Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File:                     YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier:          1qDZ8VGDk60s9vQcunS4p/KefOqwnxVW/JiobToBMpI=
Subject key identifier:   BB:4D:A5:B1:1D:D1:74:4D:1F:5E:FE:8B:7E:74:D2:9F:23:E6:E8:B0
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer:       /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number:          07A0
Signing time:             Fri 18 Jul 2025 21:34:16 +0000
Manifest this update:     Fri 18 Jul 2025 21:34:16 +0000
Manifest next update:     Fri 25 Jul 2025 21:34:16 +0000
Files and hashes:         1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: +p0N119KrfFzWpMA+EX1LPFzHaoYQoCOEqxGJRPalss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
                          rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
        Validity
            Not Before: Jul 18 21:34:16 2025 GMT
            Not After : Jul 25 21:34:16 2025 GMT
        Subject: CN=687abdd8-c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:16:27:19:8a:86:b3:f0:ad:29:e6:4c:86:
                    6d:a1:eb:0b:34:02:87:90:58:e7:f6:87:18:b6:25:
                    a3:c9:93:70:fe:b0:03:91:51:0f:2f:75:65:40:34:
                    6d:e9:b1:8c:36:f1:3d:e1:4a:05:04:f3:f8:23:93:
                    76:c3:72:43:86:24:af:d5:2f:fc:e5:19:f2:5c:36:
                    f7:fd:bf:e8:3f:5e:41:fe:72:2d:2c:be:51:09:e7:
                    6a:b5:9b:ce:ce:d4:e4:14:7b:d2:3d:e1:73:ea:d5:
                    33:63:fe:46:41:90:4c:b2:08:49:e4:c1:bc:1a:cd:
                    13:75:00:e0:15:9a:0d:55:f2:bf:6f:07:26:27:20:
                    6f:f1:72:fa:07:5a:0f:f2:1a:3f:1c:03:2a:2a:90:
                    d6:3f:d8:99:84:18:cf:fa:6f:60:ca:71:21:16:21:
                    8c:ad:7d:bc:e2:0b:a4:3a:cd:67:34:e1:f4:35:41:
                    b1:a4:74:c3:89:2d:ab:1e:82:0c:ea:73:b2:be:ec:
                    2e:8e:2f:1d:c8:70:16:75:cf:70:be:40:ca:b0:88:
                    a7:fc:c4:21:1e:12:62:5e:a6:3b:6b:4b:e2:37:2a:
                    60:c4:7c:74:77:91:2e:48:e1:4d:90:46:07:33:18:
                    60:5c:39:2d:08:b0:59:2e:62:34:b0:97:5f:d1:a1:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4D:A5:B1:1D:D1:74:4D:1F:5E:FE:8B:7E:74:D2:9F:23:E6:E8:B0
            X509v3 Authority Key Identifier:
                keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:c4:19:2d:08:fa:c8:df:86:bb:f4:ea:6d:2c:e8:33:7b:
         04:fe:23:91:f9:dd:72:1b:3e:3f:9b:21:25:35:da:ce:71:e9:
         8c:4f:42:47:c4:ec:70:2c:ef:cb:b3:98:92:4d:19:87:d5:4a:
         74:8e:61:29:c6:65:90:ed:9b:94:92:e6:90:e7:7d:27:65:45:
         f2:ee:4a:82:c3:89:d4:de:50:6f:a1:86:a5:97:75:55:b4:c9:
         3b:d7:54:2f:bd:f3:6f:49:53:53:ae:6f:80:ed:30:d6:50:c1:
         82:17:bb:c6:ba:ba:4c:bb:ee:7a:c3:74:ba:4b:ee:fe:13:db:
         bc:b1:f5:b6:9e:ea:40:65:36:6e:49:12:5b:91:1e:51:71:7e:
         a9:0e:47:b1:a2:45:48:c1:dd:0b:98:b9:15:0f:58:73:4a:81:
         99:4e:25:51:f7:1a:50:be:67:83:b6:f1:45:ef:91:d8:5c:96:
         81:c1:9d:b4:79:62:11:31:a1:3c:17:cf:c8:98:29:70:ae:cd:
         b9:18:d4:73:5f:68:1e:84:28:00:44:2e:a2:e1:42:db:f6:f1:
         b9:9d:a8:41:76:fd:c6:78:c9:26:5b:97:07:7e:7f:b4:52:66:
         55:f9:dc:20:c6:ca:3e:af:c9:41:e6:a4:e4:d9:0e:fa:18:15:
         74:d0:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:50:47 2025 by rpki-client