Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
File:                     ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json)
Hash identifier:          kWfPvNoznbyn/7gPyDxPx0AS/XgMdYlmg0WwsDdPZZY=
Subject key identifier:   F4:5B:37:A6:42:CF:4D:80:DD:18:0C:24:31:6A:BB:E9:F8:CB:2E:AF
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Certificate issuer:       /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
Manifest number:          A6
Signing time:             Thu 07 Aug 2025 06:50:01 +0000
Manifest this update:     Thu 07 Aug 2025 06:50:00 +0000
Manifest next update:     Thu 14 Aug 2025 06:50:00 +0000
Files and hashes:         1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: Awq4C7cCc5m7t9/nxDEEjbh88DVMKdb+mdtqVfcRWfY=)
                          2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
        Validity
            Not Before: Aug  7 06:50:00 2025 GMT
            Not After : Aug 14 06:50:00 2025 GMT
        Subject: CN=68944c98-ed67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:b5:33:4f:6f:1f:ca:64:47:71:ca:b0:14:
                    c8:11:ca:15:fd:29:f3:a0:47:91:68:29:5d:83:62:
                    6e:ab:a5:2c:8d:51:ca:04:5d:f3:77:f8:2b:ec:8e:
                    3d:fb:d9:c8:e5:05:44:d2:f0:20:f4:94:51:be:4b:
                    da:cd:e3:6b:45:8d:d9:ab:bf:f1:de:94:5e:db:a9:
                    95:74:dd:14:8f:67:8e:3f:92:8a:6b:9d:23:cc:ea:
                    20:9c:b6:28:a0:4a:ad:f0:74:38:e0:cb:c9:1d:ac:
                    1c:68:22:66:85:bd:1b:f8:0e:e6:99:de:2a:c5:7c:
                    f3:d4:4d:45:7a:2e:8b:31:1b:48:a6:cf:85:78:9d:
                    9b:dd:2e:7d:3a:d3:f7:21:85:7b:68:21:08:1f:83:
                    f4:ac:fa:91:f7:2a:1b:71:24:e9:53:f0:7e:2b:f9:
                    ad:8f:e1:d1:47:e8:4e:c7:0e:15:66:c5:be:b6:f0:
                    cf:b4:79:c1:76:c9:a9:ce:08:f6:8b:84:98:59:bb:
                    f4:f3:9e:a7:46:80:86:18:e6:9f:cd:83:59:10:29:
                    1f:6e:8d:f4:60:c4:53:50:17:8b:14:85:94:f7:b8:
                    96:7c:08:ea:94:31:99:2d:0a:2b:b2:33:05:80:94:
                    c9:3d:70:82:bb:65:5b:43:93:e6:c9:55:67:a7:37:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:37:A6:42:CF:4D:80:DD:18:0C:24:31:6A:BB:E9:F8:CB:2E:AF
            X509v3 Authority Key Identifier:
                keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:1d:aa:59:24:8c:d6:ad:f3:40:19:11:3c:a7:4c:64:ee:
         cd:64:3f:c6:5a:2f:9a:1d:4d:e2:dc:d3:38:e5:40:65:cf:43:
         62:c1:09:46:53:67:94:0e:41:cd:c6:bc:78:27:b6:c7:f4:72:
         3f:54:9c:af:ca:b9:bb:32:1e:05:f4:9a:7e:4c:5d:85:86:b2:
         fa:29:70:48:d3:98:e5:1e:ba:bf:28:7a:7f:bd:e7:fa:0b:e7:
         cd:cd:93:3e:3b:06:ab:90:24:37:52:0a:ed:3b:3d:08:49:c6:
         10:90:95:aa:96:06:de:06:91:0d:09:2b:3c:e6:4f:f9:af:66:
         64:f6:38:7d:2e:73:00:52:30:3a:5a:a7:0c:42:76:f8:84:18:
         fa:6f:97:2c:09:fc:04:45:53:1c:ee:fa:85:ae:9c:0a:ad:c6:
         67:8d:04:1c:3e:53:aa:5a:d2:6d:d0:e9:07:3b:a0:e9:4d:11:
         e0:7b:c0:fa:fc:4d:2c:91:43:6d:13:47:e8:70:aa:9a:65:cc:
         e5:63:12:6e:28:f0:87:32:e8:36:18:d7:62:c9:5a:cc:59:66:
         bd:61:2e:a5:a4:33:3d:f0:11:c3:fb:2f:1a:48:32:59:3c:63:
         e5:38:14:84:ee:6b:77:2d:8e:60:82:fa:48:db:76:2e:40:ab:
         6d:85:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:00 2025 by rpki-client