Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
File:                     YYQdHtq_n_D2AYxhEBevcZYnok0.mft (raw, json)
Hash identifier:          Eqs/d0HVdKT+mK+WNRHBHZl10lHqnUeSt+wyM2t+yAE=
Subject key identifier:   9B:2D:9A:FC:8E:DE:67:D8:72:79:62:41:16:D4:50:7E:7F:54:CC:B2
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Certificate issuer:       /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
Manifest number:          0536
Signing time:             Mon 08 Sep 2025 23:42:52 +0000
Manifest this update:     Mon 08 Sep 2025 23:42:51 +0000
Manifest next update:     Mon 15 Sep 2025 23:42:51 +0000
Files and hashes:         1: YYQdHtq_n_D2AYxhEBevcZYnok0.crl (hash: 0vzWBM7v6PXiEwKHIdx+pxMPMwQ7brDSYIp6UDUhYkQ=)
                          2: C1C91F0E876E11F080BEEA70C4F9AE02.roa (hash: 0kx4jmc0B4oUE4mi6Y9Hde495aMHNcYxbCSJMXupSrU=)
                          3: CF9E64BED65711EE8623B920C4F9AE02.roa (hash: KFSR8nqG2sOGDYAgAFeqv4yoVxNtWdp8vNs36B/HOmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
                          rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117373, serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
        Validity
            Not Before: Sep  8 23:42:51 2025 GMT
            Not After : Sep 15 23:42:51 2025 GMT
        Subject: CN=68bf69fb-dde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:3b:63:25:5d:39:eb:45:28:8e:40:1a:1c:
                    70:82:76:e6:b0:8e:8c:d9:08:08:bc:23:ce:17:dd:
                    67:56:5e:ac:62:d0:fc:ac:3c:5c:ab:d4:cd:d2:6f:
                    84:26:d1:d4:3b:53:f1:79:d8:88:9c:a4:a4:6d:f9:
                    a0:e6:62:88:ee:12:fc:57:b0:75:96:ed:69:65:f8:
                    bb:45:15:a7:c1:71:ab:d0:72:83:e1:6a:76:2b:73:
                    e6:f2:2b:4e:d4:51:d3:e1:32:40:aa:f8:83:80:e1:
                    de:bc:d5:0c:fb:d5:df:d3:11:b4:f2:c9:85:5b:f0:
                    53:24:9a:60:30:0f:7a:b0:64:c7:64:0e:c4:e7:9a:
                    46:d4:e0:a6:6c:e9:89:01:46:a1:70:17:a3:99:2d:
                    e1:d9:6b:93:24:82:81:e0:82:ce:8c:b8:2e:29:06:
                    66:e6:ed:f5:58:a0:b3:f4:68:e5:ad:bb:0f:37:25:
                    5e:08:40:42:39:3c:e1:1f:0a:07:55:2e:84:82:85:
                    08:6c:94:61:6f:ce:79:14:c9:a4:af:b8:81:40:53:
                    62:7f:96:97:9c:65:4a:95:26:57:07:13:d7:60:74:
                    ee:a1:a9:84:20:3e:22:04:f0:4a:81:4d:f0:40:03:
                    f6:7f:f5:0e:f2:9e:19:4f:25:6b:3d:8a:c4:07:91:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:9A:FC:8E:DE:67:D8:72:79:62:41:16:D4:50:7E:7F:54:CC:B2
            X509v3 Authority Key Identifier:
                keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:06:5c:32:9b:3d:d1:b1:f1:e7:f4:fa:25:71:0d:c9:00:
         60:8c:f7:30:eb:c0:96:ad:ab:3f:ae:43:0e:6b:79:f7:b6:de:
         64:70:58:ed:66:11:c4:62:8b:1c:d9:4c:31:3c:84:b6:6e:52:
         1f:b0:14:81:c5:5d:ba:ef:7e:cc:62:41:c7:c0:d9:7b:54:6b:
         33:25:34:f2:8d:17:9b:e6:9c:26:c9:10:1f:57:9c:a9:8e:76:
         1e:57:74:a3:c5:9d:7a:38:d2:b5:e3:97:88:a5:48:a4:e0:ac:
         d5:3d:06:44:1b:c4:5d:00:63:28:57:b4:86:f7:08:5f:cc:25:
         9f:58:23:df:dc:05:27:23:49:e7:66:72:0a:68:cb:d8:c6:11:
         60:ce:35:28:52:8d:7e:6c:ed:64:36:d2:7b:09:2b:60:f9:d6:
         11:22:46:e8:da:8e:75:34:10:ff:c4:4d:54:0c:ea:ae:ab:fa:
         48:44:f2:f8:3c:57:a0:0c:68:c1:74:1e:14:52:a0:ff:a2:62:
         fa:cc:7c:fe:ae:8b:b9:a7:57:de:ae:18:14:28:49:0c:5f:a6:
         ac:f6:e6:a9:7f:6d:a7:3d:6c:de:69:aa:31:21:18:d5:d1:17:
         41:20:bb:b9:68:b8:5f:53:a4:8e:12:91:6a:d8:4a:97:e3:69:
         4b:00:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:37:24 2025 by rpki-client