Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
File:                     yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json)
Hash identifier:          icOOI6YKA71qQDQYX7uNbu3bm/XJTmbkKKB4SkhN2Fo=
Subject key identifier:   15:C6:04:C6:AC:16:20:CE:C8:4E:6B:06:BD:02:7D:80:94:96:3C:27
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Certificate issuer:       /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
Manifest number:          0736
Signing time:             Sat 31 May 2025 00:45:35 +0000
Manifest this update:     Sat 31 May 2025 00:45:34 +0000
Manifest next update:     Sat 07 Jun 2025 00:45:34 +0000
Files and hashes:         1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: 5JLZooamaP1LCvvyXtuG76LsAJihkO8UJg77cfKoilQ=)
                          2: 36EA74DAB55C11EF9EF5381AC4F9AE02.roa (hash: L0ogohbd+XG2Rt92PSkXg3Zj7mjIKhleupD8sB/ULt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
        Validity
            Not Before: May 31 00:45:34 2025 GMT
            Not After : Jun  7 00:45:34 2025 GMT
        Subject: CN=683a512e-fb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:51:47:48:cd:96:de:19:c8:6c:88:85:44:
                    04:46:f5:f9:c6:93:47:e3:de:28:37:59:a9:f8:39:
                    6d:16:5b:00:d6:69:43:5b:0b:34:00:5d:84:91:9c:
                    c5:5f:89:c2:93:42:d1:89:8c:d6:81:5b:9c:97:ad:
                    95:03:12:fd:f6:35:ad:58:59:75:0d:45:f3:e1:c6:
                    31:36:50:52:22:de:f5:ce:e8:54:d5:db:0d:f8:9c:
                    72:54:ca:e8:03:9e:25:22:49:ed:eb:4d:f4:94:5c:
                    16:67:59:b1:11:76:bc:78:7c:95:fd:44:6f:d3:f9:
                    53:76:04:bb:26:10:89:63:44:fd:c5:d5:33:ff:b9:
                    90:80:34:93:a5:62:0a:37:1b:f7:bf:b5:4f:8f:3d:
                    a5:4f:50:7c:0e:d9:56:47:fd:69:2f:0a:b6:44:22:
                    21:45:c6:8f:47:19:5e:0b:1d:94:f9:85:29:14:c7:
                    4f:91:a4:e9:83:34:04:50:89:b7:7e:e8:aa:ca:52:
                    8f:11:ac:6c:b1:da:5b:38:51:cf:fc:b2:8b:5c:e0:
                    cf:1d:f1:3f:9c:c5:15:ba:e5:bf:33:f7:0c:79:d2:
                    08:30:4a:fc:e4:85:22:50:01:44:9c:c7:a7:42:e9:
                    77:b9:f1:0c:69:dc:66:49:89:6a:2f:77:44:b4:18:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:04:C6:AC:16:20:CE:C8:4E:6B:06:BD:02:7D:80:94:96:3C:27
            X509v3 Authority Key Identifier:
                keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:10:5e:ae:62:ed:8b:da:3c:eb:bf:69:6b:0c:4c:eb:27:9d:
         1c:d6:a8:ad:f3:20:c5:56:9a:2a:6f:8a:4e:da:43:19:10:93:
         35:af:19:48:0f:fd:23:b1:79:09:69:4c:66:01:d5:ab:d5:37:
         4b:b3:1d:32:53:d0:d6:ee:73:c7:13:bf:2b:f2:1d:27:1e:1e:
         49:90:b3:ca:c3:5a:19:16:05:95:25:9d:df:de:45:0b:d5:6c:
         0d:e2:3d:52:40:27:69:04:cb:d0:22:42:56:07:75:42:f5:ac:
         49:09:b8:7f:3c:9f:78:df:55:29:b7:e2:c0:e3:0b:94:eb:fd:
         a6:40:eb:75:4f:88:85:d6:a9:2a:d6:bf:bc:82:74:4e:ad:be:
         aa:41:10:0c:b8:46:20:18:7f:06:a4:e7:37:0a:f3:c7:0a:b6:
         43:65:ad:27:12:9e:a5:34:ce:b6:94:ff:9e:bf:ea:3b:08:99:
         42:97:2d:ec:e9:10:08:87:a7:ad:87:ca:40:23:d6:d0:21:5e:
         7b:88:86:f3:d1:2e:2e:fd:85:10:71:8e:84:e1:2b:d5:47:f4:
         75:33:4c:18:53:05:fd:9f:8f:ba:15:34:26:f6:52:3f:c0:72:
         58:ae:c0:a4:15:14:7a:28:8e:7f:fe:4c:df:d2:c2:14:04:6d:
         b3:81:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:01:13 2025 by rpki-client