Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File:                     cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier:          TYz9iuSx91tiXuUzx3f1JakIcOKw5VmNEj0SphbSsqk=
Subject key identifier:   DF:B0:A9:6B:59:25:55:C8:90:68:63:76:7F:79:30:6A:A1:9F:E8:0E
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer:       /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial:       06D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number:          1F8E
Signing time:             Fri 08 Aug 2025 16:13:00 +0000
Manifest this update:     Fri 08 Aug 2025 16:12:59 +0000
Manifest next update:     Fri 15 Aug 2025 16:12:59 +0000
Files and hashes:         1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: kUvTVA/X5yyacgmbFbOuYcyveeSHKGuJsDbWXNzWgYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
                          rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
        Validity
            Not Before: Aug  8 16:12:59 2025 GMT
            Not After : Aug 15 16:12:59 2025 GMT
        Subject: CN=6896220b-a7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:ba:75:33:22:99:20:3f:4e:81:b6:a3:78:
                    d6:d4:bc:cf:2f:d1:12:2c:e3:14:d4:fd:53:76:a3:
                    9d:88:b2:91:5d:6b:01:c6:6b:f9:d8:c4:98:3f:0c:
                    97:6f:19:b6:f4:2f:08:d5:49:38:7d:90:f4:90:19:
                    46:e6:55:e6:4d:c8:8b:f2:cf:3d:ae:e1:af:92:02:
                    bb:84:55:0f:3f:09:cc:6c:e9:98:04:c7:b8:e2:d6:
                    d3:b2:e9:37:a9:0f:b8:0c:99:d7:43:b5:21:b0:c6:
                    2f:84:c3:58:aa:33:38:ca:ef:8a:1b:e8:dc:aa:bf:
                    f2:e1:6d:3c:a9:c9:2c:00:54:85:47:7d:09:d9:02:
                    f6:b5:74:4c:8c:cd:26:f7:ed:0e:c5:e0:b4:11:8f:
                    e3:bb:f2:17:9d:5c:90:c2:e9:f5:f6:d1:3f:c6:f2:
                    53:87:54:6f:82:3a:c2:dc:79:37:05:67:07:69:9e:
                    f5:20:bf:8f:9d:bf:6b:c2:08:e5:f2:1e:99:0f:f0:
                    e4:f6:48:43:2b:74:33:62:56:53:e2:d2:e8:bc:08:
                    3d:c3:16:c7:25:c7:04:16:cb:63:72:54:ec:1e:2e:
                    9d:80:c7:92:32:fc:aa:ce:18:ad:ae:c0:bb:8a:35:
                    db:d8:93:b3:7c:70:d0:5b:f3:c3:b7:df:f0:6d:0a:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B0:A9:6B:59:25:55:C8:90:68:63:76:7F:79:30:6A:A1:9F:E8:0E
            X509v3 Authority Key Identifier:
                keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:85:93:e6:7c:99:c1:9d:23:b7:63:ac:3a:7e:db:85:8c:
         95:bf:91:4d:a4:93:b5:df:a4:ff:33:d4:e7:52:05:63:30:23:
         4a:df:ec:38:46:2c:75:ed:79:f6:76:db:ec:29:87:6b:e3:8c:
         6f:7e:f7:23:9b:97:ea:f9:14:59:d3:43:1e:e4:36:89:a9:e6:
         cc:ca:bf:ff:ae:dd:7b:ea:e3:64:59:53:85:d7:5a:42:e4:2e:
         90:fe:31:45:02:b4:c7:60:35:47:7b:de:58:f5:a3:98:85:0d:
         7e:0a:69:d0:74:f0:9e:f5:c6:36:2b:bb:d1:29:94:47:5b:25:
         f6:9c:14:82:8f:1c:4d:69:a4:f6:42:f6:8e:28:cc:24:82:84:
         bd:4b:c1:36:44:3d:c1:48:e3:7f:f1:23:83:95:96:92:a6:5d:
         da:60:55:0c:a1:d3:96:f3:47:78:d0:53:c3:12:41:65:c5:8f:
         74:7b:e8:e7:b3:99:e2:32:c9:15:15:ed:db:03:cd:c1:41:70:
         97:ee:53:11:71:69:be:c7:14:e7:f7:45:57:bd:be:0a:13:e5:
         5a:48:46:f1:c5:68:62:b5:b6:87:35:8d:a4:77:59:d1:9a:07:
         b4:8d:a1:20:eb:22:78:e5:8f:f9:34:7a:2b:ee:fd:18:66:d2:
         ea:51:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:42 2025 by rpki-client