Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File:                     ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier:          9h+T8ElhB3yuzLRjxAIT8Fs1WrdhNMFpQzW9kjPBmlg=
Subject key identifier:   82:F5:9C:EF:7B:02:7E:EB:28:B7:8B:68:4B:20:E8:10:31:2A:96:FA
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       08E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number:          08CC
Signing time:             Wed 02 Jul 2025 21:00:00 +0000
Manifest this update:     Wed 02 Jul 2025 21:00:00 +0000
Manifest next update:     Wed 09 Jul 2025 21:00:00 +0000
Files and hashes:         1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: GKa45iKxHZNdDnI2xNXlPBm3JUpaIYsnSwHXFfRVaGw=)
                          2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: xFhwmyCR50XOerYq8iSgMgO+SIsbHjR9sIw6IGAYvWU=)
                          3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: Z21NxB4s+kOX44LQC1mykWpLjv30/E11cYoVZ/qqS00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Jul  2 21:00:00 2025 GMT
            Not After : Jul  9 21:00:00 2025 GMT
        Subject: CN=68659dd0-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:41:70:c2:9b:6f:ae:ab:ca:80:77:19:e8:
                    20:4d:ee:42:3b:11:3c:55:23:c0:7a:3f:b1:f0:f6:
                    df:4c:8c:82:f9:36:3c:5d:47:78:43:e5:f6:6f:0d:
                    cc:28:3a:83:bc:d4:1b:92:38:75:d1:db:45:1b:18:
                    ca:9f:92:2d:bc:eb:71:07:4e:bf:87:05:8e:da:4d:
                    8c:ea:bd:7e:c4:08:09:00:04:d0:3c:40:03:de:37:
                    97:23:3a:2b:51:49:05:0c:ac:ce:bf:9d:c0:cf:e7:
                    e7:6c:4a:0f:17:97:eb:bc:09:0d:ed:67:ef:dc:80:
                    d6:cc:ab:c4:f3:f0:ad:cb:1c:b0:4e:a4:67:56:0a:
                    2c:c8:6b:f8:22:64:9b:2e:18:be:c7:0e:2f:98:2e:
                    22:2a:63:65:f2:21:b7:41:c6:32:64:42:fc:26:35:
                    dc:38:87:1c:a7:51:a1:a2:e9:8b:ff:ee:61:11:b8:
                    2d:00:15:00:a9:f9:57:15:c3:b4:f4:33:fd:5a:21:
                    9d:88:af:09:35:69:af:0c:d4:c9:16:5e:00:89:82:
                    87:a0:33:a6:a9:41:5e:7d:ad:24:10:12:07:ad:b9:
                    fe:1d:18:09:0f:91:8b:cf:b4:42:c6:cd:dc:08:a5:
                    bf:20:7e:8c:2a:a1:25:52:9f:0a:2c:bf:79:32:bd:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:9C:EF:7B:02:7E:EB:28:B7:8B:68:4B:20:E8:10:31:2A:96:FA
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:13:19:b2:f0:d9:e6:00:d0:b4:92:a9:02:18:0e:de:37:e9:
         82:c4:d3:23:6e:ba:4f:32:3a:80:9f:79:ff:fe:67:0e:26:b1:
         f1:ac:aa:6c:9a:1d:1c:4b:69:aa:dd:89:84:74:cb:35:9c:f9:
         5b:1c:61:b4:d5:3b:07:f9:b0:10:49:0a:2e:56:00:3d:57:bf:
         f4:36:53:96:f8:52:4c:a2:d6:c0:e9:85:f0:12:c7:47:03:e6:
         17:89:a2:d6:9c:dc:05:c5:fa:7b:ed:cc:85:d9:fa:9f:fa:02:
         2e:e2:2a:1a:2b:d7:fb:4f:82:de:c5:23:02:73:74:4e:86:56:
         e3:ce:b3:a7:f2:45:79:1c:e2:87:91:dd:51:30:06:85:2c:ba:
         78:0f:0e:a6:2b:50:db:9a:ee:c4:c2:57:67:dd:40:5b:e4:02:
         38:98:58:c4:66:c6:f7:d8:cf:df:c9:a9:ff:4c:57:bb:c8:38:
         78:54:15:fb:22:d1:c9:c9:fe:22:93:6b:c9:24:a9:a6:45:7d:
         59:8e:e4:14:a2:99:5a:f4:35:43:80:65:57:ea:17:dc:fb:07:
         92:ad:b7:a2:bd:92:86:15:04:20:68:d9:00:90:a1:a4:56:c1:
         28:7d:96:f5:84:5a:84:40:95:b4:60:83:3e:01:92:32:33:7b:
         c6:3d:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:10:24 2025 by rpki-client