Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          oBAAdebajZJb5Vjc+5S13Cy3TyK1vMsvp82ePj+LjyQ=
Subject key identifier:   12:ED:FD:7C:F4:7A:92:CC:7A:44:3A:1C:09:1C:E6:56:A5:10:A9:DB
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       34AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          34AB
Signing time:             Sun 10 Aug 2025 14:55:13 +0000
Manifest this update:     Sun 10 Aug 2025 14:55:12 +0000
Manifest next update:     Sun 17 Aug 2025 14:55:12 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: /1pBWy9FgO0Cz1rY0uNF5rMor3p6BdgvAaZam0Jv6/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13483 (0x34ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Aug 10 14:55:12 2025 GMT
            Not After : Aug 17 14:55:12 2025 GMT
        Subject: CN=6898b2d0-4637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:2a:40:ce:84:75:a3:d3:ac:bd:40:ce:ff:
                    37:2a:99:6e:a2:16:bc:f3:25:ea:68:18:5b:3c:4c:
                    d4:13:e8:84:85:d9:b0:a5:ee:d6:e1:0b:67:c5:a5:
                    83:c6:60:c4:cf:d8:d7:ff:99:3d:94:af:f4:ad:0d:
                    3e:76:46:82:7e:55:f8:69:52:27:ba:e8:94:24:29:
                    f3:db:0a:bb:ba:1f:f1:98:1b:9f:41:8d:05:96:99:
                    77:2f:72:04:7b:34:2a:33:43:79:de:bb:01:0a:1f:
                    e4:2c:26:eb:04:97:1d:24:b5:54:72:32:b2:1d:25:
                    b2:81:6d:50:d8:ce:49:05:9a:d7:9f:7e:5a:e0:c4:
                    c6:4e:15:c9:44:b1:7e:be:75:28:1a:b0:5a:51:06:
                    67:d1:97:2d:fe:ae:4d:5b:52:20:5f:80:b1:3b:40:
                    2a:07:5b:58:f3:9d:ee:e1:15:78:c1:04:b6:57:9d:
                    66:1d:f3:9f:94:8d:fa:0f:bc:12:e1:02:fc:b0:88:
                    78:a3:14:87:0a:17:b6:d2:0d:6d:2b:9a:b8:eb:8f:
                    f3:b3:01:23:33:ba:73:18:91:94:50:cf:82:c7:8f:
                    4f:1f:70:fa:38:17:5f:ff:41:0c:be:51:22:93:68:
                    a5:90:de:0e:31:7a:69:24:d2:22:bd:ca:ed:aa:9c:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:FD:7C:F4:7A:92:CC:7A:44:3A:1C:09:1C:E6:56:A5:10:A9:DB
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:d5:c3:05:d0:f1:c6:c0:aa:3e:cc:b8:39:38:52:e3:b2:
         14:d2:c4:7c:94:dc:2e:0c:f2:42:9c:34:8d:84:89:82:15:8f:
         ce:a2:2b:40:33:3f:83:10:2b:03:91:7f:bd:29:23:ba:e8:58:
         30:85:51:d9:04:56:62:2b:ec:1f:72:f0:af:5e:d5:53:db:18:
         61:db:c0:c3:60:42:89:39:d6:0b:5d:f3:9f:e9:8a:59:07:66:
         e8:37:af:95:e2:b5:1e:38:9c:96:18:c0:cf:61:f2:31:50:23:
         0f:88:c8:5e:73:3b:88:fb:fe:3e:d4:23:be:19:94:de:c9:c4:
         15:83:0d:6a:de:3d:08:31:cd:81:54:09:03:f5:a3:2e:52:ba:
         0a:3e:f1:c3:bc:58:6b:c5:55:92:6f:b5:5b:dd:ac:5c:af:39:
         75:00:01:ce:a2:55:03:56:aa:3c:18:55:f2:32:11:f7:b8:40:
         9c:47:f1:2e:0f:ad:98:4b:14:d1:94:13:e9:91:9f:d1:ae:85:
         a9:13:85:72:92:b4:c2:31:a4:f4:b0:9d:e5:e9:9a:1a:9d:d3:
         04:ef:b7:c4:33:ff:cd:bb:51:df:f7:b3:05:2b:52:7a:56:1d:
         55:14:88:05:1f:69:2e:eb:ab:97:3d:3e:09:59:44:94:9a:4d:
         eb:8f:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:09 2025 by rpki-client