Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File:                     YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier:          9uw9QguET0lwpNPpt3T0k4W47y6vJhCwej3nZPI73xc=
Subject key identifier:   D0:80:CC:F6:F6:AC:92:FB:55:F9:53:70:13:29:19:C1:23:AD:9B:08
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       0731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number:          0726
Signing time:             Mon 04 Aug 2025 22:10:24 +0000
Manifest this update:     Mon 04 Aug 2025 22:10:24 +0000
Manifest next update:     Mon 11 Aug 2025 22:10:24 +0000
Files and hashes:         1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: zO5ChUlhk0BjuP35E8MUW6wR+vIhGYUKwj8JElzeyUw=)
                          2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=)
                          3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
                          rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 22:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
        Validity
            Not Before: Aug  4 22:10:24 2025 GMT
            Not After : Aug 11 22:10:24 2025 GMT
        Subject: CN=68912fd0-acda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:be:ec:e7:70:48:db:d1:80:01:0c:80:78:
                    c4:45:90:7c:55:c0:32:30:9e:39:5d:1b:86:b1:9d:
                    58:a4:db:b2:61:17:6a:91:aa:2f:a1:8a:72:6b:43:
                    1d:ff:d5:71:1b:0d:3b:42:d4:be:91:9c:c1:d2:3a:
                    b2:b2:18:00:df:b9:1a:ed:61:89:a4:d6:ad:ca:2c:
                    0e:23:8e:0b:43:5f:ab:18:31:71:cd:08:51:b1:05:
                    78:b3:9d:cf:c4:59:bb:d8:ab:0d:d1:b6:00:b6:62:
                    7d:2e:d9:b8:34:2a:61:22:d3:18:a8:c7:c9:7f:01:
                    c7:e4:bd:83:6b:4f:bc:0b:3b:71:82:51:35:8d:f6:
                    64:fa:c8:9f:d5:fd:96:ba:74:72:84:b3:35:64:f8:
                    55:0d:d4:d6:de:64:02:0d:80:22:e2:a3:8e:03:a1:
                    68:67:64:29:db:54:12:1d:0d:31:aa:0c:32:2f:9d:
                    86:4a:48:dd:9e:eb:a7:77:d3:80:fd:6f:4b:8e:3a:
                    9c:21:4c:4f:a8:bd:22:5d:dd:15:a3:75:49:22:a5:
                    a5:cf:6b:96:e9:82:fe:8c:c2:4b:8c:ce:c1:df:00:
                    a2:3e:22:93:f7:bb:54:cf:e4:6c:92:ed:e7:08:91:
                    eb:e9:05:61:40:32:ce:7b:2d:3f:49:cf:c2:40:d6:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:CC:F6:F6:AC:92:FB:55:F9:53:70:13:29:19:C1:23:AD:9B:08
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:53:7a:e0:ec:0e:42:3e:83:96:d5:68:76:72:a7:1c:e3:51:
         1c:93:86:89:3d:16:03:8a:8f:c3:15:71:3f:e8:a6:a5:16:de:
         de:d9:d4:56:f3:79:6c:78:7a:2c:91:67:ab:2b:2e:94:37:45:
         a5:40:5f:3b:17:59:82:fb:77:e1:7a:72:e1:39:81:21:e7:28:
         2c:23:0a:66:1f:34:d2:23:f9:1a:4a:be:99:51:d3:c7:da:89:
         33:be:6f:df:38:57:c6:b7:1a:c9:48:d0:8d:9e:d2:8c:9a:35:
         78:58:07:61:b8:64:1a:5c:95:dc:a4:62:4e:8b:76:4f:ef:8e:
         f0:d8:91:60:b7:15:57:f8:3c:55:1d:fe:67:43:53:2b:16:f0:
         9f:c3:fe:6d:27:7c:60:c2:41:ea:be:52:d1:7a:b4:04:e9:be:
         d0:3c:5c:3a:ff:d0:99:2e:de:63:d0:7a:3f:ae:2b:8f:a9:13:
         45:79:c0:f0:4a:29:3b:42:31:36:4b:c0:7c:c0:2a:69:fd:20:
         e2:21:69:18:d7:3e:89:0d:65:d3:c0:54:99:e0:97:22:a6:61:
         66:66:1d:2e:9a:39:03:82:e1:bb:25:1d:37:6f:21:81:5e:9c:
         36:b9:64:30:44:bc:e2:11:ee:38:5e:c1:44:19:a1:69:78:7d:
         d6:53:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:13 2025 by rpki-client