Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          iSdgMhdSz7gUVEFtlxv2YhjjV/xuQsixtDuRWQBRwdE=
Subject key identifier:   D1:5B:B0:B2:42:48:09:59:5A:90:65:93:78:26:99:D5:81:0D:2B:7A
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          0418
Signing time:             Sat 23 Aug 2025 00:35:43 +0000
Manifest this update:     Sat 23 Aug 2025 00:35:43 +0000
Manifest next update:     Sat 30 Aug 2025 00:35:43 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: ERTPUl1jiX5jz2zzQ4vROCry2iqj93jPthB1h3oX6Gk=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: BND24LJDq2vvWZ+xp3RlYNXBh82urnxKrrVdHSwL4a8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Aug 23 00:35:43 2025 GMT
            Not After : Aug 30 00:35:43 2025 GMT
        Subject: CN=68a90cdf-32b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:41:07:df:61:5c:62:4f:01:f4:74:b8:e2:
                    59:f6:48:a0:98:65:de:0c:9c:13:61:d9:a4:26:73:
                    4c:40:a0:86:75:dd:5a:96:8e:ea:6c:d5:94:0f:a7:
                    c4:8c:07:43:71:75:36:f3:a4:f4:53:e2:ce:6e:3e:
                    99:68:06:31:23:19:e1:ff:36:c2:15:3f:02:05:d7:
                    0d:05:b0:63:d8:05:35:82:3e:8a:e3:7e:cc:59:1a:
                    65:f0:ba:0f:74:04:45:06:a6:9c:bc:4a:0e:94:33:
                    93:1c:06:31:d9:c0:3c:0b:d4:98:20:5d:0c:0d:8a:
                    b3:e0:23:84:0b:d1:76:94:ee:16:b5:e0:f7:3f:1e:
                    56:6c:d7:0a:dc:82:a0:a9:f7:2f:ad:a8:3b:fb:ad:
                    5d:5a:a1:8e:8e:70:b4:a4:a7:03:26:a8:69:84:be:
                    bd:35:3a:ba:2b:52:ae:e9:7a:9a:30:9c:d0:0a:d1:
                    c5:26:8d:42:e6:bd:db:43:8b:9d:84:62:d0:a1:69:
                    1e:0c:25:a3:8e:85:27:f7:9e:4e:26:d5:43:86:31:
                    da:00:e1:99:fd:b4:c8:3f:2d:4e:60:34:d7:c2:5b:
                    30:41:5b:07:89:87:27:ea:01:15:c6:fa:52:d5:b3:
                    ac:60:df:18:c9:0c:6a:2a:bb:13:bc:f5:96:f0:1c:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:B0:B2:42:48:09:59:5A:90:65:93:78:26:99:D5:81:0D:2B:7A
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:43:4b:72:61:2d:ab:7f:81:fa:10:b8:48:8d:b4:60:ed:
         8b:81:70:ca:82:3d:eb:a5:90:55:58:33:d5:ac:92:84:9d:6a:
         44:71:eb:24:b6:23:bf:81:6d:5b:2b:b3:1f:52:cb:80:94:d0:
         ee:a7:74:7c:d0:01:1e:b9:2b:31:15:61:18:29:4d:1c:58:d1:
         fc:47:e3:f3:9a:4e:bd:2a:a2:dc:dc:72:40:f4:38:b3:ce:a5:
         64:20:8d:cf:d0:c8:70:e7:d9:48:c1:1c:4f:49:16:11:cc:71:
         8e:da:ad:b8:2d:c5:a7:cc:ef:f2:8b:bb:83:2e:7b:11:ef:48:
         ce:59:90:9d:9c:7c:fa:49:40:68:25:56:35:4f:61:80:b1:d6:
         a3:36:d6:db:d4:f4:db:e4:9f:ac:e0:de:f0:af:f5:53:30:1c:
         e3:19:5a:d7:42:bd:e8:7a:b0:3f:1d:08:4c:9a:c3:3f:7b:7f:
         c1:09:68:47:1f:c6:84:e3:d3:84:45:61:b5:26:25:a7:dc:2d:
         b1:08:46:18:03:6e:be:54:1f:2d:61:01:3c:c6:ad:ed:df:4b:
         77:85:94:a7:f7:b2:dd:89:cd:33:ef:a4:82:02:62:d3:65:fa:
         4a:24:6a:91:19:7f:ff:3d:69:c8:7c:d5:1d:d2:ac:b3:d3:c9:
         e2:a0:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:37:46 2025 by rpki-client