Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
File:                     yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json)
Hash identifier:          3wxjI3ln12t+qwXb8kfG6lTlrzM+SOa5Bj8HpE2JsOY=
Subject key identifier:   B6:B1:83:58:41:F7:25:FD:A1:6C:59:E2:B3:45:29:84:7D:E1:D7:DE
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
Manifest number:          76
Signing time:             Mon 21 Jul 2025 07:02:14 +0000
Manifest this update:     Mon 21 Jul 2025 07:02:14 +0000
Manifest next update:     Mon 28 Jul 2025 07:02:14 +0000
Files and hashes:         1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: zGTl25VTHQexlLQHPIwF5n/2OWZMaqtBwWOpNWRfmJE=)
                          2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Jul 21 07:02:14 2025 GMT
            Not After : Jul 28 07:02:14 2025 GMT
        Subject: CN=687de5f6-6048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:b7:b9:88:ad:04:f0:d4:2f:37:4a:e9:bf:
                    3c:fd:43:60:6f:ab:ca:21:69:b4:52:e4:19:f9:66:
                    6c:56:94:d2:b4:83:93:01:d5:1a:68:fb:c4:bf:6c:
                    c0:2b:dc:a0:b2:a9:3e:ea:92:66:7e:cd:61:2e:73:
                    f7:b0:94:bc:dc:50:a8:e1:60:50:09:97:cf:31:9d:
                    90:87:74:b0:c5:89:68:b4:39:09:ec:1c:08:e6:84:
                    f7:56:fa:d3:c7:93:13:49:fb:a0:39:01:ea:3c:0a:
                    14:43:91:18:78:66:ce:56:4f:60:f7:2c:d0:5b:f6:
                    4b:50:f8:4c:f2:4c:c3:48:1d:c1:81:df:a1:a2:6d:
                    53:f5:a4:e8:8b:ce:cc:0e:9a:b1:c4:73:7e:5a:21:
                    ff:19:98:29:6f:79:5e:8a:3e:bb:68:2f:1c:78:9c:
                    16:6e:cf:69:30:66:37:ea:60:d9:cf:53:39:13:04:
                    63:d6:fa:95:03:54:b8:ba:94:12:af:38:35:d3:36:
                    5b:14:bd:e7:0b:1a:59:59:65:98:b9:f2:7b:cd:07:
                    7d:75:0d:7f:c5:c7:3b:c1:31:b5:96:c5:4f:ef:13:
                    4d:71:3e:ef:76:b5:06:52:26:cf:0c:48:95:9f:89:
                    f4:4f:06:b6:ea:11:bb:c0:95:52:58:7c:09:f1:fd:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:83:58:41:F7:25:FD:A1:6C:59:E2:B3:45:29:84:7D:E1:D7:DE
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:21:57:5e:16:2b:d5:f4:af:39:0c:2d:60:01:ff:d0:d7:
         f8:e6:d7:84:47:04:33:33:63:b7:89:cc:0a:d9:18:50:ec:b4:
         ab:3a:69:47:34:a6:75:07:ba:6c:b7:c0:0d:94:0a:67:e2:8d:
         c9:6e:1e:8f:17:e9:c1:3d:9b:60:8f:d0:9f:44:d9:f4:9a:fd:
         ea:82:48:06:e6:16:b2:80:23:0f:77:49:1d:fe:7a:64:c0:73:
         0c:0d:03:5a:c0:9d:b9:26:40:9c:99:43:fc:e6:07:37:4e:11:
         9f:a3:da:bb:fb:96:94:fd:f4:46:b5:b1:59:02:64:3e:88:e4:
         c3:eb:a2:16:8c:76:c1:4a:1d:81:af:38:f0:d9:81:95:d7:a2:
         83:be:c7:e8:18:ca:5d:63:6d:20:fa:98:c4:2b:ce:14:ca:68:
         da:33:89:b6:ee:53:09:c9:e5:61:58:df:82:bf:54:e4:ae:3d:
         96:45:7c:85:98:a5:fa:9e:08:a8:e9:0d:83:74:86:d9:df:50:
         cd:c1:f2:35:09:02:f1:bd:04:5a:13:90:82:74:b7:0b:24:24:
         c5:b9:35:6c:ae:ff:36:e9:26:7e:b9:bc:df:64:0c:5f:8c:91:
         31:86:05:08:de:ed:8a:c5:92:20:65:bb:5d:fa:79:81:12:6a:
         cc:e5:63:37
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0
MzI2RDlEMzAeFw0yNTA3MjEwNzAyMTRaFw0yNTA3MjgwNzAyMTRaMBgxFjAUBgNV
BAMTDTY4N2RlNWY2LTYwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPmLe5iK0E8NQvN0rpvzz9Q2Bvq8ohabRS5Bn5ZmxWlNK0g5MB1Rpo+8S/bMAr
3KCyqT7qkmZ+zWEuc/ewlLzcUKjhYFAJl88xnZCHdLDFiWi0OQnsHAjmhPdW+tPH
kxNJ+6A5Aeo8ChRDkRh4Zs5WT2D3LNBb9ktQ+EzyTMNIHcGB36GibVP1pOiLzswO
mrHEc35aIf8ZmClveV6KPrtoLxx4nBZuz2kwZjfqYNnPUzkTBGPW+pUDVLi6lBKv
ODXTNlsUvecLGllZZZi58nvNB311DX/FxzvBMbWWxU/vE01xPu92tQZSJs8MSJWf
ifRPBrbqEbvAlVJYfAnx/aNpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtrGDWEH3
Jf2hbFnis0UphH3h194wHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz
MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm
eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFehIVdeFivV9K85DC1gAf/Q1/jm14RHBDMzY7eJzArZGFDstKs6aUc0
pnUHumy3wA2UCmfijcluHo8X6cE9m2CP0J9E2fSa/eqCSAbmFrKAIw93SR3+emTA
cwwNA1rAnbkmQJyZQ/zmBzdOEZ+j2rv7lpT99Ea1sVkCZD6I5MProhaMdsFKHYGv
OPDZgZXXooO+x+gYyl1jbSD6mMQrzhTKaNozibbuUwnJ5WFY34K/VOSuPZZFfIWY
pfqeCKjpDYN0htnfUM3B8jUJAvG9BFoTkIJ0twskJMW5NWyu/zbpJn65vN9kDF+M
kTGGBQje7YrFkiBlu136eYESaszlYzc=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:51:21 2025 by rpki-client