Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File:                     YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier:          fUN3tKoVKFxLjOxg6QRlLgbBbfl0Rkz1+iqaM+FF3Ew=
Subject key identifier:   24:61:5F:80:68:C3:2B:A5:BA:97:3E:EA:89:C1:29:9B:A3:E6:4E:41
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number:          04C6
Signing time:             Wed 23 Jul 2025 00:16:16 +0000
Manifest this update:     Wed 23 Jul 2025 00:16:15 +0000
Manifest next update:     Wed 30 Jul 2025 00:16:15 +0000
Files and hashes:         1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: 3Ogb3JdwznNQDnhIZT2SPV5nb+MjaTLhMrfCGb2lhnc=)
                          2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=)
                          3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Jul 23 00:16:15 2025 GMT
            Not After : Jul 30 00:16:15 2025 GMT
        Subject: CN=688029d0-8a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:21:d1:81:b2:17:73:75:0a:36:a4:7a:46:
                    cf:55:08:1e:b5:5c:17:78:37:41:78:4d:03:52:18:
                    15:62:59:61:fc:c8:39:71:40:d7:27:58:06:8f:98:
                    c9:e3:cb:e8:0f:26:0f:5c:2c:99:e3:0e:88:b1:0a:
                    91:2a:a7:d4:2b:f9:0e:03:c7:62:cd:89:9d:1f:92:
                    4d:d5:77:df:f6:88:25:c9:f8:69:ae:cc:d8:5b:7f:
                    d4:76:84:9c:4d:da:d4:e0:f9:02:7b:5d:44:20:65:
                    51:22:0b:8a:c3:ae:56:5b:77:bd:76:69:1f:e5:be:
                    f0:2f:fc:8f:a3:36:75:b3:92:01:d9:3f:b7:a8:a4:
                    d1:56:c6:7e:36:f2:8d:eb:b6:39:6e:26:59:e8:af:
                    d3:45:a0:39:24:e6:6f:a4:5a:e2:f1:e2:2f:85:5a:
                    4f:6c:ac:e3:a1:6a:1a:2b:18:dc:95:d3:f1:2e:03:
                    0a:59:bb:ac:ac:68:56:41:d6:a7:43:1e:06:16:18:
                    75:c8:ae:69:87:e6:db:73:f5:f2:96:80:d8:d7:dd:
                    c7:fc:1e:05:32:0e:6e:26:6b:f4:21:1e:22:59:3f:
                    8c:cc:35:48:94:db:ea:f6:64:e9:6d:06:7b:15:c8:
                    bd:86:27:2b:cc:81:c9:13:45:78:88:02:f6:24:f8:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:61:5F:80:68:C3:2B:A5:BA:97:3E:EA:89:C1:29:9B:A3:E6:4E:41
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:05:bd:14:40:c6:dd:ea:d3:6e:a8:5d:2b:a3:05:8d:5f:92:
         f8:32:55:83:32:4b:a1:36:30:61:fd:3f:d7:c0:49:1b:9a:51:
         3a:df:c6:44:63:15:20:02:c2:22:f2:a2:d8:08:a2:36:3b:12:
         2b:a9:3a:33:96:f0:c4:3c:4b:56:e4:ad:30:a5:5e:07:58:79:
         3c:f1:bc:fb:df:b6:6b:c4:f8:38:3f:a1:07:a0:e0:77:0c:df:
         46:e4:6e:77:31:47:55:09:b9:d6:c0:04:94:6c:4d:0b:56:56:
         37:f5:f3:47:b4:3b:0d:16:78:52:fb:52:51:74:60:39:50:47:
         e9:9b:e2:f5:50:60:4c:23:b8:80:eb:bd:30:a5:68:69:46:b0:
         0a:3a:64:d5:da:8a:c7:cf:c1:ea:a4:df:82:40:1e:c7:23:60:
         cb:35:f0:0d:c0:6e:21:a3:9a:eb:5d:61:df:82:2d:1f:d6:a0:
         bd:32:6b:95:4a:0a:db:ff:b0:4a:35:4f:4d:2e:e8:a9:f5:35:
         e1:5b:05:46:57:57:f4:d3:be:50:73:b9:83:e2:a1:12:52:60:
         24:ce:67:44:04:b8:57:0b:99:55:77:d4:d8:f9:45:d2:99:a2:
         1c:06:ca:f3:17:00:74:79:9e:98:1b:94:94:4a:9a:7e:78:e4:
         d4:d3:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:46:28 2025 by rpki-client