Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          19jTvgDK3mAdNo0v+bCgMFnYuo03NnlbOK75UrMgxSw=
Subject key identifier:   A3:0E:3C:3F:7B:D5:E6:33:75:AA:5B:4E:4F:AD:71:AD:2F:49:38:E4
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       10C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          109A
Signing time:             Mon 08 Sep 2025 17:24:56 +0000
Manifest this update:     Mon 08 Sep 2025 17:24:55 +0000
Manifest next update:     Mon 15 Sep 2025 17:24:55 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: zvwipuXxj45Y4BKOrrhw7ONHDgkPgYQiHcEiF0iFE/Y=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 17:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4293 (0x10c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Sep  8 17:24:55 2025 GMT
            Not After : Sep 15 17:24:55 2025 GMT
        Subject: CN=68bf1167-ee1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:4f:61:2d:ab:60:85:ef:58:c9:85:52:9e:
                    dd:4d:da:21:4d:da:8c:0a:78:4e:04:d8:81:8c:d0:
                    9c:b8:a2:ee:2c:d2:9b:9f:14:e3:52:12:7e:ec:27:
                    b7:e6:5f:c8:c4:33:d0:a3:55:d2:22:c5:98:5e:60:
                    9b:4e:11:7a:f7:9e:a6:60:ce:db:2f:fe:73:ef:cd:
                    a2:c3:a2:07:b3:b7:41:80:4e:e0:27:b5:d3:9a:a4:
                    5c:82:17:28:37:c9:5d:57:fa:5a:89:9c:e2:1b:44:
                    85:80:ab:67:8a:96:bb:4e:47:78:ea:a8:52:f1:4b:
                    9f:ba:0f:c3:c1:d4:38:dc:87:9d:5b:50:6f:9d:6c:
                    69:6c:55:02:66:34:0e:f4:87:09:33:dd:69:8a:52:
                    5e:3c:bc:29:54:e2:dc:c9:fb:8b:dd:a6:56:7d:d7:
                    94:3f:0a:57:69:1d:0e:e2:79:5c:2b:1d:d9:a1:70:
                    f0:74:24:19:46:b0:e3:eb:3f:48:93:7a:a6:7e:47:
                    f2:2f:51:ca:35:8a:0b:8b:70:f9:b3:df:02:15:93:
                    10:1a:e2:db:aa:19:19:40:96:9b:6d:bf:c6:f1:7f:
                    01:89:8b:13:90:fd:4e:1f:f9:18:c3:4b:af:b1:2f:
                    7a:ae:a0:68:6a:62:9e:f5:49:55:96:2c:06:eb:b0:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:3C:3F:7B:D5:E6:33:75:AA:5B:4E:4F:AD:71:AD:2F:49:38:E4
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:38:81:3c:dc:18:e8:99:fd:6f:ef:6f:e1:ba:80:66:8d:7c:
         c2:c1:8c:89:28:e7:38:9c:23:96:14:cc:a2:f6:9e:f9:67:b7:
         a2:86:89:62:f5:ae:4a:20:52:17:24:c7:76:3d:e1:4c:74:92:
         ea:04:15:f9:a8:bc:49:ee:47:b0:05:db:fd:67:df:48:ed:1c:
         fd:ae:4f:a2:87:9f:b1:1a:ab:73:2a:c4:4f:3f:67:ac:b3:61:
         c6:b9:74:d2:89:73:ea:42:a2:99:be:85:dc:48:6b:fa:d3:75:
         1f:b8:99:aa:c3:80:b6:9f:42:bf:81:b8:db:35:5a:f5:16:47:
         77:1b:5a:bd:06:ad:b5:5a:17:69:7b:b4:2b:14:d1:e2:ff:e3:
         bb:64:68:72:8e:90:c1:c8:49:3a:7d:e4:80:1d:08:59:a1:6e:
         f5:3b:c0:bd:74:cd:28:b7:53:af:73:b0:b1:2b:d9:15:e2:ba:
         31:16:39:5c:fd:f4:8f:d8:14:52:1c:89:09:7a:d8:63:0b:53:
         f6:27:29:08:7e:43:60:06:0c:c1:f5:3b:e3:41:f9:a8:6f:1f:
         fd:56:ca:7e:72:00:3b:6c:23:1c:d2:9a:ea:df:e0:d7:0f:66:
         c6:5f:77:e2:a1:f2:e6:91:5f:7a:4a:77:c4:d7:62:19:0e:b2:
         ce:3a:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:51:07 2025 by rpki-client