Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File:                     yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier:          hE7yvS6+YWOHRfEwrNLaD9eNrmQhzi91idDTk1SIQ+A=
Subject key identifier:   BD:C8:A8:BC:D5:7C:EC:23:47:CB:B7:19:AF:C9:28:12:97:00:59:90
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number:          0217
Signing time:             Sat 09 Aug 2025 02:30:14 +0000
Manifest this update:     Sat 09 Aug 2025 02:30:13 +0000
Manifest next update:     Sat 16 Aug 2025 02:30:13 +0000
Files and hashes:         1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: cLDySPvmIJKnYYnFXAIdSHFS1j9AShe8tTPJvc2sg5o=)
                          2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
                          rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: Aug  9 02:30:13 2025 GMT
            Not After : Aug 16 02:30:13 2025 GMT
        Subject: CN=6896b2b5-4745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:98:9b:77:2e:8b:27:90:71:84:c6:ef:6b:
                    cb:33:dc:7a:92:e3:7b:de:64:36:7e:6d:cd:28:6c:
                    48:68:3b:de:b0:df:f2:e9:41:4c:24:8a:69:53:8c:
                    d9:26:c6:15:eb:07:75:1d:64:86:52:ee:a4:6e:58:
                    a1:fc:ff:b8:f7:f6:82:ce:39:2a:0a:b7:c4:1d:dc:
                    b2:e3:ae:cd:2a:81:2a:5b:2a:13:45:56:f7:fb:d9:
                    8e:5a:6e:c6:20:f7:60:16:57:01:9e:3d:2a:9e:97:
                    4d:6f:e2:65:71:32:52:f1:f5:01:5f:23:40:b1:eb:
                    b0:a5:42:7f:cf:ab:e9:3b:95:51:7a:cc:67:9c:eb:
                    dc:33:a6:db:cf:f2:0b:bd:74:5f:42:59:df:73:91:
                    01:a6:55:00:3a:12:2b:13:ff:62:23:de:e5:eb:5f:
                    35:29:8b:18:ad:68:72:59:f5:c8:2d:01:ff:41:a2:
                    88:c0:d3:4e:fb:1f:2b:27:d4:9e:3a:33:96:cc:e6:
                    33:a6:3d:8c:86:b8:5a:a1:4c:3c:d2:a7:d4:19:dd:
                    28:ad:e7:db:49:c2:28:05:9d:04:1a:1b:df:16:c0:
                    b1:3c:eb:b8:eb:75:16:68:50:b1:18:76:6f:55:8f:
                    8d:cc:3a:52:dd:02:4b:4c:e6:64:aa:ab:20:cf:d9:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:A8:BC:D5:7C:EC:23:47:CB:B7:19:AF:C9:28:12:97:00:59:90
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:73:2b:1c:b9:af:ab:96:c6:5f:b2:31:bf:f4:55:2d:71:
         df:70:e1:15:e2:6f:f5:56:bb:2f:96:f9:ee:75:22:6f:8b:85:
         ec:31:13:87:86:3c:81:88:ae:4e:4d:3f:65:fb:8c:ac:eb:5d:
         73:dc:0d:e5:9d:a0:4f:23:50:e7:8c:ad:31:9a:d1:4c:84:bf:
         99:0b:b9:0f:ab:7f:13:36:8b:7d:bc:16:09:2e:c6:e3:17:87:
         14:7a:53:7d:ae:b1:3c:7c:7a:53:03:81:bd:f3:47:c7:85:42:
         46:7d:40:ce:94:53:d3:92:03:bd:9d:79:91:a7:25:9a:00:b1:
         cf:17:55:b3:04:a2:29:20:f2:cb:b6:05:a2:4f:be:c7:10:44:
         87:f8:44:a5:ab:dd:60:02:dd:61:9b:b6:e2:0c:40:2c:7a:c7:
         73:59:3c:a7:6e:34:57:97:41:b2:74:1c:34:0c:fd:80:e2:63:
         00:3d:9e:75:74:5a:ed:a4:7c:e1:09:fd:86:25:fc:63:8f:e1:
         19:85:2a:6d:2e:bf:a8:81:7e:c3:f3:24:32:2f:df:27:62:19:
         45:e4:3c:28:04:3d:33:8f:80:29:9e:2a:70:30:67:cd:03:5e:
         bd:71:1a:80:47:a2:c2:6c:e0:ea:41:d3:b9:7d:7a:2b:c5:5b:
         20:8c:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:38 2025 by rpki-client