Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
File:                     YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json)
Hash identifier:          JNAEHAVZLGXEoJcSKcDZdSJ0JLj6eWOeFQpTrtQK+tY=
Subject key identifier:   EE:D0:D4:BA:90:9F:39:8F:65:1D:04:EA:89:A1:AF:EE:6D:54:65:AA
Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F
Certificate issuer:       /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
Manifest number:          07F0
Signing time:             Fri 08 Aug 2025 21:21:31 +0000
Manifest this update:     Fri 08 Aug 2025 21:21:31 +0000
Manifest next update:     Fri 15 Aug 2025 21:21:31 +0000
Files and hashes:         1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: vd+MrMaGpmwpvAE7LLdUgt9bHtPdJ0yAywlN5pBnnAA=)
                          2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB03, serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
        Validity
            Not Before: Aug  8 21:21:31 2025 GMT
            Not After : Aug 15 21:21:31 2025 GMT
        Subject: CN=68966a5b-0321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:4f:92:23:a6:7c:4a:d7:bc:c1:05:bf:01:
                    4e:ac:ee:e9:cc:fb:1a:03:1e:63:23:59:aa:6d:9d:
                    42:de:c6:62:e2:9f:88:27:76:d8:28:92:ea:31:d5:
                    1f:e1:63:82:16:c1:86:44:e5:2d:81:c1:4c:1d:a0:
                    03:eb:f8:9c:53:ab:0a:17:d5:14:3d:70:ac:07:bd:
                    3d:0b:83:bb:b4:27:26:12:1e:d8:a9:19:21:b6:6d:
                    af:12:25:b8:a7:ca:0c:2e:67:a5:bc:80:ca:7a:f9:
                    df:dc:4f:64:0b:9c:16:aa:08:21:5e:8c:c7:7b:3b:
                    d2:9a:df:e5:6f:4e:7c:76:94:85:19:07:f7:c0:a5:
                    73:23:a0:2b:6f:39:ba:76:eb:87:3b:cf:e6:00:bf:
                    e1:47:42:b0:19:03:2f:72:51:37:0e:c4:11:1e:c4:
                    d8:7c:5f:88:63:9b:87:e1:93:86:32:6a:ca:a8:ff:
                    21:00:1c:d8:62:2c:f2:b1:ba:62:5b:54:a1:04:b7:
                    e3:47:5f:37:12:ae:34:ca:38:3e:d3:ee:d3:ee:70:
                    1b:71:ff:3b:e2:83:16:c0:0a:a9:ef:fe:73:9d:8f:
                    51:de:63:4a:ca:72:2c:c8:2f:92:b4:5c:17:67:0a:
                    d8:84:79:db:7d:30:e3:bf:a4:9b:ed:07:50:d0:b4:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D0:D4:BA:90:9F:39:8F:65:1D:04:EA:89:A1:AF:EE:6D:54:65:AA
            X509v3 Authority Key Identifier:
                keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:83:fa:9d:10:ec:6f:57:6f:9e:a0:73:a9:60:58:6e:1f:62:
         a0:76:10:fb:2b:7d:3b:ba:f2:c4:0d:27:4c:3b:6a:68:45:b8:
         9a:21:30:f6:ce:20:0d:f5:ae:77:2f:a0:65:e3:12:36:f5:6a:
         d6:76:55:b3:4b:66:fe:fc:d0:02:e8:c6:92:f5:ac:d1:96:84:
         e1:84:4c:0e:d6:44:b3:42:4e:06:30:dc:d4:74:2d:de:9a:06:
         a5:ec:37:d3:5a:4b:f9:99:81:a5:c6:bc:c8:ce:0f:eb:a4:fc:
         24:f6:71:83:ae:65:68:b3:e2:d7:fd:cb:e1:dc:ef:55:4c:a7:
         e1:0c:14:b8:cf:2b:a5:e8:79:85:f8:e8:39:af:0d:02:c0:f8:
         a5:78:05:03:2a:bb:ff:8a:41:d9:47:59:f7:0b:a6:31:b7:aa:
         6b:88:9d:34:6d:c7:a6:b9:b2:f1:31:5e:a0:18:33:e4:d9:df:
         ca:38:38:39:2e:34:88:65:c9:83:6b:21:92:03:2d:88:5d:cc:
         32:ed:45:a4:e1:9b:b6:3f:ca:bc:e9:24:96:80:9d:6f:37:40:
         1b:f4:3e:bc:11:c2:b3:1f:03:75:c8:25:af:12:ec:23:91:c2:
         f6:eb:e9:3f:eb:e4:c5:c4:a4:ed:cc:b1:90:39:a2:ed:62:08:
         3d:b6:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:05 2025 by rpki-client