Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
File:                     yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json)
Hash identifier:          WTlI19hyVaf3//LUeL1qAPCrO7z6s4zLsThlb3BRNu4=
Subject key identifier:   29:15:CE:06:AE:EB:44:B8:4E:57:DB:BA:4D:4B:AD:25:62:DC:9A:C9
Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
Certificate issuer:       /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Certificate serial:       07E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
Manifest number:          07E4
Signing time:             Sat 14 Jun 2025 20:45:48 +0000
Manifest this update:     Sat 14 Jun 2025 20:45:47 +0000
Manifest next update:     Sat 21 Jun 2025 20:45:47 +0000
Files and hashes:         1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: J6l4AjMIu2TjnHSWAr0OHiNrSsE6FhpjVa/zxLcHNn0=)
                          2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
                          rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
        Validity
            Not Before: Jun 14 20:45:47 2025 GMT
            Not After : Jun 21 20:45:47 2025 GMT
        Subject: CN=684ddf7c-9e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:e3:31:d9:4c:f6:31:5f:65:dc:6e:52:d8:
                    0c:78:11:52:ab:45:8c:f0:d5:cd:b4:07:df:31:8a:
                    51:97:11:d0:48:21:a3:77:25:15:d8:76:d6:66:c2:
                    d6:47:f0:fe:bb:fb:c4:20:25:4b:9f:bf:08:bd:c8:
                    26:a3:05:83:77:40:cb:8c:e9:d2:03:5a:02:3d:a7:
                    92:77:c4:9c:35:e4:f3:7c:c4:94:67:e6:45:64:74:
                    53:f5:ad:0c:f8:fe:c5:2c:4a:70:c2:94:96:02:c7:
                    e8:9b:10:6c:7a:1c:6d:2b:c4:0a:ed:b9:6d:23:6f:
                    5d:0e:3b:14:d5:56:cc:10:d5:ad:c0:c5:71:5a:3b:
                    f6:38:fa:16:95:0d:d9:81:c7:26:15:68:10:39:f0:
                    02:13:6b:0f:06:b4:d6:91:85:2a:4a:39:99:a4:f8:
                    27:b2:0e:c3:1b:ca:7b:df:53:78:35:70:7a:07:6b:
                    81:44:44:eb:32:e9:40:3c:c8:64:41:56:f2:b4:99:
                    47:28:df:c6:8e:29:6e:41:3b:dc:0b:1f:74:8f:59:
                    5b:e3:1b:ec:99:ce:ab:71:51:04:02:37:82:82:99:
                    e9:0a:98:f0:f5:ce:b8:99:58:43:33:99:f6:1c:8d:
                    d8:e8:b4:e0:dc:47:4f:3b:fe:29:1b:d8:af:8c:c0:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:CE:06:AE:EB:44:B8:4E:57:DB:BA:4D:4B:AD:25:62:DC:9A:C9
            X509v3 Authority Key Identifier:
                keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:ff:bf:b4:2f:7a:21:29:02:b1:a3:29:c8:7d:22:a3:e5:
         67:83:94:33:46:7d:24:0c:8b:b7:a2:bc:72:f8:86:f1:04:4e:
         3f:80:e7:ad:d0:e6:91:52:38:08:c1:59:d5:14:b0:d3:fd:cf:
         d4:ff:e1:80:a8:63:27:b8:1d:bd:1f:aa:f9:36:a9:8f:b1:bf:
         6c:fd:3c:23:e5:75:0b:e0:58:45:b8:71:11:b6:f7:38:ab:63:
         08:b9:8f:58:1f:53:a8:28:35:33:0a:90:78:07:43:31:7d:e9:
         f4:99:b3:42:8b:7e:c8:d1:5e:53:54:b9:a7:5f:11:e6:5e:cc:
         22:54:be:85:59:17:b5:fd:ec:00:92:8d:56:b6:dc:e1:a4:c7:
         06:f2:ed:d6:16:bf:36:18:39:d3:66:42:42:8f:2a:3c:af:25:
         40:50:77:71:34:7e:cf:d2:a7:88:21:05:be:48:01:96:b5:9d:
         0b:ff:49:7b:d5:30:ff:b0:42:7d:a8:49:c1:2d:b7:b0:49:50:
         84:c7:2d:26:ff:76:3d:f8:a4:95:26:1e:87:5a:9a:0b:9c:4d:
         2b:6e:8a:c8:8d:8c:52:27:db:f7:95:d9:d6:41:54:31:77:77:
         92:c6:11:10:89:e2:79:fd:b8:a4:61:35:fb:ca:eb:0b:85:74:
         70:58:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:51:30 2025 by rpki-client