Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File:                     YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier:          P12K+B+4V9yCpZrEad6zn4MLDXxJVbqLqUugjt6hMQg=
Subject key identifier:   E8:62:62:96:F7:03:C1:59:0D:EB:5F:24:C3:D8:B1:55:19:EC:98:0B
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer:       /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number:          0645
Signing time:             Fri 08 Aug 2025 23:04:22 +0000
Manifest this update:     Fri 08 Aug 2025 23:04:21 +0000
Manifest next update:     Fri 15 Aug 2025 23:04:21 +0000
Files and hashes:         1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: Kr6oK811+8nQTs5I5EyEksUuWDK3H7GjJrIwIRJtoiM=)
                          2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=)
                          3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
                          rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
        Validity
            Not Before: Aug  8 23:04:21 2025 GMT
            Not After : Aug 15 23:04:21 2025 GMT
        Subject: CN=68968276-1c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:c2:08:05:b2:e5:8c:21:cf:76:b7:f7:2e:
                    65:53:ba:92:92:b0:de:ed:b1:04:c8:c7:ff:48:24:
                    02:be:36:ec:9b:16:4c:74:32:ec:89:c9:9f:c5:10:
                    9a:57:bf:21:9c:43:74:0d:6f:01:c9:8a:37:58:e7:
                    0d:d4:d1:00:cc:9a:d5:9b:95:b8:d7:1a:3f:9a:ea:
                    b8:fe:28:8f:7e:8a:e8:a1:dd:cf:64:23:39:a9:06:
                    25:ed:5c:da:bb:3e:f9:15:57:05:b3:90:fd:a4:1a:
                    b9:b2:16:a0:c5:be:bb:ff:be:f8:49:2a:10:da:52:
                    f2:0a:e9:b7:cf:0f:67:f0:fd:22:75:34:00:c9:7a:
                    f8:1a:af:61:7b:c8:cb:c6:e6:3b:0e:c6:d1:c9:92:
                    be:06:78:5c:d7:83:ef:43:ab:b4:0b:a6:f4:ad:1f:
                    26:3c:35:da:a0:d4:2a:97:58:bf:43:cf:d2:7d:53:
                    4e:d2:3e:92:32:5f:b4:a0:ca:e0:4f:d0:42:32:6d:
                    87:46:85:cf:f5:b4:fc:b3:f5:89:7d:f8:d0:49:e3:
                    2d:aa:2b:76:14:71:a9:64:d3:ae:f0:ad:b7:a6:95:
                    69:61:db:1f:fa:6a:e1:7e:90:9e:75:0f:b5:09:0a:
                    40:3b:d4:b7:f8:6c:b1:60:6c:80:7e:3d:47:06:24:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:62:96:F7:03:C1:59:0D:EB:5F:24:C3:D8:B1:55:19:EC:98:0B
            X509v3 Authority Key Identifier:
                keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:f8:87:3c:bc:24:a0:2a:0d:54:e9:44:f5:a8:95:e0:c7:
         a6:69:6c:c2:00:b9:37:ea:a4:56:65:60:2a:7e:54:62:75:7d:
         75:90:85:18:e8:de:b1:a8:b6:22:cf:60:5e:0c:8c:a6:5b:bd:
         3f:af:c0:cc:e3:1c:8f:42:8b:f3:06:6e:06:de:9e:d4:ae:23:
         08:b0:04:c9:be:77:58:3f:9c:a5:60:14:fb:eb:7d:e5:e7:32:
         5e:bc:fa:7f:0e:35:a6:81:2e:25:9a:84:3b:b8:da:a6:d7:2a:
         d5:f3:09:7c:84:63:1d:c6:d6:1d:7b:77:ef:65:d3:58:7a:34:
         6f:ee:e3:84:55:9c:da:29:50:35:60:32:1d:48:a1:d0:a9:65:
         14:b8:14:66:7d:43:43:6e:37:f5:e2:28:ea:7f:3e:16:12:a6:
         de:82:48:80:24:7d:73:c5:fe:4e:06:34:c3:ef:58:93:0a:c0:
         75:dc:56:a7:47:33:ea:5b:92:8e:0d:2c:bd:a6:36:3b:01:fc:
         0d:04:6a:c7:c1:70:38:52:f7:39:48:2e:61:dd:9e:16:89:c3:
         5a:22:b4:07:95:71:76:d3:75:a9:40:71:27:91:73:d8:15:65:
         8c:a4:d6:48:df:ba:92:fe:b4:e8:57:14:ba:ad:41:c0:da:92:
         9f:ae:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:06 2025 by rpki-client