Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
File:                     yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json)
Hash identifier:          7UsJ09riQJ3krjYfGcCMWahvXnn7f3VIWb7RSxj8FvU=
Subject key identifier:   FC:A6:AF:01:8A:B1:C5:0F:9D:D7:AF:D0:55:51:D5:EA:8B:4D:F4:83
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Certificate issuer:       /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
Manifest number:          07CF
Signing time:             Wed 20 Aug 2025 21:15:08 +0000
Manifest this update:     Wed 20 Aug 2025 21:15:07 +0000
Manifest next update:     Wed 27 Aug 2025 21:15:07 +0000
Files and hashes:         1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: JBU3446U5tvLMsNIq5UiKVZUhSAh9NkPtO5FVw31Mc4=)
                          2: C6C096F68D0D11EFB98F225AC4F9AE02.roa (hash: su7egZKtlIHvZSkBil+sdBU+A6UZiBi6htUGZJ9uQWk=)
                          3: 7A5654CE358A11F0A6A3E84EC4F9AE02.roa (hash: N8kdn2V8EZIOyusFs+MBuXA53AI0lnj5zAbSx3Fpj8A=)
                          4: B8BB04788D0E11EF9759C171C4F9AE02.roa (hash: ziqkS/uS0bV8N47pgwrjsdLrHiWSJcSBhbH8fskYULw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
                          rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 21:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
        Validity
            Not Before: Aug 20 21:15:07 2025 GMT
            Not After : Aug 27 21:15:07 2025 GMT
        Subject: CN=68a63adc-c6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:04:82:f6:d1:79:b8:65:b1:5e:3a:56:0b:
                    27:6f:fd:d9:b8:65:f4:7c:be:75:8f:66:7a:69:97:
                    f7:6a:0f:e3:2a:af:09:53:94:26:97:0b:b2:7d:2a:
                    13:59:f5:e1:ca:6b:2d:88:2e:44:7c:79:e1:31:e7:
                    a8:05:e5:4f:9d:79:3b:f2:c6:3c:ef:78:7a:25:6d:
                    67:a4:67:01:c3:aa:08:c0:b8:3f:fe:4f:df:7a:c4:
                    a3:c8:b7:ad:b2:65:24:c5:8b:c4:da:a5:75:2f:47:
                    d2:2b:56:ca:db:c9:7b:68:f0:3c:04:fa:d1:c0:72:
                    33:cc:e6:d1:0e:f4:93:45:1a:de:b9:b2:eb:b3:f0:
                    8b:9f:3c:be:12:23:5a:11:a8:f1:3f:d3:fe:55:b6:
                    61:a2:96:a6:78:6b:eb:b8:9a:0c:9b:8f:10:a1:3b:
                    be:5c:12:2f:cc:70:22:1a:73:2b:9d:dd:80:04:9b:
                    78:9d:49:cb:7e:fa:ef:8e:63:26:f0:e1:32:db:42:
                    4f:4e:b9:44:3b:47:f2:b8:db:6f:80:88:75:b0:c1:
                    7e:0b:6e:a9:f6:1a:71:d6:c5:72:5b:eb:11:7b:2f:
                    b5:f4:c7:60:b0:85:98:da:93:46:6e:be:f8:6b:42:
                    83:d9:53:f2:e3:76:7d:98:30:58:0c:04:85:38:5b:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:AF:01:8A:B1:C5:0F:9D:D7:AF:D0:55:51:D5:EA:8B:4D:F4:83
            X509v3 Authority Key Identifier:
                keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:dd:98:4e:78:a8:0e:e5:e0:2a:ba:fd:5e:3f:50:a9:e5:
         2d:97:2a:2f:47:10:19:83:d3:a7:e6:38:da:9a:c2:7a:7e:d7:
         99:e9:1a:2d:72:89:7e:56:41:8e:60:50:72:a1:ec:78:04:24:
         bf:b8:2a:91:e5:e8:c5:d2:37:02:05:b3:ae:73:fa:a8:cd:aa:
         18:9d:8b:65:b1:6b:45:e9:7e:25:3e:b8:9c:22:8f:9d:44:50:
         99:f5:bc:19:1c:d2:3f:b7:fb:20:2b:c1:15:06:93:52:df:60:
         ef:a9:45:88:02:32:18:a9:c1:9c:05:21:3c:60:20:75:a2:d7:
         1d:53:b2:02:da:aa:fd:0c:db:5e:a5:87:b0:44:6a:4f:81:c5:
         0f:09:e0:cf:04:fd:2a:42:43:ce:8f:1f:f8:b9:df:dd:2a:5d:
         4a:9c:98:10:2c:6d:60:7d:6c:c9:a3:4e:94:a0:50:7b:c5:0f:
         d5:c5:91:23:f7:41:b4:e6:a2:0c:74:33:dc:ce:ff:d0:ca:d2:
         ff:60:de:20:f0:2a:c3:cd:64:37:ec:55:50:dc:36:c8:ad:bb:
         b5:e8:79:61:11:8f:f5:70:73:d0:69:23:53:a2:77:c2:8e:b4:
         c0:c5:b5:d5:5e:7a:7b:21:21:d1:66:09:b8:5d:34:c7:17:18:
         5a:81:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:20:10 2025 by rpki-client