Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
File:                     ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json)
Hash identifier:          ojJMspqyBSGxmubW77tbGPJwyEPo33qw0tlg16Zb/cE=
Subject key identifier:   A6:23:67:C0:F6:2B:11:D1:B1:0D:F9:10:6C:B6:C3:51:1E:6B:D1:E2
Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
Certificate issuer:       /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Certificate serial:       0995
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
Manifest number:          098E
Signing time:             Wed 06 Aug 2025 20:23:40 +0000
Manifest this update:     Wed 06 Aug 2025 20:23:40 +0000
Manifest next update:     Wed 13 Aug 2025 20:23:40 +0000
Files and hashes:         1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: JxuHmvwuXElAklADG+6+tyoFlvEnwi8ODI6tWoHSRAQ=)
                          2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
                          rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
        Validity
            Not Before: Aug  6 20:23:40 2025 GMT
            Not After : Aug 13 20:23:40 2025 GMT
        Subject: CN=6893b9cc-7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:d3:ac:1d:4c:a7:28:20:c0:fc:f9:cb:6a:
                    15:ff:7b:d9:33:da:c0:d2:e2:94:ac:06:51:34:6f:
                    0b:39:0f:81:ff:56:7e:c0:c5:ba:1b:d9:55:c6:fa:
                    9f:00:12:f8:92:e6:b3:59:06:61:7c:a3:e4:a1:c4:
                    ca:c9:2e:3f:f2:40:0b:ea:bf:d1:f4:f0:09:30:bb:
                    f3:28:65:9c:c2:d5:5d:82:c5:bf:a2:e5:e7:5f:46:
                    ce:a1:b6:74:f7:90:1f:4c:92:9b:e8:0c:da:bf:ef:
                    d4:f8:21:55:71:05:ff:13:8f:41:0b:9b:68:6d:9d:
                    8c:12:36:67:52:ff:1d:1c:66:68:b1:c5:f8:a3:93:
                    68:d4:34:60:06:76:85:b3:db:78:c7:4c:4f:e2:83:
                    1b:cc:dd:17:50:63:cf:f0:12:12:67:d2:9b:5d:8a:
                    28:f1:61:92:c0:3a:78:29:2b:20:a9:4c:c7:d0:a5:
                    a3:b3:90:2e:fb:51:fb:1e:34:fd:95:ae:a1:a1:09:
                    2c:10:7d:e2:6d:3f:86:36:b6:72:f7:05:7e:77:9c:
                    20:9e:ba:55:7c:12:aa:5c:84:74:e1:03:71:1b:9b:
                    43:19:c7:f2:fe:7c:4f:44:59:6a:0d:a9:80:b2:bb:
                    24:29:17:5a:a2:ea:3b:bb:f4:21:f9:bb:39:3b:91:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:67:C0:F6:2B:11:D1:B1:0D:F9:10:6C:B6:C3:51:1E:6B:D1:E2
            X509v3 Authority Key Identifier:
                keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:44:91:24:42:1f:ed:14:4c:f4:a4:85:48:36:78:da:8b:53:
         e8:09:f5:69:d6:48:e3:a6:f2:c3:a9:cf:13:31:e7:95:33:4c:
         23:c1:dd:a9:d7:f9:d5:49:56:a5:00:79:9c:d5:33:61:c4:53:
         9c:74:39:6f:df:9f:c7:5b:bd:61:81:ae:71:8c:98:1a:68:7b:
         42:b4:88:89:b4:5d:94:d7:63:de:a0:83:ac:b0:6b:85:78:f2:
         a4:b3:ad:75:a6:7e:eb:53:6f:5e:b2:74:9a:9b:bd:5d:a0:89:
         a5:58:9f:b0:9f:38:1b:83:8f:30:1f:44:7e:48:5f:57:b6:8c:
         1f:5b:c2:ff:37:dc:56:7b:2b:e3:f1:2b:9c:5b:7c:25:75:05:
         80:c6:a6:34:d0:fc:40:fd:9d:40:5e:89:35:ed:c1:8f:81:16:
         5e:ba:6c:5f:8e:f8:03:48:90:e2:87:69:1b:7f:0c:4a:2f:ed:
         ea:fe:75:8e:43:a7:80:02:93:05:95:1d:8f:65:60:fc:42:39:
         a9:b1:2f:63:30:c5:a6:e9:7c:6e:85:91:7f:91:03:34:ca:72:
         5e:e0:76:27:a8:40:30:c9:35:2e:e7:fc:a9:29:30:4e:b3:76:
         9c:36:40:cf:8b:a5:8a:36:7b:9e:7d:45:e6:d1:76:1b:cb:fd:
         fc:0f:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:37 2025 by rpki-client