Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File:                     y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier:          O8WkLlQqVq6FBdZRUUviM/vGMi0cAjfsh9OIP3XV3/M=
Subject key identifier:   26:4B:07:96:78:2F:12:D8:43:BF:E9:A3:71:80:9D:36:CB:2C:C5:DB
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer:       /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number:          AE
Signing time:             Mon 11 Aug 2025 06:17:00 +0000
Manifest this update:     Mon 11 Aug 2025 06:16:59 +0000
Manifest next update:     Mon 18 Aug 2025 06:16:59 +0000
Files and hashes:         1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: ZqKVhzBuz64fiOrx29sZT4TrdU/9mLP2dQbciMtRiQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
        Validity
            Not Before: Aug 11 06:16:59 2025 GMT
            Not After : Aug 18 06:16:59 2025 GMT
        Subject: CN=68998adc-259d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:af:2e:6a:1f:c9:83:c9:bd:47:b1:7e:e0:
                    78:40:1a:19:f9:23:03:d5:72:46:fa:9b:37:33:99:
                    d8:3b:05:1b:1b:79:e9:15:7a:f4:72:5d:65:1c:24:
                    65:bd:9f:1d:81:ae:8a:88:2a:ac:02:e8:27:9c:87:
                    02:1e:38:3f:6a:77:24:ab:de:09:56:3d:ee:e0:1f:
                    77:23:3e:d2:9f:a2:33:f8:04:49:db:2e:42:42:50:
                    12:a1:c1:12:73:d6:d4:d3:99:ef:b7:46:e3:cb:98:
                    33:47:10:39:10:6b:e0:68:5c:dc:8a:be:80:7b:8b:
                    34:bf:e3:5e:a8:fe:8e:d5:d3:ea:a8:0b:67:08:b4:
                    15:d6:d0:23:cd:55:20:83:a3:c7:8f:50:9f:e1:05:
                    4b:0e:04:3c:5c:bb:b7:74:77:4e:41:98:51:0d:a2:
                    fb:c5:64:8a:e2:92:ed:56:0a:d2:6c:57:ed:36:e8:
                    95:91:84:e6:6b:ff:95:4e:5e:42:94:fd:77:8f:18:
                    ba:7b:cd:da:3b:d9:da:c8:76:fe:48:81:4c:dd:9d:
                    46:7c:d8:86:8a:7d:2c:61:f5:d0:28:3e:05:0b:f0:
                    7a:bf:43:e5:97:5a:0e:92:ec:31:93:5a:36:14:9b:
                    8a:91:ee:20:8e:83:96:7b:b8:49:6a:23:d5:79:41:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:07:96:78:2F:12:D8:43:BF:E9:A3:71:80:9D:36:CB:2C:C5:DB
            X509v3 Authority Key Identifier:
                keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c4:cb:4e:91:19:c4:d4:a9:7d:ab:c4:cc:70:a7:78:ba:9c:
         81:3e:9f:1f:4a:f0:05:48:a5:28:01:8b:b2:b4:d4:71:d4:5a:
         5c:ad:2c:30:81:bd:17:c7:c3:e6:d8:02:f8:eb:71:fa:b5:1a:
         8c:b3:a3:85:b2:da:5a:45:87:20:8c:06:8c:ba:de:04:33:23:
         1a:e1:38:4e:4b:25:30:66:15:c5:60:3a:c5:1e:1b:17:90:20:
         c5:27:53:ff:80:c7:46:c3:b0:1d:59:70:db:17:6a:3e:23:6b:
         01:ce:83:52:fa:b0:a3:f9:58:45:32:8e:f7:82:7f:1d:d8:dc:
         7b:c5:16:21:3a:8f:27:67:0b:dd:be:18:39:ea:e7:6b:66:c7:
         00:34:12:d2:12:fd:6d:c8:05:d0:18:b0:8e:01:26:eb:19:a1:
         bf:2b:d7:07:56:20:f9:7c:2d:eb:90:e6:03:69:73:54:a1:42:
         a8:12:55:9c:ed:2a:97:c5:77:e6:9f:36:3a:d8:1f:fd:ad:43:
         90:4c:f7:18:f9:aa:e4:b1:39:70:5e:1c:da:4a:53:54:31:e6:
         78:2a:fa:bd:93:9c:da:62:a3:24:c8:2b:aa:8f:d3:69:e5:62:
         75:10:a5:4a:46:fb:7e:6b:37:80:53:7e:11:69:45:3a:a4:90:
         28:04:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:49:12 2025 by rpki-client