Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
File:                     7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json)
Hash identifier:          ciUie/EmQB6WO66Al1/fZz8TNsXa4xdUV+RG+i/Oxug=
Subject key identifier:   79:BD:22:85:ED:93:7C:51:9E:DD:80:F3:5F:CC:E6:87:0A:DB:0E:16
Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70
Certificate issuer:       /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
Certificate serial:       0DA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
Manifest number:          13A2
Signing time:             Thu 18 Sep 2025 18:06:08 +0000
Manifest this update:     Thu 18 Sep 2025 18:06:07 +0000
Manifest next update:     Thu 25 Sep 2025 18:06:07 +0000
Files and hashes:         1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: HHXQm77knFNS7kl0dumqZ6bsGnm6R5mXQD4Sh0RKaEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
        Validity
            Not Before: Sep 18 18:06:07 2025 GMT
            Not After : Sep 25 18:06:07 2025 GMT
        Subject: CN=68cc4a0f-0819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:39:cd:6d:db:e5:de:8f:a9:bb:db:86:46:
                    ce:03:63:f7:9d:15:aa:28:ba:e1:fb:86:2d:0b:cc:
                    34:68:05:90:6b:16:c5:80:fb:34:8e:f4:35:30:8e:
                    9b:ea:36:54:4f:c9:8c:9b:26:d6:b9:b2:8c:e6:79:
                    73:ff:bc:ed:9e:31:a1:cd:08:5c:1a:cb:40:5c:3f:
                    7e:14:67:37:24:8d:ca:0d:67:3d:92:75:8c:7d:41:
                    02:3f:11:63:2a:29:e9:d1:d8:d5:66:d8:c2:8b:93:
                    51:4b:8f:79:3c:d5:c9:29:f9:d2:83:3e:65:1f:fa:
                    55:bf:2a:d5:b3:d5:bc:5b:49:92:86:f8:a2:e5:7c:
                    ac:9f:66:b8:49:26:4d:a4:92:cb:93:fc:46:59:75:
                    c1:ad:da:53:9d:d9:78:10:41:ae:8f:a6:67:5d:ec:
                    17:50:4b:31:49:c3:d7:9d:28:82:3a:7a:47:a2:67:
                    03:16:2d:23:9c:2a:fa:50:cb:b3:79:43:a5:80:93:
                    73:b7:48:48:07:89:63:75:07:10:1e:ed:61:27:ce:
                    57:de:dc:e3:f2:e7:a1:67:b1:22:ef:95:33:97:f7:
                    dc:5a:a4:7a:52:51:db:e0:e1:2a:c2:f5:7c:25:01:
                    ce:39:6d:4f:1c:0c:99:b9:d0:b5:e2:d1:73:fa:96:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:22:85:ED:93:7C:51:9E:DD:80:F3:5F:CC:E6:87:0A:DB:0E:16
            X509v3 Authority Key Identifier:
                keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:25:24:77:de:3f:82:c0:4e:31:da:c7:4d:b1:b0:8f:da:fb:
         e8:51:a9:35:7b:89:73:9f:a4:40:3a:df:cb:dd:d7:7d:9d:ba:
         68:9a:db:9d:22:66:a5:1f:f7:ea:f6:3e:a0:e0:db:52:50:26:
         59:98:8e:e7:7d:e8:d6:31:87:e4:56:7f:8b:e9:aa:90:6c:dc:
         0c:79:b1:3c:3b:07:e4:34:3d:fa:14:a3:e1:e4:9f:a7:f7:b1:
         1f:fd:e3:76:72:87:62:48:2a:8e:fb:23:24:ea:08:59:74:64:
         f8:52:2c:10:26:1e:6f:79:a3:3d:a7:b5:39:a4:b1:31:23:63:
         dc:ee:0f:db:17:69:67:b0:90:33:46:df:87:b6:cd:09:15:96:
         ca:43:d6:c6:c8:cd:79:2d:48:62:93:b5:ef:39:fa:f8:bf:89:
         47:d9:90:a6:6b:02:a9:a6:e1:c9:99:81:bd:24:d3:ec:bc:96:
         b9:76:61:cc:5c:0f:2a:1d:eb:47:22:5f:85:72:a3:ee:c7:09:
         cc:67:3c:dd:5b:bb:22:70:c3:76:87:44:30:2f:26:22:66:b0:
         71:c3:44:5e:c9:f0:ca:23:0f:14:32:4f:b8:bc:a8:4f:fe:49:
         dc:21:87:05:f0:f4:8e:b5:31:be:98:bc:79:15:30:0f:19:b4:
         56:a7:40:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF
ODAyQTlCNzAwHhcNMjUwOTE4MTgwNjA3WhcNMjUwOTI1MTgwNjA3WjAYMRYwFAYD
VQQDEw02OGNjNGEwZi0wODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KE5zW3b5d6PqbvbhkbOA2P3nRWqKLrh+4YtC8w0aAWQaxbFgPs0jvQ1MI6b
6jZUT8mMmybWubKM5nlz/7ztnjGhzQhcGstAXD9+FGc3JI3KDWc9knWMfUECPxFj
Kinp0djVZtjCi5NRS495PNXJKfnSgz5lH/pVvyrVs9W8W0mShvii5Xysn2a4SSZN
pJLLk/xGWXXBrdpTndl4EEGuj6ZnXewXUEsxScPXnSiCOnpHomcDFi0jnCr6UMuz
eUOlgJNzt0hIB4ljdQcQHu1hJ85X3tzj8uehZ7Ei75Uzl/fcWqR6UlHb4OEqwvV8
JQHOOW1PHAyZudC14tFz+pa9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm9IoXt
k3xRnt2A81/M5ocK2w4WMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB
RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt
bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAJSR33j+CwE4x2sdNsbCP2vvoUak1e4lzn6RAOt/L3dd9nbpomtud
ImalH/fq9j6g4NtSUCZZmI7nfejWMYfkVn+L6aqQbNwMebE8OwfkND36FKPh5J+n
97Ef/eN2codiSCqO+yMk6ghZdGT4UiwQJh5veaM9p7U5pLExI2Pc7g/bF2lnsJAz
Rt+Hts0JFZbKQ9bGyM15LUhik7XvOfr4v4lH2ZCmawKppuHJmYG9JNPsvJa5dmHM
XA8qHetHIl+FcqPuxwnMZzzdW7sicMN2h0QwLyYiZrBxw0ReyfDKIw8UMk+4vKhP
/kncIYcF8PSOtTG+mLx5FTAPGbRWp0C4
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:43:21 2025 by rpki-client