Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          vecQByq+619VxkZAL3JESTE+etzzAb5I08YbX/FAq1I=
Subject key identifier:   D6:B6:33:42:61:17:7D:FC:7B:9E:F3:C9:C5:DD:F6:92:DF:63:00:12
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0DDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0DC5
Signing time:             Mon 08 Sep 2025 17:55:32 +0000
Manifest this update:     Mon 08 Sep 2025 17:55:31 +0000
Manifest next update:     Mon 15 Sep 2025 17:55:31 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: xuqtcv5Q8AcPH2J6wa97yBF2yAvvKZH2b/WDx40Fc6o=)
                          2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=)
                          3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=)
                          4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 17:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3549 (0xddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Sep  8 17:55:31 2025 GMT
            Not After : Sep 15 17:55:31 2025 GMT
        Subject: CN=68bf1893-fd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:54:4e:5d:96:19:ee:8e:39:01:f7:e9:7c:
                    21:27:a2:bd:2e:4f:06:16:d2:3b:e8:fb:e9:c4:c7:
                    12:e5:fa:d8:0d:a2:b8:6a:06:b2:87:4c:18:3b:19:
                    b6:b4:25:a0:1b:bd:51:ee:82:20:5e:0b:d6:2f:f5:
                    dc:20:24:96:24:18:1c:db:7d:81:25:0b:ab:64:8b:
                    1a:85:11:04:d4:45:ca:92:9e:19:b0:0d:cc:74:a0:
                    fa:5e:cd:de:45:12:8c:11:c6:00:ba:ce:55:cd:d8:
                    93:0e:70:fc:c1:95:77:21:1b:5f:79:33:4a:8d:88:
                    71:43:8d:11:d5:c9:47:4d:b6:cc:3f:99:fe:d4:c3:
                    f3:82:c6:55:38:81:44:36:f7:49:d9:2e:cb:a5:c9:
                    a5:f3:60:3b:0e:a4:ec:03:80:44:5d:03:71:b9:a5:
                    b5:c0:1f:24:0e:49:cb:34:76:9e:c8:0c:df:4c:a8:
                    74:be:3c:f8:11:31:10:4f:dc:d5:26:ac:19:28:c7:
                    77:38:65:c1:79:d7:c0:ae:f4:27:16:2c:51:73:b5:
                    ca:cc:f4:74:26:b8:23:60:69:f0:1e:25:6b:3a:42:
                    26:63:23:e9:cc:ce:5b:49:32:25:99:7e:92:ac:5d:
                    10:1a:ab:6a:73:8e:3e:b6:71:d9:e7:b6:32:c6:8c:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B6:33:42:61:17:7D:FC:7B:9E:F3:C9:C5:DD:F6:92:DF:63:00:12
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:bd:a2:15:e1:77:5f:cd:5f:06:01:12:fe:b1:d6:bb:91:
         4d:69:5f:a6:e5:26:52:68:55:49:e8:e2:b1:76:68:73:fc:48:
         db:e0:83:60:07:b9:09:2e:b5:d2:09:30:5c:33:25:65:92:0f:
         10:fd:46:8b:ca:22:4f:62:33:88:2e:cd:03:18:60:a2:06:d4:
         87:d9:42:7a:99:f4:05:ba:dc:fb:cb:96:e7:91:64:a2:69:27:
         87:bf:ae:a3:3a:c2:18:13:8f:45:3f:69:f3:56:16:9e:14:8c:
         de:e0:56:ca:de:5c:ff:5d:bb:88:06:88:95:d1:25:4c:97:28:
         ff:10:23:cc:32:e8:28:42:fb:59:93:1d:df:d4:a3:88:9e:25:
         df:fd:15:52:53:64:0b:92:7d:bb:c6:ec:4d:80:af:ca:84:42:
         c1:57:e5:7f:a8:d2:f4:16:c8:94:4c:70:8a:6b:22:09:3b:7c:
         de:15:30:4e:8a:04:60:70:27:f0:31:5b:c3:f4:f4:cb:3d:5c:
         80:21:8d:25:c8:c7:2e:0e:81:da:91:2f:5e:a3:c7:d7:f7:0e:
         71:4a:0d:80:a8:69:d5:89:7c:37:f2:71:ea:74:db:ed:57:89:
         6f:19:76:42:24:63:ef:ca:4c:4c:37:a9:1d:85:22:c8:ca:b2:
         c4:67:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:41:55 2025 by rpki-client