Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File:                     yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier:          HxN1BBvMYl6MKEFMNy3EDy9QvdhGf/O0wCt0gMGuC6w=
Subject key identifier:   56:A3:7C:BE:F1:DE:FF:6F:82:49:7F:1B:C9:8C:64:E6:41:77:51:09
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0B9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number:          0B88
Signing time:             Sun 10 Aug 2025 19:03:21 +0000
Manifest this update:     Sun 10 Aug 2025 19:03:20 +0000
Manifest next update:     Sun 17 Aug 2025 19:03:20 +0000
Files and hashes:         1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: edYTr/pp9d8QageJUiUqrg3hIeXy/BfZKmkBYh53VPM=)
                          2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=)
                          3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=)
                          4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
        Validity
            Not Before: Aug 10 19:03:20 2025 GMT
            Not After : Aug 17 19:03:20 2025 GMT
        Subject: CN=6898ecf8-d56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:57:d0:5e:18:0b:9f:33:92:f3:d6:76:fe:
                    54:f7:97:b9:14:7e:9e:23:92:dc:88:d0:24:a8:fd:
                    fc:5a:0f:cf:c1:4b:47:67:10:3a:3f:47:86:78:59:
                    34:d4:81:31:81:5d:d5:ef:39:17:5e:b6:3f:1d:b8:
                    92:fe:87:f0:3a:f4:ac:d3:0b:e3:3a:7e:31:5f:cf:
                    3a:22:f2:3a:b1:8b:fe:37:a2:de:9c:60:37:ad:43:
                    0b:49:5a:91:6e:37:c3:35:54:91:26:c8:f2:85:ea:
                    bd:5b:a3:ec:66:a7:84:c2:d1:b7:98:0a:d7:5f:b9:
                    68:80:42:57:d8:67:14:c5:fd:02:b1:fc:94:39:2a:
                    cc:52:79:99:d2:c9:2f:59:74:e2:e3:ce:e0:ce:23:
                    c3:ff:b3:f8:4c:9b:01:22:f7:a8:80:0f:2c:39:df:
                    b6:b7:9a:d1:db:21:b0:af:a6:aa:a1:f1:05:de:c3:
                    37:f5:fd:93:39:94:ec:f7:10:35:e4:2f:9a:71:f4:
                    22:5f:bc:b4:2a:ac:da:e9:be:12:5d:2d:3b:02:d7:
                    13:74:29:f7:32:54:12:99:d7:0f:b9:13:a5:d0:35:
                    89:ea:25:8f:2c:03:c8:68:09:2d:fb:23:45:09:e8:
                    38:7f:ce:b4:50:61:cd:c3:57:0b:47:8c:60:54:d8:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:7C:BE:F1:DE:FF:6F:82:49:7F:1B:C9:8C:64:E6:41:77:51:09
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:af:c5:59:98:7b:32:a9:13:1e:46:db:59:8d:48:76:0f:
         87:2c:63:ca:8f:57:b5:05:30:fa:ac:82:07:56:0d:c1:20:84:
         32:ca:8b:56:4b:85:d9:e2:91:ff:bc:7a:34:d0:56:cd:e7:64:
         1d:88:22:10:55:55:0d:6d:30:dd:32:00:73:66:6a:55:21:d7:
         a7:f3:72:28:f3:af:c4:5e:ce:4d:73:13:cc:4f:4d:92:55:e8:
         b9:92:3f:94:71:a8:07:41:f3:14:63:cf:57:5f:b0:76:2c:3a:
         4f:f1:0a:02:ff:f9:bd:46:c9:0b:e4:16:31:8c:06:08:dd:39:
         bc:a9:ff:63:11:c0:3c:8c:af:26:87:04:3b:6f:72:29:67:c2:
         1b:0c:40:ee:3a:7d:ff:a6:5f:29:da:16:14:4c:7a:5b:34:fc:
         81:5f:52:b6:d7:2c:ba:06:79:84:e0:04:a4:56:eb:a8:9d:23:
         cd:d8:f1:ca:f3:2c:6b:6c:c4:0e:7a:63:70:ee:10:d2:21:0f:
         27:68:9e:b1:74:85:c3:3a:f3:65:eb:9c:96:16:c8:72:aa:27:
         7f:09:ba:58:11:de:4e:41:f3:0d:e0:82:c5:b3:d4:1a:a5:51:
         0c:a7:cd:2c:44:32:3a:93:ae:38:0a:27:37:01:6a:78:58:bc:
         80:64:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:22:56 2025 by rpki-client