Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          JxMpIfuJTt/9AHPgQYlJjK/9W2f36A8cUd0exBCIKLc=
Subject key identifier:   AE:75:9E:1F:AC:DE:72:36:12:0A:D0:DB:12:FA:40:9B:F5:27:86:CA
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0AAF
Signing time:             Fri 08 Aug 2025 20:44:45 +0000
Manifest this update:     Fri 08 Aug 2025 20:44:44 +0000
Manifest next update:     Fri 15 Aug 2025 20:44:44 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: dMu0ws81ICrT056t2hJnwTtjp1V9DwA3+p/WiRX78bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Aug  8 20:44:44 2025 GMT
            Not After : Aug 15 20:44:44 2025 GMT
        Subject: CN=689661bd-8518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:ed:15:9f:fb:de:78:a8:9a:a0:92:d4:46:
                    ec:d7:c9:59:0c:3a:5d:84:09:68:44:69:d0:ea:93:
                    85:51:82:e8:39:23:4b:9b:96:82:70:16:21:00:e5:
                    00:c4:19:9d:77:2f:22:72:ab:8e:6a:54:1c:86:99:
                    d5:e8:26:cf:71:3b:16:9a:e6:5b:68:c2:80:a6:1d:
                    28:f3:4f:0b:ee:57:21:e3:9d:d8:c5:42:06:72:14:
                    b4:81:3d:4b:a2:c2:30:dd:ae:bb:1a:d0:9f:72:52:
                    e8:66:7c:da:75:4e:db:07:44:3b:7b:42:ae:de:f8:
                    ea:2d:6f:e8:5f:53:61:35:a7:a1:7a:02:ac:ba:fa:
                    ac:7e:9d:b5:b2:9a:03:e4:9c:d5:e0:61:48:7d:ca:
                    02:a3:9e:c4:fc:fb:b6:a0:5f:b7:aa:24:b8:b3:55:
                    7a:81:d5:38:a3:04:e8:05:4a:f5:72:97:95:d8:c1:
                    cb:cd:35:25:ad:ee:3a:38:39:ee:57:ef:3b:f5:4e:
                    8f:1c:04:f3:34:ff:7e:cf:5e:03:56:b9:48:4a:b9:
                    ee:a8:8c:1c:56:4a:9f:e4:d5:be:23:f2:9e:a9:16:
                    38:62:0a:28:cf:4e:31:00:76:e2:de:75:78:6d:1a:
                    06:e8:46:6e:2f:76:71:56:07:92:c0:ea:a1:10:2b:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:75:9E:1F:AC:DE:72:36:12:0A:D0:DB:12:FA:40:9B:F5:27:86:CA
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:de:4c:16:06:2d:b4:2b:bb:a1:ce:cf:07:28:43:24:b0:
         1d:0b:07:f1:82:0f:3e:5d:c6:85:90:47:b3:b8:4e:ab:b7:da:
         bc:08:f5:35:56:c3:f3:8e:34:d2:8f:6f:a4:fa:64:90:b0:64:
         c1:e6:9c:54:95:35:0c:d4:00:b1:eb:ed:6e:05:25:e4:a9:e8:
         c3:2f:6f:9c:68:20:4a:ac:d3:d0:b0:ea:18:af:d0:13:b9:6a:
         7a:d3:e3:61:bb:22:fb:df:88:59:b4:4c:90:7d:55:65:74:32:
         45:46:88:61:c6:b1:88:1a:d1:a3:38:d3:90:9e:d5:c0:c3:6d:
         50:36:3b:77:18:11:9f:8e:ae:fa:75:82:c8:f3:74:0d:bd:29:
         2d:4d:b0:bf:8e:54:1b:27:22:18:83:0d:c5:62:8f:24:f7:e3:
         27:b3:da:c5:31:bc:6b:98:25:5c:01:9a:ff:9d:f9:9b:40:59:
         40:a9:ab:b5:04:1b:13:c8:c0:3a:d2:b4:4b:1d:a9:d1:68:99:
         83:86:3d:ca:9e:fe:0b:03:42:8d:8f:f2:3e:a3:3f:b0:27:c6:
         3a:26:78:73:88:c4:cc:e3:13:8b:74:e5:31:eb:cd:ec:f9:b4:
         dc:d5:18:94:94:87:6b:60:b0:c7:36:9c:29:10:a9:4b:eb:28:
         eb:5b:49:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF
Q0RFRDNGMDQwHhcNMjUwODA4MjA0NDQ0WhcNMjUwODE1MjA0NDQ0WjAYMRYwFAYD
VQQDEw02ODk2NjFiZC04NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZztFZ/73niomqCS1Ebs18lZDDpdhAloRGnQ6pOFUYLoOSNLm5aCcBYhAOUA
xBmddy8icquOalQchpnV6CbPcTsWmuZbaMKAph0o808L7lch453YxUIGchS0gT1L
osIw3a67GtCfclLoZnzadU7bB0Q7e0Ku3vjqLW/oX1NhNaehegKsuvqsfp21spoD
5JzV4GFIfcoCo57E/Pu2oF+3qiS4s1V6gdU4owToBUr1cpeV2MHLzTUlre46ODnu
V+879U6PHATzNP9+z14DVrlISrnuqIwcVkqf5NW+I/KeqRY4Ygooz04xAHbi3nV4
bRoG6EZuL3ZxVgeSwOqhECuhawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK51nh+s
3nI2EgrQ2xL6QJv1J4bKMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz
bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6/N5MFgYttCu7oc7PByhDJLAdCwfxgg8+XcaFkEezuE6rt9q8CPU1
VsPzjjTSj2+k+mSQsGTB5pxUlTUM1ACx6+1uBSXkqejDL2+caCBKrNPQsOoYr9AT
uWp60+NhuyL734hZtEyQfVVldDJFRohhxrGIGtGjONOQntXAw21QNjt3GBGfjq76
dYLI83QNvSktTbC/jlQbJyIYgw3FYo8k9+Mns9rFMbxrmCVcAZr/nfmbQFlAqau1
BBsTyMA60rRLHanRaJmDhj3Knv4LA0KNj/I+oz+wJ8Y6JnhziMTM4xOLdOUx683s
+bTc1RiUlIdrYLDHNpwpEKlL6yjrW0ko
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:56 2025 by rpki-client