Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File:                     YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier:          A6dErpnt0OtNAo9n3Y4XULG57gA/ATN7iFSBW5YKo58=
Subject key identifier:   C6:EE:41:4B:BB:09:23:37:7D:C7:9F:7A:68:8D:10:A4:0D:91:22:31
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer:       /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial:       34AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number:          34AB
Signing time:             Fri 08 Aug 2025 15:06:50 +0000
Manifest this update:     Fri 08 Aug 2025 15:06:50 +0000
Manifest next update:     Fri 15 Aug 2025 15:06:50 +0000
Files and hashes:         1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: aWhYTcFdForaV5JoyXGNVZdJHFi+Xi2G1dHNqFr/2mQ=)
                          2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13487 (0x34af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
        Validity
            Not Before: Aug  8 15:06:50 2025 GMT
            Not After : Aug 15 15:06:50 2025 GMT
        Subject: CN=6896128a-28ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:7e:70:d1:80:79:2a:f4:b9:4e:ad:a7:f2:
                    aa:ad:66:29:8d:ec:de:92:a7:ec:41:50:ec:63:6c:
                    d0:57:ac:a1:55:3e:9d:21:70:b2:73:cc:55:d0:be:
                    0b:16:78:9a:b0:8d:77:21:48:4f:a5:15:e9:96:2d:
                    82:3d:8f:53:15:0e:92:a7:18:a1:12:58:d1:b3:5e:
                    11:c9:0b:5f:d8:9d:5c:6d:27:f8:b4:b6:b0:d2:cb:
                    0f:ef:07:3d:78:14:66:59:ef:b2:9b:73:cf:9b:ed:
                    fd:96:62:3d:9d:cd:e2:81:a9:5d:6b:ec:f8:e7:8d:
                    ae:b7:80:ab:56:73:f7:fd:e3:df:2e:a8:4e:0e:46:
                    39:99:35:d7:c4:fa:57:e0:ea:80:d5:af:24:d3:eb:
                    6b:e4:f3:17:59:34:97:a8:b5:f5:2c:05:fb:1d:93:
                    a2:5e:43:0c:96:9b:65:cb:46:4d:19:4a:28:35:24:
                    b0:ec:3b:aa:40:69:08:aa:78:96:4a:52:c5:93:cb:
                    32:bf:19:34:bf:96:bb:ec:3c:1d:e0:34:d4:f6:60:
                    ff:e9:c4:42:8f:ba:63:2f:4c:7d:c8:a7:7f:75:70:
                    d2:05:0b:ca:2d:da:40:82:bd:06:9b:eb:07:5c:5b:
                    e5:46:85:8d:23:26:9f:ab:c6:27:af:fd:bf:81:d7:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:41:4B:BB:09:23:37:7D:C7:9F:7A:68:8D:10:A4:0D:91:22:31
            X509v3 Authority Key Identifier:
                keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:55:07:25:bd:02:70:9c:c8:e9:27:31:dd:e4:72:47:80:
         83:ca:37:b9:2c:77:ad:50:b7:14:34:ff:ee:0e:cb:50:27:46:
         5e:ab:d5:58:68:1f:ee:65:5a:0b:58:41:45:6e:41:fc:33:de:
         02:cd:e8:a6:35:25:dd:75:66:0c:4c:cf:79:1d:b7:57:c4:00:
         90:4c:f6:34:61:54:9b:70:01:d0:8b:44:eb:5f:15:e1:67:3e:
         01:9c:c9:c0:05:fe:6a:53:8c:fa:0f:8e:b2:0f:64:f6:0c:70:
         34:f0:be:ff:8c:2c:2e:fa:4b:4c:80:6e:78:e0:3f:c2:18:fd:
         9a:7d:28:13:21:58:51:f9:85:da:9b:d6:95:49:e4:c8:9c:05:
         f0:31:4c:49:93:30:a2:c9:55:cd:57:22:e5:c9:6f:c5:f0:a7:
         e7:34:56:82:23:c1:a5:7f:f4:9d:ec:f8:0e:10:83:07:f0:26:
         87:1d:10:5e:d4:6f:32:99:c6:f6:2c:b8:19:7a:07:36:b1:38:
         92:42:9b:90:0e:08:e6:97:d7:5a:07:08:e2:69:f0:cd:34:f1:
         5a:8b:32:f2:ed:39:fa:eb:20:f4:9f:f0:a6:8d:0e:b7:12:51:
         0d:26:0b:96:a1:42:c2:f9:69:53:34:5a:0d:14:11:b9:e2:54:
         d5:bd:2b:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD
RjhGRkQyNTQwHhcNMjUwODA4MTUwNjUwWhcNMjUwODE1MTUwNjUwWjAYMRYwFAYD
VQQDEw02ODk2MTI4YS0yOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1c9+cNGAeSr0uU6tp/KqrWYpjezekqfsQVDsY2zQV6yhVT6dIXCyc8xV0L4L
FniasI13IUhPpRXpli2CPY9TFQ6SpxihEljRs14RyQtf2J1cbSf4tLaw0ssP7wc9
eBRmWe+ym3PPm+39lmI9nc3igalda+z4542ut4CrVnP3/ePfLqhODkY5mTXXxPpX
4OqA1a8k0+tr5PMXWTSXqLX1LAX7HZOiXkMMlptly0ZNGUooNSSw7DuqQGkIqniW
SlLFk8syvxk0v5a77Dwd4DTU9mD/6cRCj7pjL0x9yKd/dXDSBQvKLdpAgr0Gm+sH
XFvlRoWNIyafq8Ynr/2/gdchqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbuQUu7
CSM3fcefemiNEKQNkSIxMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE
QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC
QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBa5FUHJb0CcJzI6Scx3eRyR4CDyje5LHetULcUNP/uDstQJ0Zeq9VY
aB/uZVoLWEFFbkH8M94CzeimNSXddWYMTM95HbdXxACQTPY0YVSbcAHQi0TrXxXh
Zz4BnMnABf5qU4z6D46yD2T2DHA08L7/jCwu+ktMgG544D/CGP2afSgTIVhR+YXa
m9aVSeTInAXwMUxJkzCiyVXNVyLlyW/F8KfnNFaCI8Glf/Sd7PgOEIMH8CaHHRBe
1G8ymcb2LLgZegc2sTiSQpuQDgjml9daBwjiafDNNPFaizLy7Tn66yD0n/CmjQ63
ElENJguWoULC+WlTNFoNFBG54lTVvSs8
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:01 2025 by rpki-client