Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
File:                     yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json)
Hash identifier:          oLdpjpmboE7Hv5p8AIDVOghFuGRMkveGkiri1qEjxcc=
Subject key identifier:   6D:30:4E:11:B6:E9:08:C3:C3:7A:3E:62:88:03:78:32:65:47:D8:5D
Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A
Certificate issuer:       /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
Manifest number:          0110
Signing time:             Sat 09 Aug 2025 05:24:58 +0000
Manifest this update:     Sat 09 Aug 2025 05:24:57 +0000
Manifest next update:     Sat 16 Aug 2025 05:24:57 +0000
Files and hashes:         1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: gfFnYRJSxfbwU8R2W2yHOOQCsiPuHbWWdJXHmynsMec=)
                          2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: kMQ7gbSHaFXFpsfqJqpqWdRVLvMmMimNITBNMHfZtwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl
                          rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
        Validity
            Not Before: Aug  9 05:24:57 2025 GMT
            Not After : Aug 16 05:24:57 2025 GMT
        Subject: CN=6896dba9-b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:5d:07:57:3b:c5:cd:7e:cd:c3:37:f6:53:
                    77:94:f0:cf:b3:d4:c7:a9:e9:a3:01:0c:db:38:a1:
                    3e:38:b3:5a:b3:08:85:32:cd:fd:84:43:70:32:02:
                    4e:78:32:29:fc:d1:96:7e:8e:79:e7:c4:03:a8:6c:
                    c3:89:99:34:af:57:13:8a:cc:7f:4e:39:aa:e6:9c:
                    64:00:14:4a:cc:8b:8a:a9:6d:64:7d:c0:ab:c0:d7:
                    0f:4c:cb:b6:35:54:0a:f5:51:f3:65:d2:b8:df:d7:
                    6e:80:06:8b:f3:c3:67:a2:8b:5a:b6:1a:b9:60:1d:
                    c4:71:50:4e:ce:44:b9:ae:bc:51:ce:d0:5a:95:0a:
                    f5:ce:7d:71:ff:2c:8c:30:41:97:9e:5e:53:24:f5:
                    cf:f9:da:46:44:24:7b:a4:d8:83:b3:25:7a:5e:96:
                    87:de:a5:2b:a5:50:f5:d4:34:a9:bb:15:94:c8:e0:
                    e0:d7:ae:ed:01:24:32:35:4c:b4:52:81:11:5f:8c:
                    2d:8e:28:48:c3:90:f2:68:c3:94:07:55:41:f7:b2:
                    75:ca:7c:33:96:24:a8:67:a7:bd:46:f8:d9:7a:63:
                    ab:76:68:b1:2c:d5:54:9a:de:44:de:a9:68:c8:86:
                    43:24:bb:fe:14:d7:97:a5:cd:96:5e:de:bf:b3:f6:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:30:4E:11:B6:E9:08:C3:C3:7A:3E:62:88:03:78:32:65:47:D8:5D
            X509v3 Authority Key Identifier:
                keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:65:83:ae:56:11:01:c7:93:14:e8:ff:ca:02:8b:ff:57:
         e3:4a:be:1b:90:fb:8d:0c:d2:89:16:14:16:00:0b:fe:a4:91:
         fd:36:96:06:85:7b:71:b7:c4:69:08:f3:0d:f5:37:52:8e:30:
         0a:bb:4e:e9:a2:f8:13:fc:4f:4e:cc:dd:30:18:4f:98:4c:b9:
         4e:b6:7f:24:0b:66:f6:d6:a9:25:2e:1f:4b:73:72:48:c4:32:
         c1:ab:74:f4:b7:f4:1d:87:a1:a6:34:61:9f:eb:1b:ac:7f:09:
         39:ab:29:81:bd:89:d7:42:6f:db:d0:27:bc:75:ef:70:58:62:
         f5:34:0a:69:71:41:a1:2a:8e:ac:2b:ef:88:47:93:90:ff:ba:
         8e:5d:b4:df:fd:7d:20:84:ef:f4:ee:22:bc:41:78:db:77:f3:
         ee:b5:d9:be:fd:db:dc:7f:93:b6:47:9a:b1:99:96:82:b9:bc:
         a1:05:34:10:88:18:22:36:70:80:5a:ee:b5:58:da:29:ff:6d:
         fb:63:0b:13:98:12:9c:9f:04:ec:51:78:13:51:df:52:44:9f:
         32:70:bc:53:ea:0e:aa:75:32:3d:e2:7f:aa:ea:03:b4:d0:d9:
         9d:52:a2:c3:0b:70:b7:62:af:68:e1:49:e3:b1:8c:5b:e4:bf:
         00:e5:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:57:19 2025 by rpki-client