Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
File:                     yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json)
Hash identifier:          nNtXy3P8YiIdOI+OxDOdNyoVN/1AIgDE/dGc4WyDC24=
Subject key identifier:   80:CD:FF:61:62:E4:D4:8C:F8:D5:74:6B:9F:04:31:B8:95:AC:90:7A
Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Certificate issuer:       /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Certificate serial:       1050
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
Manifest number:          1050
Signing time:             Fri 06 Jun 2025 17:25:30 +0000
Manifest this update:     Fri 06 Jun 2025 17:25:29 +0000
Manifest next update:     Fri 13 Jun 2025 17:25:29 +0000
Files and hashes:         1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: 4I5w/m8zlz8yTwi8KvhzALh/BI1Gt7+G2xdg7iqGlgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 17:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4176 (0x1050)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
        Validity
            Not Before: Jun  6 17:25:29 2025 GMT
            Not After : Jun 13 17:25:29 2025 GMT
        Subject: CN=68432489-2294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:1f:cd:a5:5c:87:ee:73:09:82:4b:3c:4b:
                    66:c6:04:64:93:2b:13:a0:00:95:6f:a7:1b:35:c2:
                    48:47:ee:6c:f8:f7:a6:12:b0:91:e9:d8:01:fd:27:
                    e0:e0:6f:84:d0:2b:a4:fa:0d:c0:fa:db:7d:13:80:
                    86:c6:31:82:d2:69:2b:07:db:9e:f1:45:af:6e:f5:
                    ea:0a:50:a3:fc:a4:af:48:78:bd:7d:4e:d6:b8:01:
                    bb:71:67:5d:6a:be:06:dd:4b:db:07:cb:68:4f:c5:
                    19:48:7f:96:66:a7:b4:1e:07:32:a0:91:1d:d6:e5:
                    c5:17:ba:d5:51:18:ce:b6:0f:e7:e6:39:17:08:fd:
                    5f:58:a8:29:54:78:5c:b3:4f:14:e4:04:a3:45:4b:
                    97:38:e5:2b:f3:89:8d:ea:c8:c7:93:c6:e9:a2:b4:
                    bb:e8:12:e7:44:4e:17:a6:60:15:26:cb:f6:35:85:
                    55:3f:77:41:bc:8f:d3:fb:0c:01:0b:96:08:5f:54:
                    25:cc:26:3d:2f:7a:6b:4c:b5:09:87:75:f6:7b:7a:
                    f0:5b:da:30:e1:6a:8b:a6:21:63:8a:3a:84:f1:19:
                    be:20:63:25:13:57:77:f2:b2:f2:f1:8b:9b:cc:dc:
                    ff:26:6a:da:4f:7f:7b:67:ab:97:92:34:be:35:bb:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:FF:61:62:E4:D4:8C:F8:D5:74:6B:9F:04:31:B8:95:AC:90:7A
            X509v3 Authority Key Identifier:
                keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e3:7b:fe:4d:02:55:d4:37:a1:5a:08:7c:dc:d0:cf:d4:45:
         9e:98:b5:00:6d:9a:a7:93:67:50:fa:45:79:40:5e:d3:06:58:
         5e:4f:4e:95:93:16:43:d6:f8:74:c1:43:a7:ba:fd:45:ff:97:
         0d:17:f2:40:9d:fc:d5:1d:4a:fc:b0:bb:1b:1c:32:6d:4e:c6:
         22:1f:b5:a2:ea:67:27:dd:91:78:51:e3:5e:93:80:56:eb:9f:
         b9:71:8a:17:b8:f1:8f:92:c3:cd:c4:a2:35:c9:ca:f8:f4:ae:
         e6:73:9a:62:65:4c:70:bd:64:0d:05:fa:26:9f:a9:7b:66:78:
         dc:b6:2a:93:f3:c5:27:1f:27:bf:a4:d3:53:c4:57:cb:b1:f6:
         8a:a3:db:ce:49:b9:5d:b7:0a:4b:ce:86:70:8d:3c:cd:2d:12:
         38:c6:8f:03:9a:36:fd:09:3e:b2:aa:f0:09:4c:12:99:20:f6:
         c2:00:34:f9:74:aa:34:ad:c4:66:7a:68:f3:22:27:18:54:3b:
         97:66:aa:62:f7:07:75:74:47:f3:19:f9:5b:99:30:b4:3f:6c:
         3c:b9:ba:d0:16:72:1a:33:14:a9:19:39:c2:31:15:af:34:60:
         7d:12:0c:c0:69:bd:9b:29:59:42:0f:61:6f:87:ae:f9:03:14:
         72:cc:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:50 2025 by rpki-client