Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier:          jy/khyRtzOtSdhNZvVCHIoaHpyl3aThfMS70kYmgj00=
Subject key identifier:   EC:09:76:59:33:F4:AD:32:1B:83:BE:3E:ED:44:A4:C6:7A:66:51:42
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number:          03F5
Signing time:             Sun 15 Jun 2025 00:22:53 +0000
Manifest this update:     Sun 15 Jun 2025 00:22:53 +0000
Manifest next update:     Sun 22 Jun 2025 00:22:53 +0000
Files and hashes:         1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: KVu9wVVA6btdfnAggWk/pJzF4d6VMwhUDAL5R1vtMP0=)
                          2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=)
                          3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=)
                          4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: P7ML1zua1vWGcEbBxHBGy+N0awfVzYw0xfSbdU5Alt4=)
                          5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Jun 15 00:22:53 2025 GMT
            Not After : Jun 22 00:22:53 2025 GMT
        Subject: CN=684e125d-31ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1d:9e:ed:ba:ac:26:ad:4c:05:76:5a:0c:3b:
                    cd:05:6b:e1:5c:ce:37:df:6a:1c:77:79:cc:7e:54:
                    26:71:8e:10:68:50:83:5f:ac:16:4d:5d:19:c2:06:
                    4f:38:70:ee:ac:07:23:1d:76:65:52:42:62:ab:07:
                    90:0b:71:2c:2b:7c:5c:1c:de:8d:7a:ac:8d:13:94:
                    ec:7f:8c:2f:bc:fa:47:76:46:65:0a:11:54:00:d1:
                    ce:73:0c:57:3f:f1:f2:d0:e4:d1:97:90:95:74:5d:
                    1d:b4:f1:e8:3a:2a:d6:e6:94:0c:e3:0d:fd:df:de:
                    da:22:d7:bb:54:28:38:a0:47:00:2c:5d:0a:86:f7:
                    e3:1a:cc:34:ea:4a:f2:bb:e3:43:8c:02:56:ff:50:
                    92:f3:d3:24:d5:6b:f5:0e:a1:ae:32:34:d2:2e:73:
                    de:a5:fb:45:d9:8f:13:b8:d7:72:89:79:e2:c4:2e:
                    b9:23:23:1d:b7:e9:c9:ed:35:0a:d0:1f:3c:65:a1:
                    94:13:8f:b6:28:bb:85:0c:bb:25:1a:61:d2:73:b6:
                    a1:0f:66:23:ca:10:7b:78:c1:84:6d:90:22:62:3b:
                    a5:4e:09:9d:87:cd:5a:a6:dc:d8:ab:79:9f:45:78:
                    21:6e:b1:de:35:3b:84:18:3b:82:c8:ec:67:28:bc:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:76:59:33:F4:AD:32:1B:83:BE:3E:ED:44:A4:C6:7A:66:51:42
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:3d:b8:4d:91:c4:18:63:57:30:00:7f:b7:1a:b5:80:f7:
         27:22:71:ae:a9:a2:af:be:37:0a:b1:1e:1f:07:c2:b1:38:cd:
         60:c0:8c:bb:70:15:83:07:9e:d6:67:b6:f0:a5:f6:34:0a:22:
         8a:a8:3d:36:87:f2:3e:1a:04:67:a3:a4:75:bb:b4:a1:6b:6d:
         be:83:77:ac:e5:29:5c:52:59:7a:49:af:5c:98:65:05:e5:66:
         6d:45:71:a6:93:15:90:1c:ed:09:e7:41:ca:b7:e7:a6:27:65:
         2c:10:1e:82:0b:2b:3a:7f:51:bb:3d:3d:4b:6f:65:70:7b:2c:
         38:46:10:2c:6b:11:83:14:e7:81:0e:d4:ea:92:bb:a7:62:54:
         20:90:18:71:3e:84:18:b2:1c:00:4b:22:41:cc:9a:1e:ea:25:
         22:e2:e3:a7:24:61:24:c9:8b:a5:62:a9:4c:1e:e5:1d:f1:00:
         ae:76:79:1c:a6:83:91:0e:c8:9e:66:1e:27:df:7e:16:af:bb:
         28:c5:f3:77:f9:4a:9b:db:67:a2:20:df:e6:6d:52:76:61:53:
         fc:74:2a:0d:3a:af:93:de:2e:f8:ec:4d:32:6a:2f:62:f1:82:
         bc:d3:0c:9b:6a:63:b8:b0:38:5e:ea:e3:1e:38:50:db:d9:11:
         60:04:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:36 2025 by rpki-client