Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          3GaYTNZCFPlZ8b0huZDkOSzpei1juDJoSMEeUoPimR4=
Subject key identifier:   3C:BC:96:7F:47:60:7D:C0:D5:20:12:8C:47:21:9C:C4:68:4F:BA:AD
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       10AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          107F
Signing time:             Fri 18 Jul 2025 17:33:35 +0000
Manifest this update:     Fri 18 Jul 2025 17:33:34 +0000
Manifest next update:     Fri 25 Jul 2025 17:33:34 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: 7DbUtwa+SXDdVs50B2Ov1VXiatBeq11AGit8QI2c1Q4=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4266 (0x10aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Jul 18 17:33:34 2025 GMT
            Not After : Jul 25 17:33:34 2025 GMT
        Subject: CN=687a856f-a51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:33:51:18:d2:c2:7b:b1:ae:a6:6c:b7:56:
                    e1:d7:a7:44:f7:13:60:0a:c9:33:ae:5c:20:8a:ef:
                    9b:97:88:8d:ab:b0:e0:46:45:b1:a0:05:05:e3:e3:
                    7b:2e:6a:68:a6:60:93:4b:fa:f0:a3:fb:d4:ff:15:
                    18:c6:2c:a1:f9:fb:1b:32:6e:7f:a0:82:d2:03:d2:
                    da:3a:26:38:76:2f:e3:73:81:55:35:42:44:c9:84:
                    26:da:1c:7b:5a:8d:1d:c1:fd:78:db:a0:9e:2c:01:
                    d2:7a:a4:39:80:88:2f:5f:a9:77:f0:d7:f5:21:07:
                    34:a2:83:f2:a4:39:f4:c7:04:3b:eb:5b:7a:56:81:
                    4c:35:b6:a1:8d:64:39:57:33:81:a0:ae:c5:ba:c6:
                    08:67:56:b5:9d:92:7f:86:a1:1d:d7:0f:21:0a:d4:
                    50:e3:ba:25:37:6e:8c:a0:d6:ba:cb:a1:d2:e0:c6:
                    2a:48:86:07:ce:4b:0c:24:83:65:ad:dc:ff:cd:0a:
                    23:28:c1:ab:50:12:e1:77:e6:54:6d:06:63:e5:87:
                    a6:63:78:0c:01:06:19:7f:15:11:a5:c2:74:35:33:
                    cd:3d:53:ca:04:ce:93:49:37:ef:5a:e1:0f:c8:63:
                    e9:61:cb:f9:03:99:36:58:e7:aa:71:99:03:0b:30:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:96:7F:47:60:7D:C0:D5:20:12:8C:47:21:9C:C4:68:4F:BA:AD
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:39:01:1e:30:b3:91:68:7e:ab:ea:cc:21:ab:78:b0:99:b1:
         b6:8c:8f:59:31:91:c7:13:81:fa:03:5a:d5:8d:9b:d3:06:c8:
         84:65:3b:a5:ef:59:50:f7:c1:a0:43:bc:c4:9b:92:eb:32:5e:
         ed:e6:d4:f3:72:ae:70:a9:3d:99:dc:1c:d3:3f:c5:7d:4a:63:
         2b:96:93:ef:44:ab:63:e4:66:a9:f2:a2:17:dd:09:8a:a0:6b:
         2e:0f:07:65:85:df:7f:81:89:22:50:c1:53:02:ea:72:33:a8:
         6c:f2:3c:d9:e5:9b:dc:99:1b:ed:64:96:60:da:dc:a9:76:64:
         3b:34:b8:27:54:dc:56:b3:db:41:79:30:00:e2:95:2c:c7:9a:
         16:90:c2:b3:99:45:33:4c:35:49:bd:72:ba:a1:c9:c5:48:1c:
         cd:3e:25:4e:bb:62:c9:7a:50:f4:7b:4b:6d:4a:0d:52:4e:20:
         c6:5b:02:00:d9:39:b5:e3:1c:91:69:c2:48:13:d4:08:7b:cd:
         52:a2:2e:cd:8d:96:d6:2d:76:3f:1c:79:5a:54:fe:5e:77:68:
         25:fe:ca:36:60:78:c5:e7:94:a9:2b:73:5c:16:d7:cd:b2:e5:
         91:6f:41:da:74:58:34:36:8b:11:2c:19:d2:08:c3:76:8f:f5:
         88:15:1f:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5
NDdERkQzQkMwHhcNMjUwNzE4MTczMzM0WhcNMjUwNzI1MTczMzM0WjAYMRYwFAYD
VQQDEw02ODdhODU2Zi1hNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu04zURjSwnuxrqZst1bh16dE9xNgCskzrlwgiu+bl4iNq7DgRkWxoAUF4+N7
LmpopmCTS/rwo/vU/xUYxiyh+fsbMm5/oILSA9LaOiY4di/jc4FVNUJEyYQm2hx7
Wo0dwf1426CeLAHSeqQ5gIgvX6l38Nf1IQc0ooPypDn0xwQ761t6VoFMNbahjWQ5
VzOBoK7FusYIZ1a1nZJ/hqEd1w8hCtRQ47olN26MoNa6y6HS4MYqSIYHzksMJINl
rdz/zQojKMGrUBLhd+ZUbQZj5YemY3gMAQYZfxURpcJ0NTPNPVPKBM6TSTfvWuEP
yGPpYcv5A5k2WOeqcZkDCzBvewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy8ln9H
YH3A1SASjEchnMRoT7qtMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC
MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj
ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkOQEeMLORaH6r6swhq3iwmbG2jI9ZMZHHE4H6A1rVjZvTBsiEZTul
71lQ98GgQ7zEm5LrMl7t5tTzcq5wqT2Z3BzTP8V9SmMrlpPvRKtj5Gap8qIX3QmK
oGsuDwdlhd9/gYkiUMFTAupyM6hs8jzZ5ZvcmRvtZJZg2typdmQ7NLgnVNxWs9tB
eTAA4pUsx5oWkMKzmUUzTDVJvXK6ocnFSBzNPiVOu2LJelD0e0ttSg1STiDGWwIA
2Tm14xyRacJIE9QIe81Soi7NjZbWLXY/HHlaVP5ed2gl/so2YHjF55SpK3NcFtfN
suWRb0HadFg0NosRLBnSCMN2j/WIFR+E
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:17:25 2025 by rpki-client