Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
File:                     yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json)
Hash identifier:          zqP3zpQ/kPNQ186jo3IxOVE7lHz1AiV5FOn083ZIrn8=
Subject key identifier:   9F:8F:B1:E0:BC:BC:2D:F4:66:2C:67:A6:78:31:7D:CC:74:78:C2:B3
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Certificate issuer:       /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
Manifest number:          0787
Signing time:             Wed 23 Jul 2025 00:54:53 +0000
Manifest this update:     Wed 23 Jul 2025 00:54:53 +0000
Manifest next update:     Wed 30 Jul 2025 00:54:53 +0000
Files and hashes:         1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: 1Xh8S83+Rp2hz6Id96pFujX/i6ad2bsYiwcj5F+dt9A=)
                          2: 36EA74DAB55C11EF9EF5381AC4F9AE02.roa (hash: L0ogohbd+XG2Rt92PSkXg3Zj7mjIKhleupD8sB/ULt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
        Validity
            Not Before: Jul 23 00:54:53 2025 GMT
            Not After : Jul 30 00:54:53 2025 GMT
        Subject: CN=688032dd-c5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:0d:c9:d8:ba:0f:60:9a:34:8e:49:37:92:
                    bb:87:0d:62:35:aa:85:44:ff:42:60:38:b7:4b:06:
                    d2:36:57:37:2c:84:4e:a8:4e:de:d1:28:6e:99:c1:
                    c9:d0:da:b5:77:5b:1a:07:9c:6b:d5:9d:15:75:4d:
                    12:c8:68:74:d3:61:cd:7d:08:fd:f3:5c:df:83:35:
                    5a:38:0a:26:43:d3:20:5f:61:bf:af:2d:88:28:c7:
                    f7:de:2c:e2:69:12:5f:3d:76:c0:06:0a:f1:cf:60:
                    d7:b0:28:46:a9:4f:ec:5b:62:d0:4e:5a:74:c8:84:
                    ff:ce:3f:cd:d8:ef:87:11:4d:7d:31:f1:d3:80:fb:
                    84:53:69:d0:93:76:2e:0d:db:ab:c9:13:38:84:29:
                    98:4b:19:7f:a7:ca:ea:47:e9:7b:0b:72:cd:51:29:
                    01:a8:cf:51:0a:2f:d6:17:ac:75:9a:b2:1c:b7:db:
                    08:82:02:65:ad:3f:f8:23:67:38:88:0a:a4:c8:15:
                    bd:63:84:73:c2:0b:b4:b9:dc:3e:42:e8:ec:59:ae:
                    63:e6:3a:9d:c8:4b:bf:34:6a:0a:5b:89:bb:0d:8c:
                    5e:36:80:e9:73:44:6d:9f:42:96:d3:2f:ae:fd:b6:
                    cc:22:9a:8c:a2:82:8e:ca:ad:73:c1:b8:63:ef:70:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:B1:E0:BC:BC:2D:F4:66:2C:67:A6:78:31:7D:CC:74:78:C2:B3
            X509v3 Authority Key Identifier:
                keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:a0:2f:cf:b1:ab:ea:30:81:a6:73:30:34:ae:8a:d1:e6:
         a1:1c:0d:89:b2:db:cb:c0:7c:f7:f9:d4:19:64:e2:3c:31:21:
         f6:8c:f4:8f:60:4f:48:8e:f1:81:93:db:e8:66:c8:47:07:e0:
         7e:ad:c8:62:48:8b:75:a6:c8:76:ff:59:d7:93:c4:d3:75:eb:
         42:df:76:5b:c1:95:be:79:8b:20:0b:9e:7c:a0:7f:6b:97:78:
         f0:a1:11:b1:6c:28:d2:cb:f6:30:f5:3c:19:9b:09:55:d2:9b:
         c5:50:33:21:54:3e:53:51:48:aa:ae:7f:9a:fc:d6:83:ec:03:
         42:09:c9:ed:1d:e7:8a:8a:f8:92:1b:8b:9a:ad:8f:2f:d0:44:
         d4:54:d6:0e:a1:b8:6e:7c:6a:cb:c6:29:37:67:f9:1b:48:15:
         6e:00:dd:58:7f:d2:ab:07:bd:68:db:51:0c:72:98:9c:cb:83:
         13:bf:72:56:97:0e:36:7b:a4:5c:72:fc:a8:af:c7:90:1a:93:
         dc:ea:4f:31:37:c1:28:a3:f9:82:76:03:e6:10:0e:45:9e:75:
         ea:9d:01:d8:c6:d9:06:5c:e8:42:59:b7:4c:1f:15:d8:8f:b3:
         5f:d6:82:14:e6:87:1e:06:d0:e0:f5:0f:6c:ee:65:d3:4e:74:
         c9:11:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:14:50 2025 by rpki-client