Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          28EJd8yU24Eq02uXCCR4RW/RUgmm8j8aXXitzeyEhcM=
Subject key identifier:   38:B3:4F:77:8B:49:F1:F3:E6:F6:F4:8F:CA:29:76:BA:E9:46:76:78
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          020A
Signing time:             Sat 23 Aug 2025 02:20:17 +0000
Manifest this update:     Sat 23 Aug 2025 02:20:16 +0000
Manifest next update:     Sat 30 Aug 2025 02:20:16 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: /UInvgAaZasmsVD4+iy5w97g/d9W+6Q0M8Ee1KvM42A=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Aug 23 02:20:16 2025 GMT
            Not After : Aug 30 02:20:16 2025 GMT
        Subject: CN=68a92560-6d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:7d:5f:95:f4:53:b7:e7:27:c7:44:1c:f7:
                    c5:f3:5b:0a:2d:39:9f:09:99:5d:ec:76:16:e0:21:
                    2b:04:3b:30:e8:ab:52:12:8d:3a:13:77:9e:d7:a3:
                    c5:a0:0e:b8:c6:0e:98:a7:57:a1:84:c7:55:98:34:
                    77:b6:01:4a:48:9b:b6:53:79:1b:09:84:95:38:ad:
                    44:da:78:a1:19:2e:09:10:01:1c:f3:9b:65:aa:3d:
                    e0:b0:b9:ba:da:86:25:80:da:6f:88:8d:53:27:13:
                    b5:32:0d:62:e3:7b:de:cd:09:46:53:d8:58:57:4d:
                    b4:84:07:a2:02:f2:71:c9:70:52:0c:92:6f:58:00:
                    28:d6:25:d1:26:de:34:f0:10:0e:67:a0:23:70:f2:
                    e9:11:7f:ac:0a:61:03:9b:4a:15:f2:b7:c0:c6:81:
                    7c:6b:10:36:f3:35:d8:d4:4a:e6:40:26:db:c1:b5:
                    1b:aa:a2:01:5a:79:ed:a6:4b:6b:92:b4:f7:55:79:
                    46:4c:1e:fd:65:3c:2b:c6:fa:75:e2:0a:c0:f9:05:
                    98:ae:05:30:a4:3c:1d:0a:21:11:5d:46:65:09:26:
                    00:7b:98:bc:bc:65:54:76:7c:e6:eb:54:26:ae:82:
                    6f:56:54:b5:fb:54:a7:ba:a8:c1:d8:5f:bc:26:1e:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:4F:77:8B:49:F1:F3:E6:F6:F4:8F:CA:29:76:BA:E9:46:76:78
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:78:e6:44:e9:cd:52:96:4f:b4:33:ee:23:da:8f:74:15:1d:
         09:44:db:0e:fa:46:ca:b3:cd:aa:6e:44:40:e3:18:10:ea:a3:
         a0:cc:4b:70:f7:e7:32:a4:47:9b:b8:24:b8:1b:9d:6b:e1:cb:
         2a:f1:eb:ae:7b:46:7c:bd:40:b6:6a:51:5f:ac:1d:b0:6d:7f:
         aa:43:4a:49:84:98:b4:f1:b3:a9:f7:c3:3a:21:29:21:86:62:
         83:1e:80:96:17:0a:2b:91:5c:b1:5d:62:1f:50:9f:79:d5:28:
         1e:1f:af:68:1a:52:1c:35:bf:44:87:d4:ee:1d:55:eb:a2:3e:
         04:17:5f:2e:ac:8e:fa:87:5b:e7:70:18:14:09:52:aa:1d:4a:
         12:a1:8f:6e:b7:32:a1:8d:47:ad:7a:cc:e1:9d:16:93:d1:74:
         e9:1f:eb:0a:c6:7c:d9:6d:a6:9d:c6:67:ec:e6:0e:5b:0d:05:
         8f:7c:78:ed:9b:1d:05:9f:86:b1:50:a0:b9:6c:b3:b3:ee:67:
         c0:d3:84:86:ce:5c:39:4b:eb:f9:83:9e:d2:ef:0c:fd:fd:48:
         a9:98:47:5f:5e:05:3f:61:11:df:08:a9:94:48:8d:19:df:b9:
         88:13:5e:4f:73:3c:b5:13:94:ad:7e:77:d7:68:a4:14:7a:0b:
         26:52:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:49:48 2025 by rpki-client