Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          rNt/98+5uYJOgFZRLOX2LlonlmBNfx7spqXYo66IKzY=
Subject key identifier:   BF:B7:26:F1:55:84:17:1A:35:BB:31:78:CD:50:2F:73:4F:AA:0D:CE
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       10A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          1076
Signing time:             Mon 30 Jun 2025 17:37:40 +0000
Manifest this update:     Mon 30 Jun 2025 17:37:39 +0000
Manifest next update:     Mon 07 Jul 2025 17:37:39 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: QMA3ty1S9SLGtqtKmdb6APkxwsEHMgoFFKqvevY5DCg=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4257 (0x10a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Jun 30 17:37:39 2025 GMT
            Not After : Jul  7 17:37:39 2025 GMT
        Subject: CN=6862cb64-8664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:85:6d:78:44:91:23:38:a0:42:54:da:c2:
                    4b:5d:6c:7d:7d:24:44:e7:49:d3:d9:f8:18:53:87:
                    da:00:a1:1f:ff:ba:0f:17:89:81:3e:f0:cb:7a:b1:
                    dd:cf:24:e1:e0:34:26:65:ea:74:f0:47:90:ea:54:
                    fb:7c:f4:1f:0c:99:83:c5:77:84:ae:8f:79:49:27:
                    8a:85:b6:e4:a9:ce:23:01:ea:cf:c9:9d:30:20:6f:
                    50:f4:1c:93:6f:a7:b2:90:94:33:b9:c3:cd:b9:c4:
                    ac:56:53:8f:7b:48:4c:23:37:9c:f3:3e:62:c5:91:
                    8b:de:32:bf:f4:05:5d:66:e3:66:62:4b:d7:6b:49:
                    28:2e:4e:ad:11:92:b3:23:e3:21:af:48:b4:f6:03:
                    55:a9:73:e9:e2:80:52:9d:13:d1:36:ff:dd:03:ea:
                    9e:0a:fe:9c:9d:17:11:a3:75:97:dd:24:6f:a0:53:
                    f2:94:d2:73:42:a5:fd:d6:30:12:4c:0e:e9:12:b2:
                    b3:4b:2b:3d:6c:aa:e4:b7:5c:50:ae:87:de:86:ab:
                    8b:02:ed:0e:90:84:31:6a:2f:f3:db:2b:17:2f:f9:
                    46:0c:7c:2a:0f:79:f9:d9:76:12:80:37:0f:63:85:
                    ea:57:9f:3e:44:4e:70:0d:60:9c:89:10:24:f8:69:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:26:F1:55:84:17:1A:35:BB:31:78:CD:50:2F:73:4F:AA:0D:CE
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:54:17:62:cd:d4:dc:99:04:36:7c:16:60:00:3e:83:71:
         a7:ea:2d:fe:21:80:3b:72:7d:e7:f6:87:05:a9:0d:29:81:15:
         a1:0f:5a:63:53:7e:be:b2:c5:69:9b:c4:6b:24:02:db:ef:06:
         f4:60:07:a5:00:67:23:f6:1e:1c:2b:af:0e:aa:98:c6:48:ef:
         bc:26:56:fd:19:47:0c:43:9a:a0:5d:31:35:d9:12:a0:3c:f5:
         47:29:f1:57:50:7b:01:71:16:5c:be:b0:2c:6e:c7:21:69:42:
         bb:1e:02:23:d0:c2:2a:24:93:c4:b2:2b:a6:f5:d9:ba:26:2a:
         6f:fa:4b:6b:13:4f:a4:48:ec:7f:b8:28:b9:b3:14:6d:2f:84:
         14:b2:ef:74:6c:7e:91:54:78:b2:42:f0:7c:08:b3:dd:93:c7:
         e9:2a:98:c5:45:84:58:35:44:3e:2f:37:4c:ab:7f:67:16:5a:
         c0:ef:82:e1:c8:33:02:e0:67:6b:66:61:6b:61:5b:95:72:54:
         79:dd:a8:d3:07:cd:6e:78:3d:6f:66:97:20:72:ec:50:37:26:
         73:fc:63:73:0f:76:e8:a2:6d:42:b3:6f:94:49:1c:84:cd:d2:
         17:6d:1a:67:06:80:1d:06:47:3d:5f:73:1c:6f:96:87:fe:5e:
         c4:7d:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:08:11 2025 by rpki-client