Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
File:                     YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json)
Hash identifier:          W/vqpsdDa2y+gDm5v4+NeO+L2ZPpwwaaLsv8Hg6xGb4=
Subject key identifier:   CA:A6:65:CB:D5:FA:68:40:C1:F1:2D:2F:52:3F:7F:E8:84:8E:70:B8
Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89
Certificate issuer:       /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
Manifest number:          20
Signing time:             Sat 09 Aug 2025 08:23:39 +0000
Manifest this update:     Sat 09 Aug 2025 08:23:39 +0000
Manifest next update:     Sat 16 Aug 2025 08:23:39 +0000
Files and hashes:         1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: CnEopnd8v7nyyieIMkSx+ELS5xxTWFw7Yv8POdrnVvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
        Validity
            Not Before: Aug  9 08:23:39 2025 GMT
            Not After : Aug 16 08:23:39 2025 GMT
        Subject: CN=6897058b-8cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:15:e8:19:18:a0:50:3a:26:5d:67:1b:25:
                    8a:9f:57:a7:f3:6d:52:12:bb:45:f7:78:50:d2:e9:
                    8c:f1:b2:b8:07:df:93:e3:d7:5b:31:28:3f:2c:bb:
                    15:a9:82:69:a7:75:1e:ed:ca:94:29:b2:81:55:c5:
                    a3:9f:99:df:39:33:b0:94:bb:56:8a:a3:e4:9b:04:
                    49:ec:ce:f0:31:d9:6f:54:a4:31:05:e8:3e:df:50:
                    b4:80:fe:60:01:d2:9e:52:9f:50:12:c1:bf:32:6a:
                    37:ee:62:6a:73:c4:80:97:f2:ed:79:e3:d0:49:d9:
                    06:ba:3b:ce:47:95:77:d6:b6:7a:64:57:7a:94:51:
                    81:bb:3a:f6:67:59:f9:71:a2:ae:6e:77:ae:61:15:
                    f0:7b:04:92:ec:b8:eb:b1:aa:ad:03:5e:d8:91:74:
                    b1:ed:87:cc:be:90:2f:d7:49:9d:b7:0b:7f:aa:5a:
                    cb:e7:8c:be:55:44:81:1c:8e:6d:86:de:10:02:5e:
                    b3:2c:91:fa:45:ad:4b:63:67:e6:5d:d3:db:22:d0:
                    49:76:c0:58:c3:71:1c:75:df:72:85:bc:88:b0:08:
                    34:04:24:0b:08:12:db:8c:e0:2b:85:4f:f1:1f:d0:
                    e5:af:75:3d:86:4e:fc:17:8d:77:55:55:64:02:66:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A6:65:CB:D5:FA:68:40:C1:F1:2D:2F:52:3F:7F:E8:84:8E:70:B8
            X509v3 Authority Key Identifier:
                keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:4d:66:67:52:f6:7a:11:54:87:3e:bd:e3:21:54:a9:b9:
         66:c6:67:fc:a7:2f:9a:54:67:2a:07:cd:6a:9f:ba:e8:de:df:
         ff:f5:42:f9:11:60:dc:3a:12:f6:ab:04:5e:b0:55:22:ff:5a:
         a0:ef:2f:cb:50:60:07:b9:73:d3:1e:89:50:aa:62:c3:ee:12:
         10:ab:c5:dd:73:a6:ec:8f:b8:8a:f1:6b:b3:87:a0:3c:d2:9d:
         4a:0b:47:4d:22:0f:b0:69:5e:75:cc:84:8d:21:d6:e4:ca:d5:
         5f:79:7b:e1:ab:f0:12:0f:e1:4e:03:d8:d8:55:53:d3:9e:1d:
         e1:fc:a7:ad:b3:ca:b6:bc:bf:6e:b9:0c:0b:0c:df:84:0d:64:
         6d:ad:d7:a7:0e:c6:d4:74:65:01:68:3f:67:3e:9c:2b:a8:f9:
         c0:98:59:ce:aa:81:a7:40:07:d3:00:47:12:ae:a8:94:fc:a1:
         cf:b1:d2:d0:02:12:bb:02:b5:ca:b5:40:bb:d0:78:12:8e:ad:
         9b:a6:8f:63:60:f6:c1:87:d4:3e:90:4e:17:82:73:c6:56:ef:
         8f:32:f1:5e:16:9a:9e:52:fc:4f:8e:77:cc:64:66:f0:3b:6f:
         b3:a5:ca:91:26:7c:4d:9d:1d:a5:7f:60:c6:88:52:6d:c9:cf:
         01:06:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:29 2025 by rpki-client