Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
File:                     YvelRApaUxvswWNB8-4xM5YTfo0.mft (raw, json)
Hash identifier:          IxQTNWXk3DKXr8o+IhC7IHM6EP5Hv9z756rxmnA372Y=
Subject key identifier:   87:A9:40:31:83:AB:53:A3:FC:9F:2C:DA:59:EC:28:7C:80:9F:4A:55
Authority key identifier: 62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
Certificate issuer:       /CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
Manifest number:          64
Signing time:             Sat 31 May 2025 06:37:34 +0000
Manifest this update:     Sat 31 May 2025 06:37:34 +0000
Manifest next update:     Sat 07 Jun 2025 06:37:34 +0000
Files and hashes:         1: YvelRApaUxvswWNB8-4xM5YTfo0.crl (hash: RVSXyemOu8JRIt35l5AbRTPJ0lvHqy/wKB8yXfo39Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl
                          rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127514, serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
        Validity
            Not Before: May 31 06:37:34 2025 GMT
            Not After : Jun  7 06:37:34 2025 GMT
        Subject: CN=683aa3ae-4110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:cc:8d:00:49:04:8e:ba:00:bd:a1:bd:b5:
                    7c:1a:66:88:fa:0c:08:a1:49:66:b6:96:fe:d4:f4:
                    ed:53:02:05:13:66:b5:e4:1a:3b:05:61:b5:eb:91:
                    95:0c:21:27:24:d2:26:69:85:80:a2:85:66:ed:ce:
                    ba:e3:07:25:a6:36:18:0c:51:68:3f:89:65:4e:e2:
                    f1:68:f2:c0:b7:78:66:07:71:c1:bd:34:8e:80:f7:
                    10:75:51:9a:91:f3:92:ce:d5:04:b1:10:5f:43:13:
                    52:c1:d7:89:30:00:9a:a9:22:a3:a5:f4:ad:53:52:
                    1e:ef:9f:9a:25:ce:6a:4b:da:6d:8d:e1:c8:bc:66:
                    07:ba:28:c9:84:24:08:22:ef:08:2d:60:df:29:4e:
                    48:41:ba:fd:75:24:e5:2a:74:1e:b2:97:df:52:ee:
                    92:54:8b:14:4c:9e:06:ec:58:53:e2:25:e0:6c:ea:
                    79:a2:20:fd:1c:5a:b3:84:91:44:1f:01:7f:7d:e7:
                    31:88:22:c2:73:e1:07:29:65:70:00:ba:23:63:08:
                    32:6a:09:7c:20:2e:94:08:fc:7d:6a:12:d2:9f:8a:
                    e5:88:a1:ef:07:a9:15:31:9b:b5:47:29:93:bc:78:
                    da:6d:4b:9b:a2:44:97:c6:4b:ea:40:fe:77:6c:5a:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:40:31:83:AB:53:A3:FC:9F:2C:DA:59:EC:28:7C:80:9F:4A:55
            X509v3 Authority Key Identifier:
                keyid:62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:80:57:0f:48:6e:ef:05:57:58:b8:d0:c7:c6:1f:0f:29:11:
         be:f7:3a:34:35:da:da:74:ec:19:b2:d5:2e:30:e0:7e:f6:d7:
         14:37:e9:eb:33:d6:79:ce:69:16:7b:77:1f:c0:b6:ac:38:02:
         1b:96:f8:57:8b:e7:c1:bc:42:a1:88:fe:02:a0:4f:83:ef:a2:
         be:09:b1:32:56:5b:2d:f2:a2:da:e6:30:c9:bd:d4:6a:de:ba:
         df:e2:27:64:a8:a4:4d:08:05:97:44:05:37:74:b5:c8:19:a1:
         1c:9e:b6:6c:09:d5:f2:87:6e:53:cb:1f:ed:91:46:86:45:c1:
         f9:50:ec:d4:f8:b7:5d:33:d6:51:32:b7:66:f6:f8:5c:e8:0e:
         d1:c8:49:c9:3c:40:43:df:69:e3:2d:07:29:ef:cf:e6:8d:ef:
         a1:dd:d5:51:00:9d:aa:9b:cc:4f:52:3e:70:a1:f1:d9:25:f9:
         9c:f8:ad:58:fe:57:e4:af:34:c2:ad:c0:41:b6:33:a4:12:7e:
         7c:bd:0c:5b:8d:0c:69:d4:ac:97:97:0b:55:8b:cb:76:5c:83:
         02:be:99:bb:8d:9e:1b:d7:4d:ce:68:c1:fe:d5:7e:dc:f7:89:
         e4:7c:84:99:96:bf:38:37:f7:de:ed:0f:bc:60:cd:f9:c1:95:
         7c:6b:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:42:56 2025 by rpki-client