Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File:                     y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier:          gGg07881w30SZzkSLmQI3nOS4sS+CvbsPn7w5fpLz0c=
Subject key identifier:   D6:57:6E:3E:9F:CD:2C:40:65:EC:A6:10:97:BA:E3:64:C4:16:7C:F4
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer:       /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number:          B4
Signing time:             Sat 23 Aug 2025 06:13:31 +0000
Manifest this update:     Sat 23 Aug 2025 06:13:31 +0000
Manifest next update:     Sat 30 Aug 2025 06:13:31 +0000
Files and hashes:         1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: gGL5Q2vdH50bf+07am3MOHnBE+L0t1WmvLt3yyqi/Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
        Validity
            Not Before: Aug 23 06:13:31 2025 GMT
            Not After : Aug 30 06:13:31 2025 GMT
        Subject: CN=68a95c0b-26d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:bd:94:12:6f:78:0d:c4:d0:74:02:80:60:
                    dd:3d:17:bf:67:65:2b:59:7c:84:dd:45:74:7c:ce:
                    ac:30:e3:5b:5f:9b:71:61:6b:4d:ae:29:67:32:bf:
                    e0:3b:7b:d2:5d:df:3e:05:69:17:45:fc:ce:d5:fb:
                    86:93:ca:17:4e:4a:30:4a:33:44:33:90:83:e6:4f:
                    c0:4f:7b:14:9f:85:57:a0:1c:88:a9:6d:5f:37:f0:
                    74:72:3a:a3:f0:d8:84:ed:40:ec:45:03:28:85:08:
                    b9:34:97:a5:1a:02:16:ab:67:73:4a:3b:c4:f0:9e:
                    0e:a6:6a:25:75:30:94:21:14:12:a1:9e:a7:e4:ec:
                    98:f0:c0:dc:20:8e:19:db:e9:26:4a:9a:40:d1:04:
                    6d:7c:ab:93:41:dd:93:9c:58:e7:9a:d0:32:b2:7f:
                    80:c8:0b:c9:d8:d3:b5:68:4f:03:1d:b5:9e:1f:65:
                    a5:44:8e:1b:f8:de:7b:25:fe:02:1b:21:bb:b6:80:
                    b9:5e:fa:02:9b:c9:94:30:21:02:a5:87:03:16:cd:
                    f5:8c:45:08:30:6e:95:6b:23:0d:22:f9:8b:6a:5d:
                    b1:be:81:cb:57:03:56:6f:83:bd:65:8c:ab:d7:83:
                    c2:2e:2b:72:07:2f:f3:45:c8:01:32:20:11:3a:24:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:6E:3E:9F:CD:2C:40:65:EC:A6:10:97:BA:E3:64:C4:16:7C:F4
            X509v3 Authority Key Identifier:
                keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:24:6a:ae:46:c3:93:d9:0f:85:23:b4:8b:b6:2a:1f:4e:
         b6:02:3c:ca:a7:3e:1f:ef:88:cd:3b:36:5c:85:88:b6:72:ea:
         dc:c1:e1:1a:73:df:6d:81:f6:7a:dd:56:44:24:36:7c:f3:eb:
         21:b1:77:9d:4b:dc:40:cc:51:f4:7e:ee:31:79:12:c9:bd:43:
         4d:5b:da:87:98:45:0e:af:7e:b4:b9:47:51:1a:47:6a:02:f1:
         6b:2f:3c:34:5a:ce:33:b9:d5:c0:98:7c:a5:91:8e:c1:18:ff:
         97:5c:93:82:32:70:64:a1:5a:b7:fd:c8:6e:7d:5e:f6:2d:53:
         00:41:a1:c7:1f:88:96:5f:4b:0d:6d:f5:7f:df:2a:bb:59:75:
         62:63:7b:6f:17:9f:c1:af:87:0e:45:60:77:06:b1:39:b7:18:
         07:9a:eb:10:75:11:24:32:f4:5c:9a:4f:17:12:8e:90:de:9d:
         eb:ea:6e:f2:6f:b1:d1:de:7a:00:f1:de:ff:86:44:fc:2d:d3:
         c6:23:62:ea:4e:67:21:26:d6:aa:f8:b5:31:b2:52:ee:66:b6:
         ca:3f:f4:a3:f2:80:ad:b1:da:e1:c3:c3:af:28:bc:f6:99:18:
         31:ea:b1:f6:87:ab:ae:c3:fc:9c:82:4c:b0:ca:a2:ad:f5:24:
         91:69:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:51 2025 by rpki-client