Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          kKG37vMvpNv7FR8HRi5K9tp9uwI67Gwu2eRA/ta5e2g=
Subject key identifier:   66:EE:7A:54:C5:26:37:54:40:B8:56:3E:B3:36:D7:48:B3:CF:CA:C5
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          34EB
Signing time:             Fri 22 Aug 2025 15:21:05 +0000
Manifest this update:     Fri 22 Aug 2025 15:21:05 +0000
Manifest next update:     Fri 29 Aug 2025 15:21:05 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: HspWGJrq1YjB80XH+8B6zmZBNHdTOwi/+0cit+L0VDI=)
                          2: 137AB7E8556211F08830E141C4F9AE02.roa (hash: jRfrX2bb6VPd+Q5zIvZCFXG797yrGUBGm1ayKszRSOc=)
                          3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13606 (0x3526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Aug 22 15:21:05 2025 GMT
            Not After : Aug 29 15:21:05 2025 GMT
        Subject: CN=68a88ae1-af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:40:ca:9e:9a:9f:bf:e0:c1:a9:ed:49:59:
                    a6:2b:d5:ef:3a:0e:87:b8:56:c5:f1:60:94:3e:de:
                    f8:9c:f1:51:b6:c5:26:90:0d:c5:8e:f4:d0:0f:c8:
                    79:ff:c4:d4:e0:06:1f:68:20:f9:2d:c0:9c:60:a5:
                    46:1f:2f:dd:17:e0:48:05:61:85:77:80:16:9f:30:
                    5b:36:3a:3d:c5:6c:42:f9:3d:14:bc:47:3c:05:ec:
                    d1:63:71:2e:fa:0d:3a:a9:27:c8:a0:34:0e:27:44:
                    33:6a:f2:13:48:d0:77:0a:f1:58:fb:fd:fc:1c:ef:
                    76:be:be:30:88:69:e0:8f:40:3f:8f:9f:52:0b:10:
                    f7:2b:e1:ed:88:94:2d:c2:f5:ec:61:42:bb:95:c4:
                    2c:24:8a:1a:4d:ba:7b:eb:f7:dd:6e:36:27:1b:e6:
                    1b:4a:d2:98:39:f9:b3:bf:d8:23:ce:2f:16:5f:8d:
                    50:11:01:72:bb:82:b9:d7:bd:f8:37:d6:43:da:7f:
                    50:18:3d:a9:0c:cb:54:d5:9c:e9:aa:ef:2b:93:0c:
                    4e:15:5b:87:11:62:d2:d9:95:ba:23:1b:26:14:7f:
                    60:d1:de:0b:e7:ea:1f:5b:4b:94:e3:48:38:74:95:
                    e5:1e:0e:17:84:13:87:a7:ad:d2:ad:ff:5d:70:49:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:7A:54:C5:26:37:54:40:B8:56:3E:B3:36:D7:48:B3:CF:CA:C5
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:74:ca:ff:12:04:0d:af:8d:c3:db:8d:af:e7:3c:33:bc:
         7c:d7:5d:80:c6:c6:43:c2:64:fb:0a:da:ef:a2:30:12:4e:09:
         08:50:75:0b:8b:1f:7e:bb:e1:44:b0:2e:f4:bd:a4:a8:e4:34:
         72:56:1f:d1:7f:f6:47:52:09:ae:1a:8c:af:00:93:e3:17:82:
         02:02:1d:9e:9f:3c:f6:15:2a:6b:ed:bf:3c:8d:c4:25:db:ca:
         7f:ee:d3:1c:39:42:5d:50:51:58:8e:4d:bf:10:91:60:cd:73:
         4a:29:f4:92:c1:41:29:6c:8a:e3:ae:b2:18:5c:5d:7b:f7:9b:
         bc:af:12:63:57:d6:6f:82:6a:49:25:fe:12:a3:bf:a6:37:0d:
         9c:70:eb:b7:e1:df:8c:03:0b:03:6a:a9:36:c3:c9:7a:a9:0d:
         83:92:38:4e:0a:dc:92:02:35:7c:15:8a:ad:10:77:43:49:14:
         a8:08:77:e7:b1:47:8e:2a:12:f5:fc:30:2a:aa:df:cb:1c:95:
         f7:3c:20:1b:bc:04:9e:a9:f9:b3:ee:e8:61:43:76:68:a8:d8:
         c5:49:7d:5f:cb:be:26:0f:ca:b3:b2:c6:a8:03:01:c2:65:92:
         61:fc:b7:79:05:8f:ef:a5:ad:4b:d7:03:c8:07:b1:47:1c:0f:
         13:86:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:46 2025 by rpki-client