Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
File:                     Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft (raw, json)
Hash identifier:          84FTohEBRY/vquyWkavacBlldaj6P4lFcZd8Wh5WEj8=
Subject key identifier:   5E:39:81:A9:2A:DA:11:39:41:8B:D2:ED:DC:30:E5:5B:0F:98:18:12
Authority key identifier: 63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99
Certificate issuer:       /CN=A9188593/serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
Manifest number:          51
Signing time:             Sat 09 Aug 2025 07:45:43 +0000
Manifest this update:     Sat 09 Aug 2025 07:45:42 +0000
Manifest next update:     Sat 16 Aug 2025 07:45:42 +0000
Files and hashes:         1: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl (hash: 7cMKm+yuc9GkWFD5N9pBK34zgNM6FhTNXZp4bj49RJM=)
                          2: A60DE226FA6611EFA2492D77C4F9AE02.roa (hash: EaDsWh2ev+tCV5xfJvG7800tAekhxcSYZkZKsSGYDqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl
                          rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188593, serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99
        Validity
            Not Before: Aug  9 07:45:42 2025 GMT
            Not After : Aug 16 07:45:42 2025 GMT
        Subject: CN=6896fca7-fc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:08:66:54:8f:bf:e5:33:7b:09:14:c9:05:
                    07:c2:f9:1b:eb:a3:96:e5:d7:bc:73:b0:89:b4:90:
                    1d:5e:20:8c:3f:d5:60:9c:1e:b4:82:01:30:af:79:
                    29:1d:bf:bc:f2:09:70:fb:89:8d:84:a0:fc:ec:4b:
                    a9:70:79:e6:f9:31:b2:13:52:0f:b1:36:90:74:d7:
                    f8:2f:3a:5c:5c:ce:04:df:a7:57:d7:43:68:b7:f4:
                    85:87:c2:f1:22:05:96:ae:e4:c4:79:9c:54:7e:c4:
                    29:ed:d4:e5:ef:23:ef:81:f0:11:2f:a1:f3:09:ba:
                    b6:a5:88:c5:fa:61:66:f0:f9:b8:76:3e:ff:28:ec:
                    9c:fb:4d:bf:64:81:f7:06:30:91:52:75:c2:d8:73:
                    5a:dc:e0:3b:a1:56:5b:01:74:d3:01:c8:82:36:36:
                    58:70:d8:1e:e6:b4:8a:8b:bb:ed:a4:9b:94:8f:88:
                    65:f3:36:a2:fc:12:be:dd:9c:84:67:2b:28:f3:64:
                    04:35:3f:1d:e3:9a:5f:b7:ed:21:9a:eb:30:d9:bf:
                    44:65:70:a5:b6:86:de:1a:8a:e3:75:7b:c3:ec:fc:
                    ae:a0:3f:2b:f6:3e:3e:4e:7a:1e:51:a2:5b:ed:14:
                    3c:b3:96:ee:f0:cc:e7:0e:b0:88:6d:df:a4:ea:b9:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:81:A9:2A:DA:11:39:41:8B:D2:ED:DC:30:E5:5B:0F:98:18:12
            X509v3 Authority Key Identifier:
                keyid:63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:26:c9:18:d0:4c:8e:57:6b:59:d5:d7:e1:a6:de:67:c0:40:
         fe:59:a2:1b:11:89:70:da:37:bb:ad:69:f8:9f:55:ec:2e:80:
         34:53:6b:79:8f:be:fe:da:1e:74:ad:eb:8e:59:39:34:a6:9e:
         cf:91:60:03:c2:fa:c5:96:9a:da:45:e8:ba:6d:ad:52:a4:12:
         a1:61:11:8f:54:ad:78:ad:be:61:af:66:cd:96:8f:cd:4c:9a:
         9b:a4:c6:d7:3b:3e:36:f5:c1:fa:4f:3d:10:bb:27:30:40:a9:
         96:88:3d:88:06:3f:fb:2a:54:1c:c2:15:d3:1d:6c:9d:d7:e0:
         93:15:17:01:e1:f1:f0:68:6d:9b:e7:af:fe:de:a5:8e:27:db:
         1f:3b:bb:d9:df:70:94:e2:78:5f:5c:56:78:16:a0:39:cb:2d:
         75:7a:e1:2d:69:41:80:e2:ef:39:73:0a:35:82:a8:93:73:d7:
         73:32:3b:9d:66:38:d1:e0:04:ce:b3:b3:d9:1d:2c:79:30:a8:
         dd:f3:ba:3d:07:d4:e6:6f:9c:6c:38:5b:1a:d1:de:2f:43:60:
         8c:86:6b:52:4d:83:5e:b0:34:2a:37:dc:a7:86:a8:01:a4:28:
         75:9b:3c:89:be:9e:ef:d7:c8:d0:16:f2:11:36:22:75:e0:d2:
         dc:16:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:24 2025 by rpki-client