Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
File:                     YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json)
Hash identifier:          AsUT5HaJ8aq9ZavJ9bZCrrhQklaa2LU3nEmoGc1q/JI=
Subject key identifier:   B9:9E:C5:CC:21:6A:79:80:CA:66:85:35:FD:C5:D0:1C:FF:54:91:C6
Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A
Certificate issuer:       /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
Manifest number:          0127
Signing time:             Sat 09 Aug 2025 05:00:30 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:30 +0000
Manifest next update:     Sat 16 Aug 2025 05:00:30 +0000
Files and hashes:         1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: OT0i8azoeTBXVGjzAdErluJJdTsZF1ll9MKtVz0J65U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A
        Validity
            Not Before: Aug  9 05:00:30 2025 GMT
            Not After : Aug 16 05:00:30 2025 GMT
        Subject: CN=6896d5ee-8698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:4d:e1:01:bf:10:39:c4:0d:6e:91:6a:08:
                    42:a1:73:df:37:e2:e5:5c:84:a1:c1:4d:4c:e2:d4:
                    99:16:42:bd:f5:86:4e:79:33:24:75:ae:f8:91:b2:
                    7a:e5:2b:82:dc:2d:f3:6f:7b:a0:0c:d5:c7:44:36:
                    86:26:50:68:3a:25:76:95:9d:82:85:3c:ec:3c:84:
                    94:86:74:10:7d:0f:55:e8:0b:64:6d:9c:8f:72:11:
                    55:82:c1:08:a1:fc:80:95:03:05:19:01:ea:1e:e8:
                    b9:d0:7e:2e:83:1f:47:4c:20:c2:87:56:e3:be:db:
                    97:19:27:47:48:af:41:00:5e:46:08:8e:80:d4:09:
                    cc:ac:a6:a2:4d:43:4e:91:89:08:0b:15:c5:42:86:
                    9b:0e:2b:c9:dc:a5:f0:da:5c:d3:b2:5c:01:6a:95:
                    1f:1c:18:6c:cc:34:8c:28:fb:ea:56:e1:45:1c:3a:
                    0f:d3:3d:b6:de:a8:67:9e:df:fc:25:31:5a:56:96:
                    10:69:16:17:00:6b:fe:b6:7e:22:19:db:f3:28:07:
                    00:7e:c5:d9:79:96:57:74:55:05:e5:86:09:17:5f:
                    49:db:41:06:6b:46:e7:cf:08:b1:9b:5a:05:3d:7a:
                    ff:7d:3d:97:c1:19:6c:57:d8:7a:73:66:9d:9a:21:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:C5:CC:21:6A:79:80:CA:66:85:35:FD:C5:D0:1C:FF:54:91:C6
            X509v3 Authority Key Identifier:
                keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:73:36:1e:30:bf:fa:08:91:99:8f:93:4b:60:d1:7b:cf:
         bc:7a:e9:e4:3a:2b:47:78:49:14:c6:69:d9:9d:db:fb:53:c1:
         89:ef:14:2d:13:68:5f:d5:bb:c4:e4:90:df:72:ce:a3:56:c5:
         30:f2:04:ef:3f:9b:43:64:7c:3f:45:15:cd:6a:57:a4:f0:6c:
         b9:31:7d:d1:2d:28:bf:40:7a:00:84:3a:1b:95:73:3d:b0:20:
         58:07:46:06:97:65:2a:a5:1c:f6:2f:5e:42:65:bc:fa:40:86:
         bc:c5:15:4c:b9:2c:e5:b6:23:43:1a:ae:58:35:6c:10:29:a6:
         31:f2:ed:ce:5a:93:fe:7b:9b:0d:03:4a:9e:c4:92:fc:78:83:
         7a:4a:74:fc:fc:ff:68:79:89:21:6a:d5:94:0f:8b:8d:17:d4:
         ad:f3:c8:97:d9:f9:13:4c:0c:61:64:b7:38:01:90:ee:c7:d7:
         94:67:10:ce:9a:cc:f2:b9:b7:3a:d1:29:29:03:0e:9f:3f:6e:
         fb:8e:82:ce:d6:4a:42:af:85:00:84:56:43:95:a0:9f:73:6a:
         f1:90:ca:d0:03:72:54:48:c3:eb:70:f7:0d:e8:f0:de:6c:ed:
         75:74:c3:21:56:0d:93:49:6e:93:b4:68:67:f6:e6:25:d0:7c:
         fd:45:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:09 2025 by rpki-client