Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
File:                     YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft (raw, json)
Hash identifier:          VHoq9/l/vBhE2WEc2jz13fWCaDYRxYaEd0yHeacBoeg=
Subject key identifier:   EA:33:C1:95:6E:93:E3:FD:64:03:6B:C8:7D:07:16:08:FA:A4:AB:27
Authority key identifier: 63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12
Certificate issuer:       /CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112
Certificate serial:       054B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
Manifest number:          054B
Signing time:             Sat 02 Aug 2025 23:52:58 +0000
Manifest this update:     Sat 02 Aug 2025 23:52:57 +0000
Manifest next update:     Sat 09 Aug 2025 23:52:57 +0000
Files and hashes:         1: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl (hash: KL/BL1ejp0hB1MlMLUD8TYtwXPDGvmWO7Y6LJSLmo2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl
                          rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 23:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298C7, serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112
        Validity
            Not Before: Aug  2 23:52:57 2025 GMT
            Not After : Aug  9 23:52:57 2025 GMT
        Subject: CN=688ea4d9-2508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:ae:26:47:38:24:03:0e:4d:e9:92:23:33:
                    f0:cd:81:69:ce:2b:67:47:93:44:95:e7:c3:00:cf:
                    59:31:5b:c1:0f:3c:d0:22:53:40:1e:bd:d5:52:58:
                    3d:ea:01:d5:7d:36:3d:cc:47:5e:bb:dd:28:7d:2b:
                    d0:d7:82:38:44:95:4f:94:6e:53:c5:35:9f:97:69:
                    ac:53:0d:18:d0:04:f9:5f:ac:5e:9a:0d:2d:90:0d:
                    2d:40:5f:e2:dd:b4:f2:26:a7:fb:f7:f3:36:fa:59:
                    bd:db:a3:e2:66:82:43:5e:69:8a:9a:65:de:06:01:
                    a6:45:bc:77:78:88:43:05:4e:12:df:14:bf:02:20:
                    57:ef:c5:ba:ca:48:ac:d8:22:9d:58:09:b4:5c:dc:
                    e5:39:d5:1e:1f:62:30:6b:05:75:5e:83:e6:5b:6a:
                    35:fd:99:b6:a9:c6:57:b7:77:e9:24:89:b0:f2:51:
                    48:9b:eb:6e:94:df:73:8d:62:50:6d:ef:09:46:17:
                    ad:26:4a:13:7b:77:9d:00:7a:01:42:3f:ad:8d:33:
                    87:df:82:55:1d:44:94:94:2e:40:f9:09:62:c8:67:
                    11:c8:49:58:ed:0e:62:fb:de:64:fe:68:ae:91:f9:
                    68:28:45:bd:55:a8:2d:9c:dd:26:05:19:b7:0c:37:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:C1:95:6E:93:E3:FD:64:03:6B:C8:7D:07:16:08:FA:A4:AB:27
            X509v3 Authority Key Identifier:
                keyid:63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:63:20:79:56:7e:4f:47:f0:5d:62:ff:9c:4b:68:b2:95:
         e8:16:c7:5d:e1:82:4c:65:86:66:ce:5e:6c:5b:2c:70:87:37:
         74:d5:29:bf:1a:81:fe:15:68:cb:dc:77:21:be:96:44:31:f4:
         1c:51:be:6c:40:c9:e9:af:6b:97:12:22:1e:c0:1a:d9:48:43:
         dd:53:8d:92:dc:27:48:d1:cb:23:f8:1c:80:5d:00:05:eb:b5:
         ad:d4:ad:f2:e1:38:03:a9:11:db:3a:6d:60:ff:ad:81:e9:cf:
         9f:57:46:2f:94:86:90:b9:1a:bb:69:df:63:d9:b1:cc:18:8e:
         72:63:ce:de:9d:69:f8:b1:8c:a4:58:ec:4a:98:04:44:6b:93:
         c5:34:96:14:67:bd:11:1f:02:cb:66:84:a9:54:b9:72:5a:10:
         37:a9:a7:6f:51:f4:90:fa:d7:17:0d:2c:55:cc:f2:87:02:12:
         9d:80:1e:95:1e:d0:d9:d6:a8:12:30:30:1f:f9:4f:67:cf:d8:
         f6:1f:55:67:7c:85:c7:5e:49:a6:da:14:4e:17:60:c2:ce:93:
         3a:59:09:d0:3e:5d:1c:6a:c2:4a:d0:3a:a1:4c:7f:7c:f9:53:
         01:9d:9b:7d:90:15:99:9f:02:79:cb:a9:86:45:b5:8f:c8:f1:
         bd:b7:75:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4QzcxMTAvBgNVBAUTKDYzM0FDQjhENTFEMkYwODg2OTlCOEE3MTQ5MUNDNzU1
M0VDMEMxMTIwHhcNMjUwODAyMjM1MjU3WhcNMjUwODA5MjM1MjU3WjAYMRYwFAYD
VQQDEw02ODhlYTRkOS0yNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSauJkc4JAMOTemSIzPwzYFpzitnR5NElefDAM9ZMVvBDzzQIlNAHr3VUlg9
6gHVfTY9zEdeu90ofSvQ14I4RJVPlG5TxTWfl2msUw0Y0AT5X6xemg0tkA0tQF/i
3bTyJqf79/M2+lm926PiZoJDXmmKmmXeBgGmRbx3eIhDBU4S3xS/AiBX78W6ykis
2CKdWAm0XNzlOdUeH2IwawV1XoPmW2o1/Zm2qcZXt3fpJImw8lFIm+tulN9zjWJQ
be8JRhetJkoTe3edAHoBQj+tjTOH34JVHUSUlC5A+QliyGcRyElY7Q5i+95k/miu
kfloKEW9VagtnN0mBRm3DDcWOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOozwZVu
k+P9ZANryH0HFgj6pKsnMB8GA1UdIwQYMBaAFGM6y41R0vCIaZuKcUkcx1U+wMES
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThDNy9ENDk0QjhFRUZB
N0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJaHBtNHB4U1J6SFZUN0F3
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l6ckxqVkhTOElocG00cHhTUnpIVlQ3QXdSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OThDNy9ENDk0QjhFRUZBN0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJ
aHBtNHB4U1J6SFZUN0F3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCM8mMgeVZ+T0fwXWL/nEtospXoFsdd4YJMZYZmzl5sWyxwhzd01Sm/
GoH+FWjL3HchvpZEMfQcUb5sQMnpr2uXEiIewBrZSEPdU42S3CdI0csj+ByAXQAF
67Wt1K3y4TgDqRHbOm1g/62B6c+fV0YvlIaQuRq7ad9j2bHMGI5yY87enWn4sYyk
WOxKmAREa5PFNJYUZ70RHwLLZoSpVLlyWhA3qadvUfSQ+tcXDSxVzPKHAhKdgB6V
HtDZ1qgSMDAf+U9nz9j2H1VnfIXHXkmm2hROF2DCzpM6WQnQPl0casJK0DqhTH98
+VMBnZt9kBWZnwJ5y6mGRbWPyPG9t3Xs
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:39 2025 by rpki-client