Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json)
Hash identifier:          KDrtAKCosFtq913GFW0L0RuahZNp8Pi5il12NE8Pdrc=
Subject key identifier:   91:F5:05:6F:3F:44:20:3A:B8:62:84:AC:24:76:06:A1:F4:7F:60:6D
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0EBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
Manifest number:          0EA0
Signing time:             Wed 02 Jul 2025 17:53:31 +0000
Manifest this update:     Wed 02 Jul 2025 17:53:31 +0000
Manifest next update:     Wed 09 Jul 2025 17:53:31 +0000
Files and hashes:         1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: CywX9+owbwTO3+suogN5kPIzUGRym1MBYK8mNbeKeQo=)
                          2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=)
                          3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=)
                          4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=)
                          5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3771 (0xebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Jul  2 17:53:31 2025 GMT
            Not After : Jul  9 17:53:31 2025 GMT
        Subject: CN=6865721b-b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:1d:96:2c:30:9c:cf:57:c3:4d:f5:cf:ba:
                    de:7f:7b:b4:c4:e0:ce:c2:30:a2:e7:e7:d1:e4:28:
                    73:60:8b:9b:a3:19:35:2c:36:ba:72:23:46:79:70:
                    f9:56:17:e8:a3:76:04:69:9f:3f:42:31:83:c5:99:
                    48:7b:5c:96:0a:2c:65:64:f7:34:ab:50:49:f9:b6:
                    86:0d:c7:2c:fb:7b:75:ed:f2:79:de:ed:f8:17:38:
                    56:ee:8d:da:6e:a2:a0:32:a2:09:d1:63:6f:5d:12:
                    56:97:36:30:d8:d1:f4:f9:b9:f4:db:be:39:e2:1e:
                    f9:6a:25:bd:2b:6c:e0:27:cb:14:2f:20:ee:2f:a6:
                    2a:36:d1:10:57:ee:17:0a:14:4d:ae:8c:e0:53:8b:
                    68:72:18:98:d4:fd:a0:a7:55:a5:6b:1f:5f:03:60:
                    84:b1:f0:7f:0f:ce:ae:c4:2e:6b:54:1c:ac:c0:40:
                    ed:fd:eb:d2:23:25:78:da:07:ba:7f:f7:5e:aa:93:
                    d9:81:65:63:65:33:bd:e3:2b:f6:05:b9:52:3c:1d:
                    af:b9:3f:08:d0:3f:b5:bb:72:56:c3:c3:f9:ad:0a:
                    63:76:5b:b1:4f:5d:b4:7b:da:a2:8c:81:0a:f9:c5:
                    99:5a:2b:b7:94:02:51:ef:1c:e6:9e:07:a3:93:7a:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:05:6F:3F:44:20:3A:B8:62:84:AC:24:76:06:A1:F4:7F:60:6D
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:69:67:73:35:c6:b3:36:7a:c7:b5:f8:ac:85:90:f9:13:e5:
         d4:69:51:85:36:9e:0e:1c:c4:a3:bf:80:4f:f1:b2:32:33:b6:
         08:eb:5c:a4:15:01:b4:a1:97:d5:13:20:e5:33:3d:0d:9c:8b:
         3f:3d:17:dd:bc:b7:63:6a:80:1e:4f:fb:cf:43:c7:09:df:5c:
         06:99:11:8a:fd:f6:08:6b:77:b1:67:58:4e:ea:2b:68:2d:48:
         e0:19:64:5a:e4:9d:3b:45:33:8d:e1:54:b9:85:33:49:60:63:
         da:d7:f9:bc:40:3b:4a:d8:2a:22:04:99:df:22:70:47:ef:3a:
         78:b5:35:a0:b2:31:35:b4:e3:14:c4:1c:55:da:6e:b3:2c:23:
         91:a9:55:b6:cb:3e:4b:0a:fd:34:29:92:62:15:9f:cc:96:96:
         fe:f5:e1:1c:79:04:af:c7:44:5f:76:92:f6:6b:96:81:7e:3d:
         f4:d7:09:0d:b4:3a:8e:ad:a7:da:79:35:75:31:96:e8:55:79:
         e0:95:94:6c:08:5a:25:33:f8:c7:97:fd:6f:cd:8b:5a:25:1f:
         a7:14:78:cb:b5:b0:bb:6b:af:2f:21:8d:37:a1:2d:f7:30:da:
         19:5a:00:40:7e:a2:3b:1e:cc:3d:db:18:31:e4:33:0b:cb:93:
         58:e0:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:35:18 2025 by rpki-client