a1:5e:70:4b:ac:32:3b:3f:
                    0c:91:2c:72:98:af:c3:1e:e8:db:4a:00:d1:49:08:
                    a6:ab:19:33:d6:a3:d5:a4:dc:f3:c9:b8:53:61:d6:
                    d3:58:3a:33:f1:d1:a4:4c:4a:e0:0e:c8:f0:20:b2:
                    7e:25:37:26:84:8d:1e:c3:d5:ab:a1:35:a3:c9:c3:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:66:83:04:33:8E:5B:25:F4:DD:A8:4B:E2:ED:12:E6:1F:2F:98:98
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:50:b0:14:8f:d8:51:6a:3d:81:6e:a4:1b:0f:13:2f:94:3e:
         ce:3b:ac:75:47:bf:f9:39:76:b4:c2:5f:20:4e:42:81:b4:f4:
         b6:d8:03:bf:62:54:71:d5:92:10:e0:d4:70:ea:87:58:be:c0:
         db:63:78:24:1a:cd:2e:74:00:56:24:78:66:28:69:f3:c8:c3:
         29:70:cf:ca:22:60:2d:b0:ce:b1:14:f7:2a:e2:76:e6:43:51:
         ce:67:c7:87:c9:01:a7:20:73:6f:df:e4:65:1e:20:6d:44:e9:
         88:ff:da:8a:6c:a9:57:87:92:59:8a:47:c1:0e:3e:a8:9c:54:
         3c:3d:d5:96:4d:95:83:99:13:31:c6:c6:4a:c9:6c:68:e4:f7:
         9a:74:4a:1b:ea:d8:16:61:26:8d:dc:6c:ef:fe:68:70:08:91:
         a6:12:88:f4:d3:11:c5:85:a2:7d:f4:e8:e9:b7:1c:20:3d:0e:
         93:9c:04:05:d4:67:d3:30:1c:6e:aa:bb:92:eb:e8:48:8f:65:
         33:86:09:80:16:ba:b2:b8:ca:8d:6c:38:06:c7:54:e7:59:4b:
         80:12:4e:98:24:8f:9e:e5:f4:0b:65:f2:15:ce:19:72:ed:58:
         b3:16:2d:61:aa:e0:fa:fa:04:00:78:8d:07:fd:b9:8e:eb:89:
         c7:83:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:29:17 2025 by rpki-client