Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File:                     YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier:          c3JEcA3FDUcifApKM1I9oXml0XstpRAy5gAos61SWxE=
Subject key identifier:   56:4C:72:F8:FD:68:CE:6F:45:A2:B4:21:9F:B2:4D:CD:B6:6A:60:6D
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer:       /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial:       07D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number:          07AB
Signing time:             Fri 08 Aug 2025 21:47:14 +0000
Manifest this update:     Fri 08 Aug 2025 21:47:14 +0000
Manifest next update:     Fri 15 Aug 2025 21:47:14 +0000
Files and hashes:         1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: XQtyKR4qQJUfhviJr+7Zpa0WRBv9O6Bjov+xNzkCjGA=)
                          2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: m3HRY//GpdVT+hpG8y49SxDvHAGnCrO93hZGlg6oP6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
                          rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
        Validity
            Not Before: Aug  8 21:47:14 2025 GMT
            Not After : Aug 15 21:47:14 2025 GMT
        Subject: CN=68967062-1879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:77:e1:9b:e7:6f:84:59:d7:77:7c:d4:b4:
                    0e:9f:a9:ae:da:a0:9b:5d:4a:5c:ec:c8:53:60:79:
                    39:f1:9e:d7:18:87:d6:63:c0:1a:e9:06:97:af:09:
                    0b:11:b0:b6:06:30:d0:70:6c:44:f7:40:48:71:d8:
                    02:52:e4:46:3a:81:5e:39:64:38:9f:00:5f:0b:d1:
                    36:f4:3f:dc:31:d5:2e:4b:bf:d0:61:94:15:2d:e2:
                    5f:d1:1f:fb:17:18:ff:4f:f7:99:b1:76:ff:86:3d:
                    3b:eb:c9:08:13:85:48:7b:68:40:5b:ad:48:96:dd:
                    b1:98:55:83:2d:ad:63:15:39:ef:7d:2f:9e:3d:ad:
                    30:8c:bb:60:c2:bc:38:3f:96:6b:48:9e:ed:c8:1d:
                    99:43:96:e6:e9:20:68:db:80:94:cb:18:87:47:16:
                    3f:fa:f7:5f:f2:2f:9c:ca:98:fa:73:7a:81:96:ec:
                    72:2e:ab:28:a3:77:99:ad:a2:90:90:6b:0f:4e:a0:
                    af:0f:54:ef:ce:c0:6a:a0:f2:cf:31:ce:57:d7:4a:
                    4b:17:f2:8a:97:0c:ba:e2:6a:12:f0:6a:f8:11:58:
                    ee:11:5b:1a:44:72:33:69:95:51:2d:37:7b:b0:4d:
                    a9:23:2e:c7:18:b9:c3:d7:aa:b3:02:42:0e:03:b9:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4C:72:F8:FD:68:CE:6F:45:A2:B4:21:9F:B2:4D:CD:B6:6A:60:6D
            X509v3 Authority Key Identifier:
                keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:c3:2e:25:5e:9d:01:d4:40:12:09:e1:71:b9:a4:79:9f:
         c7:ea:26:79:41:e6:d8:18:97:3d:03:a2:b5:13:f6:41:ba:62:
         91:ea:19:08:2c:72:ae:88:b4:7b:c0:94:68:0a:9c:13:6e:60:
         5b:d0:6e:45:0a:bb:1a:d8:14:15:a2:7e:a8:bd:b8:fb:91:0f:
         4b:91:c5:80:05:ec:51:14:5f:a6:cd:3e:ba:08:75:3e:ee:46:
         18:9a:cb:48:c4:56:6b:9a:93:d2:8e:36:e8:d6:29:02:d9:8f:
         3a:bb:41:dd:8d:79:1e:50:78:97:c6:a1:cc:4f:d2:39:77:1c:
         93:aa:da:ea:11:19:08:18:73:d0:3a:1c:51:f4:0c:49:3a:8b:
         46:67:a0:7e:90:1c:38:4c:36:1a:6b:b0:ab:62:79:55:84:76:
         71:3c:fa:30:4d:dd:ee:9c:53:03:32:45:da:37:14:85:53:a7:
         36:45:75:9f:22:5b:3f:42:17:7f:58:57:69:13:e1:84:b5:e7:
         eb:8f:09:94:9a:84:a2:3f:a0:e0:33:95:c6:41:d9:3a:d6:26:
         50:10:ab:fe:7a:f5:82:20:2a:47:7b:85:6b:6f:ef:51:22:97:
         1e:01:3f:02:c9:8a:42:6f:ff:10:b9:1e:93:85:67:44:92:4b:
         28:8e:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:48 2025 by rpki-client