Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          GstCDUaeQtWUBwjgBzitCJ6OP2CgW7mdx0bLCsQzv8M=
Subject key identifier:   22:1C:30:B9:40:14:60:A5:D0:BB:E3:D6:24:E6:0B:ED:27:FF:1B:BF
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0A97
Signing time:             Thu 24 Jul 2025 20:35:11 +0000
Manifest this update:     Thu 24 Jul 2025 20:35:10 +0000
Manifest next update:     Thu 31 Jul 2025 20:35:10 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: R+pN9P0sDwX1zWF897RFX0RjVH7O9ucQ+Jkb3dirH5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 20:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Jul 24 20:35:10 2025 GMT
            Not After : Jul 31 20:35:10 2025 GMT
        Subject: CN=688298fe-5a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:ac:ab:52:47:8b:9e:6d:52:ee:67:99:6a:
                    c1:ec:fb:80:7d:be:7f:2e:ab:d9:06:a8:6d:5d:29:
                    5f:ce:97:a6:93:2c:b4:33:ea:7f:6d:66:11:66:ee:
                    f4:9e:9d:4e:c3:d8:f8:b2:90:d5:b0:d4:df:19:8d:
                    14:b3:43:e7:d6:4b:fe:56:71:c1:d4:01:f6:7f:4e:
                    56:d0:b8:a5:f8:82:c2:53:70:6a:05:82:c5:83:f3:
                    37:6f:b1:d6:df:3d:2c:c5:f5:13:b9:6c:66:46:60:
                    81:77:a9:e2:d1:2e:cb:83:6c:93:49:33:9d:4a:62:
                    9e:16:87:6f:19:45:c2:bc:b4:fb:35:d2:ba:7c:8a:
                    d8:06:cc:2a:3f:02:63:81:4f:36:92:c8:4e:65:50:
                    4f:92:ee:73:22:65:df:ce:0e:49:be:6f:f3:eb:70:
                    65:7b:b2:1c:f3:3c:1c:67:81:94:38:dd:0f:66:26:
                    8f:ca:50:3d:a7:93:14:ac:3d:86:cc:34:e7:c6:80:
                    3b:ba:f1:70:0b:74:71:08:d2:43:80:e5:b8:ea:c4:
                    fb:6f:04:8f:8c:a2:65:da:7b:fe:04:90:f5:40:cd:
                    2a:e4:48:66:70:ea:86:05:2f:e3:6e:cb:81:2b:a6:
                    51:33:04:ea:89:8a:b2:d0:f1:3b:64:e1:46:26:93:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:30:B9:40:14:60:A5:D0:BB:E3:D6:24:E6:0B:ED:27:FF:1B:BF
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:86:c9:d2:01:49:c2:79:84:ad:d2:90:45:47:e4:35:c2:41:
         36:58:7e:c9:96:52:77:c3:31:e1:25:38:88:a3:7e:fa:f3:8d:
         cd:32:ea:26:af:20:e0:54:04:96:22:75:66:27:b3:5b:ce:86:
         fb:b7:84:07:58:23:23:6b:a2:01:cd:57:b8:80:82:66:a1:69:
         09:68:0a:d4:2d:ab:dd:f8:f4:af:23:7c:c5:0a:32:f6:f7:df:
         d5:93:ad:43:92:26:a3:89:b1:e8:16:81:38:c9:c4:fd:77:79:
         cf:93:4c:9a:5d:a0:49:d3:9f:cf:57:9f:50:76:ff:df:e4:ce:
         bf:8d:3f:90:eb:4e:5e:06:62:1b:3c:46:06:fd:fe:4f:f6:99:
         46:a5:12:8f:6b:ca:59:f0:26:a6:41:9f:5f:42:57:29:c2:42:
         44:06:5e:00:ab:6b:6a:32:60:15:19:47:a1:21:16:6d:b0:f5:
         0e:69:3b:e9:40:c0:88:90:66:54:e2:45:b9:20:66:a5:f2:21:
         19:86:74:49:8b:aa:b2:75:b5:e2:f0:8b:f7:34:85:30:3d:76:
         c6:4d:f7:a2:e3:f7:8f:77:60:68:ad:12:98:2f:44:78:2c:54:
         1e:e5:d0:ef:d6:27:d0:7a:e9:c6:d8:5b:d1:0f:41:02:90:fb:
         5d:ce:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:26:20 2025 by rpki-client