Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File:                     yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier:          6xTm2rP8W5TYFYIUiCan+ambgaW8ANSQRhwoan3yqBc=
Subject key identifier:   EC:AB:94:39:08:0C:82:1A:BA:26:35:A1:42:94:E4:29:AE:4C:91:E9
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer:       /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number:          E4
Signing time:             Sat 09 Aug 2025 05:52:55 +0000
Manifest this update:     Sat 09 Aug 2025 05:52:55 +0000
Manifest next update:     Sat 16 Aug 2025 05:52:55 +0000
Files and hashes:         1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: iUDTccJiBMhQD/8cIwzdzQ2/fVhwVVVKuUBOXnJVjRk=)
                          2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=)
                          3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=)
                          4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=)
                          5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
                          rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
        Validity
            Not Before: Aug  9 05:52:55 2025 GMT
            Not After : Aug 16 05:52:55 2025 GMT
        Subject: CN=6896e237-545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:48:c9:4f:24:fc:e1:cc:42:5f:86:07:4a:
                    30:22:cd:07:55:9a:10:5f:b6:2b:b7:6d:fd:41:4a:
                    1e:3d:d8:cb:00:b9:7d:69:33:ec:c5:d4:14:f2:17:
                    98:b5:3a:aa:a8:97:93:65:d2:4b:17:da:52:30:a9:
                    e8:c0:3a:9b:95:09:05:50:ae:b3:9c:e4:36:03:e0:
                    15:48:1f:58:54:03:b7:41:97:86:cb:1a:91:28:6b:
                    35:8a:fd:df:99:3f:7c:3d:40:f5:37:c7:b0:c5:29:
                    43:31:a5:24:74:4b:89:1c:6f:6f:3f:47:a7:76:fa:
                    09:13:ac:03:59:56:2a:84:5b:ee:a0:b0:38:d4:13:
                    2c:83:1e:0d:8c:76:d9:8c:b2:7c:a2:3b:31:83:be:
                    0f:e3:49:6d:04:48:f5:15:e9:48:12:8e:cb:be:a6:
                    5f:7f:91:1d:e4:94:32:e1:4f:37:56:14:90:6e:a8:
                    20:e0:29:40:06:d4:a4:f0:ed:31:51:22:ea:4c:fe:
                    d2:da:1b:22:39:46:9f:e4:db:6f:16:23:9a:40:ee:
                    06:8c:71:fc:26:08:a3:9c:b2:aa:82:9f:81:75:46:
                    3e:ea:49:5b:ca:cb:72:e6:70:15:9b:13:39:38:9b:
                    9f:47:fa:c6:c2:e6:80:02:8e:16:cd:57:07:cb:13:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:94:39:08:0C:82:1A:BA:26:35:A1:42:94:E4:29:AE:4C:91:E9
            X509v3 Authority Key Identifier:
                keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:24:7d:bf:9a:6b:0b:e2:ca:d5:cb:be:ff:9e:6a:0d:02:fb:
         02:c3:ec:00:2a:b1:bc:9b:68:1e:65:78:6b:a3:63:10:54:50:
         63:a2:8b:78:86:44:d5:90:d7:3f:89:35:dc:40:ae:e5:3d:70:
         a7:55:ca:f9:a1:be:2b:1b:ec:e1:3a:c3:7a:3c:61:3c:bb:fb:
         da:bc:49:55:b8:05:84:6f:c8:69:ba:32:fd:25:17:57:51:fe:
         d8:94:56:d6:b3:83:22:32:9b:a6:61:e3:b6:a3:9e:23:4a:f4:
         5a:7e:b7:34:13:13:67:51:1d:85:08:99:4c:13:2f:23:5c:61:
         a1:de:9a:6f:25:9b:d7:de:75:ca:63:74:6c:71:9f:4f:cc:bc:
         ea:ee:33:78:37:ea:ac:8f:90:71:ed:22:c1:70:62:fa:68:5c:
         d2:1f:29:06:c9:d2:47:39:da:94:ac:51:fb:e5:e0:1f:74:2b:
         ec:b9:be:fd:49:02:d7:39:55:29:c9:07:5e:e4:f5:0b:a4:72:
         07:4b:4d:2e:fa:6f:cb:6d:1e:dc:65:14:4e:26:17:df:48:46:
         2c:e5:23:80:ec:70:b2:c1:79:57:87:77:b9:03:87:43:95:8b:
         b0:55:82:64:9b:13:34:3c:45:37:e5:0e:c2:a7:9e:83:cc:67:
         8a:1d:77:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2
NTQ0MDY3NzMwHhcNMjUwODA5MDU1MjU1WhcNMjUwODE2MDU1MjU1WjAYMRYwFAYD
VQQDEw02ODk2ZTIzNy01NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraZIyU8k/OHMQl+GB0owIs0HVZoQX7Yrt239QUoePdjLALl9aTPsxdQU8heY
tTqqqJeTZdJLF9pSMKnowDqblQkFUK6znOQ2A+AVSB9YVAO3QZeGyxqRKGs1iv3f
mT98PUD1N8ewxSlDMaUkdEuJHG9vP0endvoJE6wDWVYqhFvuoLA41BMsgx4NjHbZ
jLJ8ojsxg74P40ltBEj1FelIEo7LvqZff5Ed5JQy4U83VhSQbqgg4ClABtSk8O0x
USLqTP7S2hsiOUaf5NtvFiOaQO4GjHH8JgijnLKqgp+BdUY+6klbysty5nAVmxM5
OJufR/rGwuaAAo4WzVcHyxPKcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyrlDkI
DIIauiY1oUKU5CmuTJHpMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG
REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0
dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEJH2/mmsL4srVy77/nmoNAvsCw+wAKrG8m2geZXhro2MQVFBjoot4
hkTVkNc/iTXcQK7lPXCnVcr5ob4rG+zhOsN6PGE8u/vavElVuAWEb8hpujL9JRdX
Uf7YlFbWs4MiMpumYeO2o54jSvRafrc0ExNnUR2FCJlMEy8jXGGh3ppvJZvX3nXK
Y3RscZ9PzLzq7jN4N+qsj5Bx7SLBcGL6aFzSHykGydJHOdqUrFH75eAfdCvsub79
SQLXOVUpyQde5PULpHIHS00u+m/LbR7cZRROJhffSEYs5SOA7HCywXlXh3e5A4dD
lYuwVYJkmxM0PEU35Q7Cp56DzGeKHXdV
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:12:13 2025 by rpki-client