Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File:                     y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier:          pTx13IB4NwulzN3My73+YgoXWN4CSMrnlxnvAhq2vMI=
Subject key identifier:   ED:A4:6F:23:10:D8:DC:C4:B6:E4:9C:84:E7:79:00:88:73:FC:33:83
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer:       /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial:       083C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number:          082F
Signing time:             Tue 22 Jul 2025 21:01:31 +0000
Manifest this update:     Tue 22 Jul 2025 21:01:30 +0000
Manifest next update:     Tue 29 Jul 2025 21:01:30 +0000
Files and hashes:         1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: U7pzmtkaTLe/ME0tftsq0VJwFTA4uO6za+9T3CsxE/I=)
                          2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
                          rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
        Validity
            Not Before: Jul 22 21:01:30 2025 GMT
            Not After : Jul 29 21:01:30 2025 GMT
        Subject: CN=687ffc2b-ce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:fe:5a:16:96:97:c2:17:1c:9b:ed:ec:9d:
                    cb:fd:fa:a1:4a:ec:4d:b4:e3:9e:f2:97:7d:d0:32:
                    d0:06:6a:77:3e:0d:7d:ac:77:31:4a:ef:90:1a:67:
                    73:e7:ce:77:4e:37:ff:6d:37:e4:c7:6b:3c:98:fe:
                    5e:db:29:37:57:81:8e:89:48:a9:4b:ec:9d:53:44:
                    c2:fd:41:8f:f5:5d:7a:a9:1f:0c:79:5e:86:e4:0c:
                    83:b9:71:45:72:2c:85:e3:38:fc:05:b8:d4:a3:f6:
                    91:95:75:ba:d9:ba:7c:6c:29:a9:ef:46:9b:9c:93:
                    56:4f:8d:3d:10:6b:b6:62:59:e1:11:ab:81:05:fa:
                    b3:5a:24:85:2f:cd:8b:b0:d6:59:5e:4b:8e:96:d6:
                    e5:7c:4b:77:98:8d:e6:67:84:8f:fe:c3:f4:8f:61:
                    88:24:10:6d:1e:e3:f3:ff:1f:37:25:28:1e:88:61:
                    2f:b4:aa:b4:8b:77:50:e2:81:2d:82:ac:b4:43:22:
                    01:fc:88:a5:7a:d6:ea:c7:6d:93:30:f4:87:94:ea:
                    ad:35:d2:61:a0:23:2f:bf:c3:e4:0f:9f:db:ef:a7:
                    09:ca:9d:55:5a:3d:c5:7d:b9:93:e3:27:0e:96:44:
                    3d:ff:e8:aa:8a:54:bc:97:58:72:9a:ab:58:ef:34:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:6F:23:10:D8:DC:C4:B6:E4:9C:84:E7:79:00:88:73:FC:33:83
            X509v3 Authority Key Identifier:
                keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:d3:68:cc:b7:c2:d5:f6:41:a8:91:f5:48:78:1d:47:1b:
         f3:03:9f:57:bf:ee:cd:d7:7e:35:d0:11:1d:c0:c2:a1:00:78:
         e1:00:1e:6e:6e:3e:5d:17:1d:d9:4b:53:80:ec:55:58:96:79:
         52:2e:8b:e3:f2:64:2b:ef:6b:01:5b:7c:2d:4a:ce:a7:ab:4f:
         84:40:dc:22:67:f8:ee:b6:78:e2:ec:58:88:e5:b7:bb:aa:0b:
         7a:5f:c2:94:ff:7e:07:20:20:58:14:f6:8b:6c:dd:b8:87:b9:
         d1:a0:d3:4f:f5:6c:9a:4e:2a:a3:1d:59:97:9c:d4:7c:6b:77:
         fc:17:80:83:ce:21:46:7d:3c:9f:7b:d9:f5:3a:31:70:2e:7b:
         3f:50:cd:0c:60:55:b7:06:e8:92:45:f2:92:38:cb:24:db:02:
         5f:ee:a7:d4:f8:fd:2d:3a:c9:fe:35:f1:4c:87:52:49:3f:3c:
         bc:d7:78:a6:66:ff:b9:2c:f7:e2:a2:cd:12:d4:4f:50:66:4a:
         44:05:82:ed:0c:b9:62:b9:e6:a0:27:d2:f6:74:32:d5:0a:65:
         94:7c:ed:d3:68:e9:c5:08:66:fb:3e:04:d1:d1:e8:83:5b:df:
         87:ab:8d:43:42:50:d7:a3:4c:2d:88:f4:72:fc:be:94:0d:e3:
         19:3b:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:47 2025 by rpki-client