Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          fZyPLSZtdfc65RiferXZia+nhC9oUor8Zkv1453l+/4=
Subject key identifier:   BE:BA:F3:D3:74:49:AA:72:D6:8C:6C:E7:95:7B:3D:C1:27:48:43:DD
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0572
Signing time:             Wed 02 Jul 2025 23:47:22 +0000
Manifest this update:     Wed 02 Jul 2025 23:47:21 +0000
Manifest next update:     Wed 09 Jul 2025 23:47:21 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: iJGa6pFkv9wY+BTNgOuIdDles1HqtuAvxItRCeWzT3g=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: +FHx1Rcmiw2Cfk5r6pkki5E5DN80dE1EMz6qZ6ArXQ8=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: KiUHl6uGGniLvYgVccNgvCIPRBq7X96S1xDDUjJ+aSw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: FPSQ8p1kwZ3vXAQbffUHxGVHKyRBni/t9uDlhC1ac7I=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: DXFu7/3s3dZZufQfCR7FXNUXUWGkobLBbIzZTN9Mp7k=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: pI7ua1FostnjJb7ZIqAIfoEGZMv41AhlErmhbZ8SW+0=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zOp+pmoPEmD9FqhHLLTWspA0hasdoDJWm9XMS78WorI=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: fV3NIiz/nP1VFmLUqpUHxb/qO3YbAJnR1/hn6cqYalA=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: Rtj2YZUzcKfkgTDcvh/sESq8bL/Thyrlj4Jg24VeLAs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: xyrw8EmHYaazvYNSzHgYLMsIR2DQgj7hYHdBqp8rGQY=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: KQ2TYskB2nSpw60IPgL8Z4Nfyg1ScKRjQgnaDOmmNJY=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: zujVYZo1Gy2knnWLbno31U8SLXqyX16vRQYdNEeh8/g=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: SksUcxMguSSsYgsTOlV2nGlosz5GcrNGDJ2VSXMrlE0=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: P9HR6alaLKKcvAvinbQN/9aMjtdjm5ZAoDIUPrfljRg=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: ceitiXpUr0OmO04261kMJXcBcKDZSuQ6TyY/na8WY3c=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: QcEFCbKzSrsMklkI1eWiqnxmw/ZSSPLydpwjTEuoR+k=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: PT9TyyH2chY28D7xFpiGeKe73ZXXzfI6IzydINCCygw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Jul  2 23:47:21 2025 GMT
            Not After : Jul  9 23:47:21 2025 GMT
        Subject: CN=6865c509-b433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:7a:c9:ef:d8:d3:48:a6:52:0a:5f:bc:0a:
                    fb:b0:cb:1f:57:2f:08:32:a8:b1:fa:fb:10:c1:65:
                    d7:45:ef:e1:47:60:f3:60:e6:2d:e8:8c:43:80:55:
                    15:98:2c:81:3e:8a:ff:d9:9e:f3:34:7f:90:49:e3:
                    96:6d:9c:d8:8e:8e:32:e5:af:39:cd:21:35:1d:ab:
                    e2:74:49:a7:04:55:1d:5a:99:43:13:10:5a:8c:f5:
                    68:9b:69:31:28:82:e3:ac:f9:e1:42:31:8c:9e:3e:
                    95:0f:2f:73:f8:fe:19:4f:a7:45:6d:9a:4b:09:85:
                    33:d2:97:df:97:8f:d3:55:c8:7a:d8:2f:1b:da:8d:
                    20:62:df:4c:41:50:df:08:86:21:99:9e:9b:bd:06:
                    41:43:79:42:2b:40:44:e9:72:fd:36:e6:8b:6c:a0:
                    55:36:35:31:15:db:89:45:44:24:a2:44:a6:cf:b4:
                    d3:1a:d4:c8:4b:7c:3d:fa:0f:32:73:8a:ac:c8:fa:
                    66:d0:c8:3e:4a:be:54:21:ee:43:48:57:96:9b:9a:
                    9e:43:d6:e7:4f:40:5b:08:14:5c:ab:3b:13:10:99:
                    9b:39:2c:57:bc:49:c5:58:35:40:d6:bf:6d:c6:53:
                    7f:79:15:05:bf:51:ec:d6:f1:f7:ca:e8:74:3d:1c:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BA:F3:D3:74:49:AA:72:D6:8C:6C:E7:95:7B:3D:C1:27:48:43:DD
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:97:ba:b5:2b:24:ee:31:b5:bd:2b:10:12:51:9e:fb:75:
         99:b9:be:a8:f2:63:78:eb:2e:b9:b9:28:9d:3f:63:28:14:ac:
         aa:29:cd:d5:dc:2c:9b:e8:0d:e5:0a:52:bd:60:f2:8d:ba:2c:
         6d:9b:f3:07:31:c5:b1:50:41:3c:3a:27:d4:3d:62:4d:18:80:
         27:91:c7:76:90:c9:cb:42:ee:67:45:4f:80:ed:b3:d4:80:bb:
         44:ed:51:6c:a9:ef:f7:b2:1d:aa:b2:8b:9e:d9:1a:02:26:0f:
         4c:3a:3f:be:f6:90:c6:0a:81:7d:13:05:d6:b2:a9:e5:a0:6b:
         5f:eb:d9:66:01:41:1b:47:18:90:14:77:50:c9:2c:dc:98:34:
         54:6f:17:4d:53:ba:62:be:02:62:64:0a:93:23:17:9a:97:b1:
         e8:81:87:03:c2:a6:de:b6:fd:86:a1:80:4e:a7:e9:1f:76:82:
         58:67:98:5a:5f:a8:55:5d:c0:08:33:65:fa:78:e8:62:d6:5d:
         7b:a5:85:b6:1e:44:51:ae:34:29:43:2e:fc:ac:de:0f:14:37:
         28:61:b6:37:d8:ff:8f:2e:5e:f9:67:d7:9a:68:22:6f:5b:64:
         62:d8:7c:3e:5a:69:0e:c6:89:b7:c8:eb:be:d9:e8:e4:5f:ec:
         80:4d:8e:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjUwNzAyMjM0NzIxWhcNMjUwNzA5MjM0NzIxWjAYMRYwFAYD
VQQDEw02ODY1YzUwOS1iNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4dB6ye/Y00imUgpfvAr7sMsfVy8IMqix+vsQwWXXRe/hR2DzYOYt6IxDgFUV
mCyBPor/2Z7zNH+QSeOWbZzYjo4y5a85zSE1HavidEmnBFUdWplDExBajPVom2kx
KILjrPnhQjGMnj6VDy9z+P4ZT6dFbZpLCYUz0pffl4/TVch62C8b2o0gYt9MQVDf
CIYhmZ6bvQZBQ3lCK0BE6XL9NuaLbKBVNjUxFduJRUQkokSmz7TTGtTIS3w9+g8y
c4qsyPpm0Mg+Sr5UIe5DSFeWm5qeQ9bnT0BbCBRcqzsTEJmbOSxXvEnFWDVA1r9t
xlN/eRUFv1Hs1vH3yuh0PRxaDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6689N0
Sapy1oxs55V7PcEnSEPdMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS84NDE4OTIyNkZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6
OWdqVHZnOVNZQXUteEc1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6Zpe6tSsk7jG1vSsQElGe+3WZub6o8mN46y65uSidP2MoFKyqKc3V
3Cyb6A3lClK9YPKNuixtm/MHMcWxUEE8OifUPWJNGIAnkcd2kMnLQu5nRU+A7bPU
gLtE7VFsqe/3sh2qsoue2RoCJg9MOj++9pDGCoF9EwXWsqnloGtf69lmAUEbRxiQ
FHdQySzcmDRUbxdNU7pivgJiZAqTIxeal7HogYcDwqbetv2GoYBOp+kfdoJYZ5ha
X6hVXcAIM2X6eOhi1l17pYW2HkRRrjQpQy78rN4PFDcoYbY32P+PLl75Z9eaaCJv
W2Ri2Hw+WmkOxom3yOu+2ejkX+yATY69
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:34:18 2025 by rpki-client