Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File:                     yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier:          C+te+cbcuMycRtEr49g6MGOFNKwJCgUt+yRFCCxsQGk=
Subject key identifier:   90:F0:E8:74:82:39:67:3B:9D:81:89:43:9B:C8:4D:B2:50:CA:61:04
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number:          01EB
Signing time:             Tue 13 May 2025 01:52:35 +0000
Manifest this update:     Tue 13 May 2025 01:52:34 +0000
Manifest next update:     Tue 20 May 2025 01:52:34 +0000
Files and hashes:         1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: 94kHzo3iH0FliXMeqHX6oGLvpxvox7QjPMOjXCC8F3Q=)
                          2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
                          rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: May 13 01:52:34 2025 GMT
            Not After : May 20 01:52:34 2025 GMT
        Subject: CN=6822a5e3-64c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:c1:48:c8:f2:74:2d:7c:10:87:35:76:db:
                    17:51:ec:be:26:a5:c8:a7:c4:9b:b7:f2:85:98:b9:
                    a0:ef:9d:18:50:2c:31:c5:34:f5:1d:07:d0:d6:dc:
                    b4:43:47:00:16:84:21:44:6f:35:34:f9:3e:a7:aa:
                    57:5e:65:7d:8f:5f:3b:d9:98:3d:d5:05:42:3e:a5:
                    37:0c:5d:8a:5a:b2:74:db:0e:52:4b:f3:f2:2a:59:
                    48:d9:c6:4b:3f:75:68:ea:d4:fe:46:57:d8:4e:64:
                    15:42:5e:98:6a:64:26:7c:61:25:b9:5e:48:9a:0f:
                    54:62:19:3f:c9:fa:31:e9:8f:76:6f:c2:d6:43:9f:
                    1b:f2:a1:c1:51:71:e5:b4:77:ab:46:b7:f1:ac:ee:
                    28:46:11:de:26:1d:b6:61:ae:82:40:06:b2:db:73:
                    c8:1f:02:d9:4a:c3:f2:ee:3a:f3:cf:87:fa:0d:fc:
                    ea:32:34:df:27:36:38:73:2d:f8:01:d5:61:99:ae:
                    a1:ee:d1:d3:2f:a9:b7:a1:be:d8:3d:5f:20:62:2f:
                    cb:ab:57:ca:4d:4f:f3:42:06:06:ff:01:68:e2:89:
                    9d:92:3e:91:b8:9f:0f:bb:c0:75:11:ad:da:ea:d2:
                    f9:36:0d:e7:b1:06:01:62:b1:58:60:54:5a:e2:fe:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F0:E8:74:82:39:67:3B:9D:81:89:43:9B:C8:4D:B2:50:CA:61:04
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:9b:a1:48:10:9e:61:a4:b2:c0:a4:ad:39:12:06:f3:84:
         76:ee:f0:81:80:c2:87:ba:99:f7:f7:0a:b0:d3:40:d9:e9:b2:
         4d:eb:0e:ed:3f:87:9c:d2:e2:ad:f3:6d:e3:b6:8d:83:24:3d:
         ab:61:08:ae:ad:1b:bf:82:d4:a5:a7:6d:18:73:72:8a:c2:71:
         7c:88:5c:39:db:45:93:fb:1f:e9:f8:13:06:c4:98:9d:ff:e3:
         53:01:4b:7f:dc:07:f9:f2:65:f3:a0:48:92:47:7f:d9:8a:bb:
         c6:56:81:8f:8d:45:b4:2c:d0:90:51:91:d2:67:2d:0a:70:3a:
         46:b8:f0:b8:e9:14:11:af:eb:54:b6:d5:58:83:f5:c8:99:da:
         b8:f1:ee:ad:e7:91:94:70:27:b0:9e:cf:11:b5:2c:f1:ab:65:
         d2:0c:d9:b0:93:92:af:32:90:6d:58:17:65:5e:1f:c1:ad:a2:
         d9:1c:6e:62:15:e0:7b:7f:f5:6b:89:3d:70:0b:df:a2:52:58:
         54:66:67:6e:93:24:ce:fe:f1:6f:6f:8e:a1:12:cc:d5:1f:a4:
         e7:d1:b9:61:f7:27:76:56:aa:7f:7a:74:bb:65:24:4b:96:85:
         f2:37:5e:23:b8:f0:ba:88:33:0e:f4:6c:a7:80:da:8c:1b:51:
         96:b3:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:05:49 2025 by rpki-client