Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
File:                     YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json)
Hash identifier:          HNqnSgp39MLfVidb6C3VSljUV22VVG+GzpGHpJN6q7Y=
Subject key identifier:   9E:24:57:A2:23:53:06:56:28:E8:F5:64:AC:33:6B:BF:6E:84:1A:F0
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Certificate issuer:       /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
Manifest number:          07FF
Signing time:             Sun 10 Aug 2025 21:00:35 +0000
Manifest this update:     Sun 10 Aug 2025 21:00:34 +0000
Manifest next update:     Sun 17 Aug 2025 21:00:34 +0000
Files and hashes:         1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: pWkkX9ZDTuVycyOGDykeTgd07FCBsfGLaKvGRWF+JxY=)
                          2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
        Validity
            Not Before: Aug 10 21:00:34 2025 GMT
            Not After : Aug 17 21:00:34 2025 GMT
        Subject: CN=68990872-8ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:d6:26:f8:15:af:2f:1d:2e:11:9a:ed:7d:
                    67:4d:4e:54:97:3c:58:63:17:1a:65:d2:78:33:e5:
                    98:13:4a:cc:c1:55:9c:f4:1b:cf:b0:74:15:c1:b4:
                    1e:5f:13:af:8e:c7:1a:e9:d7:ec:69:ad:cb:e1:5c:
                    4c:fd:21:c5:fe:3e:19:f9:d7:05:fd:e5:5c:3a:f3:
                    4b:91:d1:1d:fe:35:0c:d9:32:f0:52:e3:13:e5:ae:
                    da:54:81:19:33:a4:b9:e4:d9:7c:d3:49:88:44:6a:
                    7c:d0:43:0d:b8:a2:66:1f:3c:0b:32:12:b2:45:e7:
                    a5:b4:07:a4:81:09:72:b1:8b:90:f3:66:80:7d:6e:
                    69:24:50:a7:85:9e:74:0a:86:64:5f:d9:7a:95:a4:
                    27:41:b4:2f:bb:22:fc:e6:70:65:0b:43:57:92:63:
                    b2:06:43:c3:ba:88:b6:47:fe:a5:57:b1:db:ce:bb:
                    37:b2:5d:4b:f0:06:b4:b2:ef:17:a5:b7:83:7e:05:
                    45:01:32:d8:77:97:75:2d:1a:56:c4:41:f0:45:7d:
                    1d:e1:46:22:51:f4:98:45:5a:7f:84:95:1b:5e:b4:
                    9e:e5:c7:76:8e:b9:f0:3a:ed:4a:aa:92:8e:72:fd:
                    87:46:a8:89:f8:c8:93:20:79:4f:23:f2:24:8f:96:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:57:A2:23:53:06:56:28:E8:F5:64:AC:33:6B:BF:6E:84:1A:F0
            X509v3 Authority Key Identifier:
                keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:88:be:01:22:48:8f:50:d1:ca:6b:9b:42:24:11:06:5f:
         41:e3:4f:c7:d7:1d:d7:81:ef:10:4d:4f:59:23:7d:f8:74:ec:
         93:e2:51:0d:13:d1:5a:c3:cd:2a:93:65:81:13:f3:40:0d:70:
         64:e5:c6:1a:16:db:b7:30:d6:61:0a:94:4a:88:a8:e7:9f:44:
         20:ee:c5:a2:07:7e:94:47:87:14:2c:33:a8:7b:02:07:22:f6:
         45:5c:6f:72:d9:42:fe:65:13:08:82:66:5f:26:47:18:79:93:
         df:7e:2d:6d:9f:c4:7a:f8:00:ad:fe:50:c3:86:3c:d4:c2:86:
         9c:12:e5:ec:1c:ee:81:f2:ed:77:06:4e:5a:25:cb:51:36:da:
         98:4f:a5:69:e0:45:28:b7:09:86:97:58:fd:f8:80:fd:94:96:
         31:24:4f:73:f4:cb:87:ef:33:db:ff:8b:09:31:05:a8:09:bb:
         07:9a:b9:52:98:7b:e2:2a:a9:fb:6b:e6:07:fc:50:93:0c:ad:
         7a:de:fa:17:af:aa:82:03:59:d0:6d:8c:28:3f:93:01:1a:c5:
         c1:29:53:ba:82:81:8f:59:d7:73:b1:e5:3a:90:01:a2:da:73:
         4a:fb:6d:3f:32:3e:04:d2:97:6b:83:c1:fa:7f:87:62:de:52:
         e7:b0:4b:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC
RDMyMUI0NDEwHhcNMjUwODEwMjEwMDM0WhcNMjUwODE3MjEwMDM0WjAYMRYwFAYD
VQQDEw02ODk5MDg3Mi04ZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0wDWJvgVry8dLhGa7X1nTU5UlzxYYxcaZdJ4M+WYE0rMwVWc9BvPsHQVwbQe
XxOvjsca6dfsaa3L4VxM/SHF/j4Z+dcF/eVcOvNLkdEd/jUM2TLwUuMT5a7aVIEZ
M6S55Nl800mIRGp80EMNuKJmHzwLMhKyReeltAekgQlysYuQ82aAfW5pJFCnhZ50
CoZkX9l6laQnQbQvuyL85nBlC0NXkmOyBkPDuoi2R/6lV7Hbzrs3sl1L8Aa0su8X
pbeDfgVFATLYd5d1LRpWxEHwRX0d4UYiUfSYRVp/hJUbXrSe5cd2jrnwOu1KqpKO
cv2HRqiJ+MiTIHlPI/Ikj5auCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4kV6Ij
UwZWKOj1ZKwza79uhBrwMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz
MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf
eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPYoi+ASJIj1DRymubQiQRBl9B40/H1x3Xge8QTU9ZI334dOyT4lEN
E9Faw80qk2WBE/NADXBk5cYaFtu3MNZhCpRKiKjnn0Qg7sWiB36UR4cULDOoewIH
IvZFXG9y2UL+ZRMIgmZfJkcYeZPffi1tn8R6+ACt/lDDhjzUwoacEuXsHO6B8u13
Bk5aJctRNtqYT6Vp4EUotwmGl1j9+ID9lJYxJE9z9MuH7zPb/4sJMQWoCbsHmrlS
mHviKqn7a+YH/FCTDK163voXr6qCA1nQbYwoP5MBGsXBKVO6goGPWddzseU6kAGi
2nNK+20/Mj4E0pdrg8H6f4di3lLnsEs0
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:08 2025 by rpki-client