Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File:                     YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier:          AcecdOA1p8aFaf21MH59ToJY5cjP8te9HC+pReJLNUU=
Subject key identifier:   5C:0B:9A:22:23:42:84:A1:2B:B2:12:78:F6:E9:31:D0:EF:CB:5C:0B
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       076F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number:          075F
Signing time:             Sat 14 Jun 2025 21:22:36 +0000
Manifest this update:     Sat 14 Jun 2025 21:22:35 +0000
Manifest next update:     Sat 21 Jun 2025 21:22:35 +0000
Files and hashes:         1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: /WaPwG2IOhHb40ubxLRJaqfWbf2gWb7YU48pi3MWrLY=)
                          2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=)
                          3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Jun 14 21:22:35 2025 GMT
            Not After : Jun 21 21:22:35 2025 GMT
        Subject: CN=684de81c-7f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:81:c4:83:00:f9:f7:1f:3d:5d:56:dd:b4:
                    63:4f:82:dc:d2:8b:37:7d:e3:49:0c:67:c3:ff:d4:
                    72:8e:e5:13:f8:b4:72:81:a9:94:ad:64:30:49:9f:
                    66:ca:86:aa:c9:0e:cf:d3:a2:c3:63:6a:67:e8:34:
                    d9:0c:3a:87:f8:e7:b5:5b:0f:07:9c:fa:a8:c1:1f:
                    5e:fb:7e:5a:9c:69:b0:ba:94:8a:bb:c6:1f:fd:25:
                    ff:c8:b3:5c:cc:a1:c7:0d:36:d6:4b:dd:59:97:48:
                    4b:06:3a:6b:19:d9:9a:ed:61:44:21:8e:0f:8b:24:
                    e7:44:1b:e5:e9:69:f5:07:e7:09:5c:be:ef:27:01:
                    e0:bd:c5:bc:a8:b6:c4:af:58:8e:97:2a:94:e5:46:
                    9c:1c:cb:c7:0e:88:aa:d7:84:73:76:18:1a:0e:fe:
                    39:f2:7b:40:da:65:1b:d6:b7:38:68:fc:e4:88:c9:
                    db:90:76:d9:46:24:eb:81:52:88:59:d5:6d:18:bb:
                    c5:50:0a:89:da:be:24:47:1b:41:04:1e:94:05:f9:
                    d5:38:1b:29:3f:83:53:72:e8:46:2d:bb:04:50:af:
                    b2:d2:07:ea:1e:8e:f7:d9:c7:cd:cf:bd:65:b4:54:
                    a1:b1:32:21:0b:be:c0:fe:1a:16:8b:69:a3:17:a5:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0B:9A:22:23:42:84:A1:2B:B2:12:78:F6:E9:31:D0:EF:CB:5C:0B
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:89:5c:d4:a1:49:78:7d:21:f1:c1:1b:48:2d:ac:9c:4a:dc:
         1f:b2:2c:c1:b6:e3:91:5a:35:82:52:70:61:49:ed:eb:07:07:
         c8:ab:c2:60:d5:f2:c9:7c:cb:c0:79:ef:7d:95:51:a7:9d:b8:
         60:19:b6:81:5d:82:96:f4:01:76:0a:3c:eb:87:52:7e:40:b7:
         66:92:ee:c4:c5:e7:28:7d:bd:ba:86:8d:18:0b:20:e9:d4:79:
         84:47:14:7a:c5:46:93:1e:0a:e5:07:21:37:1f:69:4d:a0:7f:
         0f:e3:05:5a:1a:91:cf:8f:4d:e5:e2:80:bf:6f:62:09:43:5e:
         14:ee:5f:31:2a:d6:69:af:00:9f:3b:d1:0f:95:cc:61:90:2a:
         ad:e5:d4:65:24:71:84:1f:b1:d1:0e:9c:86:48:a0:93:aa:09:
         c1:b3:76:82:59:5d:5a:b1:7e:ec:1c:a9:f0:c7:74:fa:2e:cb:
         7b:ca:6d:95:d1:f8:65:3f:04:af:ba:11:e9:4c:f4:44:1a:07:
         31:2e:9f:c3:c6:c4:29:a4:6b:eb:a6:d3:91:eb:fb:de:4a:18:
         1a:29:0a:d1:24:92:3b:5f:42:fc:20:c6:d7:12:91:9c:01:2b:
         00:13:d7:5c:53:70:d5:9e:af:48:3d:d3:af:fc:9e:ee:e7:7a:
         a2:b6:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:01:34 2025 by rpki-client