Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
File:                     YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json)
Hash identifier:          aTCcg5T5pxVcC9svHwpq3E1vs7Lpr7Tirv6CgIw+BH0=
Subject key identifier:   71:15:1A:90:CE:FB:13:5E:84:21:58:EF:23:97:08:F6:85:3E:25:78
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Certificate issuer:       /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
Manifest number:          010A
Signing time:             Sat 19 Jul 2025 05:14:41 +0000
Manifest this update:     Sat 19 Jul 2025 05:14:41 +0000
Manifest next update:     Sat 26 Jul 2025 05:14:41 +0000
Files and hashes:         1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: nvcUMXDDWMLBU/Uh0RVfvCG80N6SB014J8wuy8YPHYA=)
                          2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
        Validity
            Not Before: Jul 19 05:14:41 2025 GMT
            Not After : Jul 26 05:14:41 2025 GMT
        Subject: CN=687b29c1-c1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:3b:5b:bc:90:1a:e3:af:ee:54:25:6e:a8:
                    eb:2a:db:ba:c3:e8:0b:43:1e:43:7f:cf:a3:a1:97:
                    3d:9f:7e:63:72:bc:3d:02:83:9e:0e:13:f4:72:57:
                    5e:56:4d:d0:27:c1:c9:d6:a5:d5:ec:42:4e:d3:ee:
                    50:f5:cb:5c:1b:6f:10:96:15:c6:dc:60:e0:66:f4:
                    61:35:21:c1:c4:8b:d3:b8:fb:e5:5b:e8:72:4f:df:
                    8d:9d:6e:62:0f:a6:8a:a0:73:02:88:22:62:a5:b0:
                    41:1d:f8:d3:e5:55:71:25:2c:24:d7:71:00:76:ec:
                    0f:5c:e5:fa:d1:3e:3b:44:12:ab:f5:62:69:59:b4:
                    42:07:f6:63:c8:48:d8:41:c8:9f:55:92:9e:ef:d9:
                    fb:a4:05:74:34:25:3d:a9:57:d7:23:76:17:8b:9a:
                    e7:98:81:64:4a:fe:8a:cd:f0:5b:d3:f6:d5:d1:f3:
                    74:cc:18:a7:dc:ee:25:cc:e3:e2:c8:0c:86:f9:26:
                    97:22:6d:5b:ac:cb:b4:35:b4:25:f5:24:f0:1b:ee:
                    62:cd:b8:e1:40:54:7e:f0:16:c4:bf:62:ee:9a:0c:
                    6b:51:54:e9:d5:0f:9d:d9:9b:14:ab:81:ae:8e:01:
                    70:a4:11:ab:7e:fd:f8:92:c6:cd:37:4b:46:67:32:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:1A:90:CE:FB:13:5E:84:21:58:EF:23:97:08:F6:85:3E:25:78
            X509v3 Authority Key Identifier:
                keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:7a:04:81:c8:75:b8:4a:03:f5:05:a3:e9:df:41:38:93:
         5c:1a:a4:ee:8b:84:ca:e5:b9:5c:cd:82:21:26:7d:d6:b3:70:
         c7:f7:ba:3c:0d:36:66:7e:a5:56:ab:85:8e:14:2c:e7:80:02:
         fb:b3:6d:97:97:2f:fb:f0:3d:f1:19:fc:3e:fe:65:9f:01:68:
         cc:9b:9c:6e:a7:8c:18:ef:69:35:9a:80:ef:0a:4f:d4:95:ae:
         b6:df:d9:42:91:41:77:15:f7:90:c6:88:55:a5:d0:67:8a:4b:
         37:03:ef:4c:12:bb:3b:06:a3:85:c2:f8:6f:e2:82:59:4e:8b:
         84:f0:4f:00:67:1e:8f:37:56:1b:26:4b:f7:de:15:9f:1a:c3:
         46:ab:ec:da:43:5e:94:e3:38:c3:30:f6:36:5d:db:2e:e3:f6:
         93:0a:33:e1:66:d2:b2:37:34:05:8b:c3:d3:3f:65:e6:1d:31:
         61:6a:8b:2a:82:c5:ff:40:12:1d:92:6a:0d:19:70:93:63:b8:
         fb:fe:e8:5a:ca:ab:9f:66:20:7e:b4:10:08:8f:36:f3:b5:c8:
         e6:27:aa:b9:41:44:71:dd:5d:1e:0b:3a:78:41:df:5b:7b:c1:
         62:77:7d:71:51:28:6b:f2:ea:da:94:f4:11:07:32:01:2a:13:
         66:a0:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 02:21:25 2025 by rpki-client