Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          ZRxXsvmp34v4JYToVA44y4JrzFXPSgeGSde3SNU2AN8=
Subject key identifier:   85:CF:8B:2C:61:B0:17:D8:AB:D5:89:BE:5A:CA:6D:09:A0:9A:FB:2A
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          01DF
Signing time:             Sat 31 May 2025 02:24:16 +0000
Manifest this update:     Sat 31 May 2025 02:24:15 +0000
Manifest next update:     Sat 07 Jun 2025 02:24:15 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: yNArZtE5LQmViur/xtqcT2Hxfz1upA4EH8hDw93ZdW4=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: May 31 02:24:15 2025 GMT
            Not After : Jun  7 02:24:15 2025 GMT
        Subject: CN=683a6850-787c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:97:c3:e5:b3:ce:0e:5b:bc:88:10:ae:e0:
                    dd:30:76:e3:c5:9c:be:1c:a2:4a:4b:28:fa:1a:aa:
                    e3:b0:d2:c2:20:ff:ec:d6:16:2f:64:82:4e:0b:a5:
                    8f:80:a0:a3:fd:83:d8:20:3b:74:a0:30:c8:f5:da:
                    8c:8b:38:81:3f:b7:0f:3e:4f:95:e0:8b:ae:ac:97:
                    97:1e:17:ea:ca:08:3a:b9:ec:4e:dd:5e:de:e6:6b:
                    9a:9d:d4:a9:39:5a:85:e3:33:52:4e:90:f4:8d:81:
                    5f:ae:24:7f:9c:fb:b1:cc:14:09:39:50:91:66:ca:
                    3a:36:4d:29:a6:58:e6:69:da:92:af:b5:7e:4f:31:
                    8a:2c:d9:8e:60:37:40:b5:ce:79:d1:0a:b1:ed:4f:
                    40:63:e2:aa:87:23:c2:49:bc:61:b5:96:32:4c:72:
                    84:1e:4e:6c:ef:11:84:0b:38:90:93:e7:98:5b:61:
                    2e:e3:07:ef:27:40:70:61:b8:fc:aa:ed:73:5a:41:
                    7e:22:38:0d:fe:9e:26:18:4e:40:4c:5b:21:fa:c0:
                    b8:66:83:1f:1c:af:d6:7a:90:8a:54:15:96:d3:b0:
                    0a:f5:8f:a4:9a:56:83:15:67:c0:2c:89:98:15:25:
                    aa:b0:29:86:21:77:fe:87:25:1d:5a:ff:3b:76:20:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CF:8B:2C:61:B0:17:D8:AB:D5:89:BE:5A:CA:6D:09:A0:9A:FB:2A
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:aa:32:a4:a4:4b:7c:c9:73:f9:8b:21:9c:fb:21:c6:06:
         cb:b5:c0:cf:80:e8:50:61:a6:bb:3c:87:08:8a:3b:a8:dc:b4:
         39:c4:15:5f:82:74:fb:79:79:e2:4c:ea:f4:b4:dd:6a:62:28:
         de:b6:fd:52:f4:78:ac:30:50:ff:af:75:ed:33:6c:90:55:59:
         82:42:8a:64:f4:11:5b:ca:08:d7:7e:5f:fb:0f:0c:53:47:11:
         e7:72:af:0b:14:bc:87:31:ae:03:6e:18:9d:ec:89:3e:12:ba:
         7d:6a:41:4a:6b:d5:d4:3c:f1:21:40:4c:27:44:21:cf:ba:b8:
         29:cf:11:0e:57:35:82:62:11:c3:fe:73:e2:5e:c2:6d:a7:6d:
         bd:60:33:28:73:b5:54:b1:35:15:e1:a2:cf:44:9f:2e:2f:07:
         13:89:87:5e:a4:f1:42:a2:d7:76:a3:07:c3:5c:12:e9:87:ca:
         8c:85:11:d9:18:f6:8e:9b:08:19:28:51:4a:51:e3:83:4f:b3:
         43:d3:be:82:99:c1:e6:a1:c3:b3:ee:45:b1:e5:5c:95:ad:50:
         cc:8d:28:e5:81:d4:49:15:0c:81:34:ba:19:8d:00:57:c3:20:
         63:ed:e0:95:cf:06:d8:18:93:e6:0c:1a:88:24:fc:76:bc:19:
         01:7c:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:45:02 2025 by rpki-client