Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
File:                     yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json)
Hash identifier:          2izw4/xSv6zyS58Sze9QAt/yLPCTkm94sIN82vZvQR0=
Subject key identifier:   FE:7C:D3:B3:2E:CA:8D:44:6E:31:89:3B:1E:CB:29:1E:65:C0:5C:35
Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D
Certificate issuer:       /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
Manifest number:          0800
Signing time:             Fri 08 Aug 2025 21:16:28 +0000
Manifest this update:     Fri 08 Aug 2025 21:16:27 +0000
Manifest next update:     Fri 15 Aug 2025 21:16:27 +0000
Files and hashes:         1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: 7qGU0pb+pvCGfeq5JBQjQp9ckVoZm1DwM8pe3++cuC4=)
                          2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl
                          rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D
        Validity
            Not Before: Aug  8 21:16:27 2025 GMT
            Not After : Aug 15 21:16:27 2025 GMT
        Subject: CN=6896692c-4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:fa:be:66:71:f9:ec:4a:2f:24:d7:20:c3:
                    71:a4:10:ea:70:02:0a:da:14:fb:b3:68:00:b6:71:
                    00:ad:ee:96:2d:00:17:6a:d1:73:d7:ba:56:ed:43:
                    71:72:cd:9a:72:95:2d:4c:e0:ba:51:c3:a0:8c:b3:
                    33:f5:0a:96:e1:2f:f0:59:6c:db:93:ed:2f:eb:fe:
                    69:0a:ef:02:4a:8e:bb:cb:86:68:74:36:45:58:24:
                    57:ed:a7:5e:15:c3:19:2d:0b:3f:f0:d3:96:0b:87:
                    e9:4e:d1:ad:5f:36:3c:99:80:73:f9:5e:ce:86:71:
                    dc:4c:bb:15:17:ef:35:b4:53:67:78:d6:8e:20:94:
                    8c:71:3d:fe:4e:12:be:c5:f1:9f:e5:14:15:14:bb:
                    c0:c0:53:3b:b9:f0:97:6e:2a:e1:98:b7:4f:81:93:
                    b0:1d:cb:7e:bc:15:71:a4:64:eb:a4:25:91:69:47:
                    a6:0f:0a:12:b4:1c:6a:39:1c:a8:00:26:cb:aa:d1:
                    5b:f0:3e:3f:a4:27:45:4b:cd:8f:01:7d:e1:9b:ae:
                    bb:73:e5:1f:b8:b6:60:74:b5:83:6a:8c:25:2e:8d:
                    26:0b:70:98:ad:d2:d6:0b:7b:0f:f4:ba:58:56:54:
                    ac:45:a1:5a:87:a7:f7:e8:5f:71:85:32:a1:44:9b:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:D3:B3:2E:CA:8D:44:6E:31:89:3B:1E:CB:29:1E:65:C0:5C:35
            X509v3 Authority Key Identifier:
                keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cb:2a:30:b8:9e:b1:58:12:59:3b:68:fd:14:d9:da:02:73:
         81:b8:35:d9:84:ff:9a:2b:a2:17:fa:aa:05:f1:cc:41:7a:d8:
         ba:f3:bc:b4:d2:59:3f:a2:82:e5:f7:85:93:34:01:ca:56:be:
         f2:75:0d:fc:0a:46:c0:d6:24:bc:77:d0:a0:a9:b4:c4:41:6d:
         e0:90:55:c1:f0:de:b0:e6:df:04:06:75:d7:82:39:89:67:74:
         01:d7:70:b6:0a:4b:aa:63:09:f6:66:4e:3b:bc:e2:be:b8:e1:
         20:65:35:35:56:a3:54:97:f8:46:b0:0d:d9:ae:08:aa:36:23:
         ae:76:cf:43:bd:ad:ab:89:d3:d2:c1:49:13:c1:8c:ae:e9:85:
         4a:fa:2b:73:b3:e6:33:01:9c:01:b6:bf:64:d1:40:51:5a:1e:
         5a:eb:20:c0:22:d8:d8:f8:20:95:24:05:c5:6d:5c:73:40:42:
         8e:94:0a:45:80:84:45:ee:8c:57:d7:83:eb:ef:5d:e3:3a:5a:
         09:b6:c3:e6:ad:ae:5e:52:33:99:ed:51:ff:78:61:25:4e:4e:
         b5:08:53:91:3a:45:cc:fd:93:56:b8:53:b8:ed:cb:91:06:03:
         5d:5b:0f:0e:06:97:12:3f:1e:bd:23:5b:ac:0c:e2:13:56:f8:
         0c:df:bb:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz
MzZGRkFGNUQwHhcNMjUwODA4MjExNjI3WhcNMjUwODE1MjExNjI3WjAYMRYwFAYD
VQQDEw02ODk2NjkyYy00NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc36vmZx+exKLyTXIMNxpBDqcAIK2hT7s2gAtnEAre6WLQAXatFz17pW7UNx
cs2acpUtTOC6UcOgjLMz9QqW4S/wWWzbk+0v6/5pCu8CSo67y4ZodDZFWCRX7ade
FcMZLQs/8NOWC4fpTtGtXzY8mYBz+V7OhnHcTLsVF+81tFNneNaOIJSMcT3+ThK+
xfGf5RQVFLvAwFM7ufCXbirhmLdPgZOwHct+vBVxpGTrpCWRaUemDwoStBxqORyo
ACbLqtFb8D4/pCdFS82PAX3hm667c+UfuLZgdLWDaowlLo0mC3CYrdLWC3sP9LpY
VlSsRaFah6f36F9xhTKhRJv3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5807Mu
yo1EbjGJOx7LKR5lwFw1MB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD
QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu
WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwyyowuJ6xWBJZO2j9FNnaAnOBuDXZhP+aK6IX+qoF8cxBeti687y0
0lk/ooLl94WTNAHKVr7ydQ38CkbA1iS8d9CgqbTEQW3gkFXB8N6w5t8EBnXXgjmJ
Z3QB13C2CkuqYwn2Zk47vOK+uOEgZTU1VqNUl/hGsA3ZrgiqNiOuds9Dva2ridPS
wUkTwYyu6YVK+itzs+YzAZwBtr9k0UBRWh5a6yDAItjY+CCVJAXFbVxzQEKOlApF
gIRF7oxX14Pr713jOloJtsPmra5eUjOZ7VH/eGElTk61CFOROkXM/ZNWuFO47cuR
BgNdWw8OBpcSPx69I1usDOITVvgM37u7
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:38 2025 by rpki-client