Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
File:                     yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json)
Hash identifier:          IZxOLzK+r3j2IHjusxCu/rxQwEzqIG9q9R6xOb4mhNA=
Subject key identifier:   96:C7:66:72:CA:72:50:4C:FA:C5:1D:7F:6B:6F:D8:1E:DB:97:9B:61
Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
Certificate issuer:       /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
Manifest number:          018A
Signing time:             Sat 09 Aug 2025 03:52:41 +0000
Manifest this update:     Sat 09 Aug 2025 03:52:41 +0000
Manifest next update:     Sat 16 Aug 2025 03:52:41 +0000
Files and hashes:         1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: IacL+1QJba7W02txUxsI63/w2kB6x8ZYw0moJZ7ut+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
                          rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
        Validity
            Not Before: Aug  9 03:52:41 2025 GMT
            Not After : Aug 16 03:52:41 2025 GMT
        Subject: CN=6896c609-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:f9:51:d1:4c:54:22:50:e9:5e:a8:b8:a0:
                    cc:9f:31:9f:15:ae:f0:f7:e5:d5:d4:6c:57:f6:8b:
                    50:1c:d2:82:ec:b3:72:70:c2:a3:1a:d0:88:46:b3:
                    ba:1d:67:eb:64:55:27:60:7f:88:c6:a8:3a:05:ea:
                    71:40:f0:a6:22:c8:81:67:9a:e5:61:d4:7b:8f:cf:
                    76:d8:2d:b4:4d:ba:f9:7c:d3:9e:47:a5:44:63:b4:
                    79:f6:ac:8b:cc:c6:7d:e5:09:fd:33:54:bd:ad:49:
                    37:39:27:db:69:f1:67:3b:4a:b5:c6:cc:67:e8:1a:
                    db:54:be:a8:34:0a:ee:c2:9d:05:70:eb:66:1c:5c:
                    65:fd:9c:10:a4:7b:8f:e4:18:58:97:aa:30:cc:2d:
                    5b:28:33:52:91:f8:85:82:0c:4e:0b:e6:e2:af:84:
                    71:48:1c:f8:5b:a8:bf:19:68:47:eb:c2:ca:3b:28:
                    86:9b:3e:96:f7:ab:a7:98:69:d3:6e:a3:bf:d6:cd:
                    b5:a3:d6:ab:fb:70:e2:07:cf:5b:2a:86:8e:da:a1:
                    44:1e:a5:6d:93:42:a3:ff:0d:cd:50:e6:a3:4a:27:
                    e9:c9:95:63:79:b6:cf:61:7d:d5:52:d5:2b:1a:26:
                    a2:0e:d3:2f:c4:2a:37:76:b3:f0:c5:dc:d4:07:0b:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:66:72:CA:72:50:4C:FA:C5:1D:7F:6B:6F:D8:1E:DB:97:9B:61
            X509v3 Authority Key Identifier:
                keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:20:cf:f8:9c:4c:eb:fe:27:0d:fd:b0:a6:93:1e:2c:8c:
         b9:2e:ce:95:23:10:ea:e8:89:38:6c:95:95:f6:7b:e6:9f:06:
         db:de:f1:cd:10:a1:83:62:32:fd:ff:c3:0e:c8:d9:c7:c3:1b:
         8b:e0:82:b5:dd:1f:61:07:80:05:b9:90:b7:21:cd:92:7b:7a:
         9a:d5:84:46:71:81:e7:f4:ae:e7:cf:c9:cf:f3:1a:d6:df:09:
         93:cc:4d:e0:17:a3:53:47:2a:bc:e5:7f:2e:56:b0:6b:73:9b:
         86:8f:90:aa:72:25:56:25:f4:91:d4:4c:ab:7c:36:21:ca:a7:
         fe:e6:db:c0:37:80:f7:33:12:d0:85:79:b2:e8:eb:a2:7c:9b:
         76:98:84:e4:73:8d:31:e9:0c:2d:fb:54:76:b1:4b:db:d3:cc:
         e3:68:e7:04:a6:a6:47:f9:ce:df:27:1d:e7:2c:a4:43:02:35:
         e6:72:af:73:00:5e:cf:5a:a3:cb:a0:c7:72:14:e0:2e:f7:48:
         fe:7b:40:08:33:bf:01:55:88:6d:aa:00:79:8c:e3:f1:db:d7:
         71:b9:6b:76:f7:8e:56:de:ac:28:49:38:0f:2d:ed:be:e0:36:
         cd:c0:56:59:56:6f:16:16:68:6d:86:17:21:b3:22:a7:77:d0:
         cd:fa:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:17 2025 by rpki-client