Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
File:                     YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json)
Hash identifier:          gSr8t4c/pu2IVpuUwbfRiDzzlnPVNWCSEfxpMt1cLIc=
Subject key identifier:   06:70:99:3E:69:BA:20:9F:D0:1C:7B:E5:E4:03:A0:E7:74:76:98:18
Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7
Certificate issuer:       /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
Manifest number:          8D
Signing time:             Wed 23 Jul 2025 06:54:15 +0000
Manifest this update:     Wed 23 Jul 2025 06:54:15 +0000
Manifest next update:     Wed 30 Jul 2025 06:54:15 +0000
Files and hashes:         1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: MG2LTMlTpQORYZfL4J3lxpmBKbwska2YqtIEUeNXGdg=)
                          2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: YFnVZs2sNdDdcoL6mfOS9gOjX930yi4DDrGYTFUTspw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl
                          rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
        Validity
            Not Before: Jul 23 06:54:15 2025 GMT
            Not After : Jul 30 06:54:15 2025 GMT
        Subject: CN=68808717-3c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:76:ef:26:42:60:4c:8c:f3:d6:ba:d6:d5:
                    2e:c3:4e:b9:a5:65:43:c1:78:a6:33:86:92:64:69:
                    ac:c2:f9:d7:34:21:2f:d1:84:a1:37:6a:43:c2:03:
                    74:5d:4b:9b:35:2c:19:f8:35:54:a8:7c:24:65:55:
                    2e:48:3f:71:40:68:e3:82:dc:04:b1:1f:64:02:6c:
                    17:95:74:e7:c6:1c:db:f6:e4:e9:6f:12:48:73:6a:
                    1f:b7:cf:e9:a7:13:77:0f:a7:27:a1:f3:fa:1a:08:
                    fe:35:89:a1:27:0e:4a:cd:05:33:ea:fe:ba:4b:78:
                    73:34:2e:35:a3:59:d5:70:e2:b4:6a:15:fe:bc:cf:
                    f0:67:b1:bc:0c:3e:3b:fb:2b:13:22:79:87:de:eb:
                    7b:52:f2:6f:d3:b1:eb:e9:66:af:1c:fe:5a:26:2c:
                    e5:38:8b:5b:8d:11:70:59:6d:8c:81:09:21:65:f2:
                    27:9c:69:65:e2:52:0d:e7:3d:a3:6b:62:ea:ff:5f:
                    45:af:48:45:13:ec:47:75:11:b0:b1:24:df:69:07:
                    6e:54:64:8e:2d:90:bc:b8:08:61:22:dd:5b:ef:85:
                    f2:85:8f:c1:6e:12:e2:02:a4:a2:c2:78:c6:c1:9a:
                    8a:fc:c8:ec:b6:94:47:b4:b1:67:73:06:45:47:4c:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:99:3E:69:BA:20:9F:D0:1C:7B:E5:E4:03:A0:E7:74:76:98:18
            X509v3 Authority Key Identifier:
                keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:e4:0b:42:37:4c:e3:b6:c9:6f:1e:b1:78:c5:bc:aa:b9:
         3f:22:0e:5c:48:5b:5a:58:ed:8a:14:b5:a1:c3:90:13:fa:ba:
         14:04:8d:26:36:d1:4d:1b:e9:75:24:fc:2d:51:a8:76:a7:3b:
         70:1c:80:47:32:e0:08:26:ef:fc:63:1e:c1:cb:ef:83:47:46:
         85:82:4d:8d:56:9a:13:c6:94:c6:36:18:ce:b1:8a:79:cd:38:
         2b:57:92:2a:d4:c9:3e:2d:e3:28:f9:ef:4c:d2:1e:ff:b1:98:
         ed:c4:0b:39:eb:5d:f1:18:28:0c:f6:f8:70:40:4a:c9:1c:0b:
         98:58:81:55:ce:fe:dc:eb:57:9e:25:09:54:97:41:91:df:0f:
         a5:4b:3a:91:8b:e2:aa:55:99:d6:84:7f:66:b3:a0:33:91:07:
         03:d7:27:e3:32:96:0a:fd:a2:03:78:74:73:23:72:b6:db:01:
         53:1a:90:7d:c3:da:bf:17:3c:40:89:fe:e0:3a:9b:6d:33:2f:
         36:97:32:be:64:02:c6:3c:04:9e:82:cb:b5:22:68:54:19:5f:
         82:b7:e8:e9:ba:c7:da:66:70:07:24:a4:5a:92:b5:ab:6c:1b:
         05:c8:ed:6a:5e:61:75:41:00:03:87:77:87:7d:f2:22:83:6f:
         8d:31:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:34:36 2025 by rpki-client