Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          qBrSgErJ0g8L89p2xbdLVcnY82Ctl6k6ifhn+0IQ8/w=
Subject key identifier:   1E:DD:3E:02:4E:EE:95:73:68:6E:D1:F3:73:8E:2D:08:4C:7C:76:9C
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       08BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          08A8
Signing time:             Wed 02 Jul 2025 20:48:56 +0000
Manifest this update:     Wed 02 Jul 2025 20:48:56 +0000
Manifest next update:     Wed 09 Jul 2025 20:48:56 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: 0xdOd3XD19v2i9uVPkljkzMC42lWlZE//Xr0q9UlwtE=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: O/NO2IfdBXfSyfMwGAkT+IgbQvZgtu7lJ1dsaQhj82E=)
                          3: C011E716845611EFA55F8043C4F9AE02.roa (hash: pkFZgeOoJ8iOEM13k0fNneKGX0rGx1nkPohIG5roll0=)
                          4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: yDLtGnYU5lMrLDnFX8vRyhLOoi06rgga2yxVGlgTVrU=)
                          5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: WGI7L4FYzb6GYe2YpV7oc/HelbiNBr643jFG1FE873s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236 (0x8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Jul  2 20:48:56 2025 GMT
            Not After : Jul  9 20:48:56 2025 GMT
        Subject: CN=68659b38-64f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:44:47:6c:6a:c6:ed:25:24:f6:5c:2d:a1:
                    c7:08:59:a8:2a:00:18:fa:ad:ab:a4:47:cc:fd:a9:
                    f8:41:61:44:31:6f:85:b0:2f:3f:46:fd:3a:84:bb:
                    7e:62:07:13:16:62:fb:86:73:45:67:1b:27:cc:09:
                    16:4d:3b:15:29:d2:d7:2a:64:40:74:0a:c5:09:b7:
                    05:ec:62:24:b5:20:96:b7:79:64:4e:fe:ce:59:69:
                    e7:cd:e0:2d:95:50:33:b6:7f:51:84:27:d0:6e:9f:
                    1e:29:db:96:d2:7c:36:80:7e:ce:05:16:90:71:af:
                    3e:6a:d2:cb:ac:52:0f:57:84:2a:b1:e2:fa:00:68:
                    fe:cf:fc:12:de:eb:09:72:27:88:89:ed:af:41:95:
                    33:da:f7:83:3c:99:33:4c:3d:8d:ef:35:c5:87:b4:
                    1c:d0:ab:81:c2:72:31:6e:15:f0:d5:d2:0a:d2:91:
                    41:0f:ce:37:c0:32:1a:cc:a7:e7:eb:9e:c5:fb:27:
                    00:a8:e4:31:e3:b6:f0:22:6c:fc:84:54:ac:e7:8d:
                    4f:86:75:0d:58:03:89:9f:bb:9a:86:55:cc:f0:08:
                    10:df:03:ad:bf:29:f2:1b:59:25:d8:63:d4:95:f0:
                    bd:ec:eb:21:c7:4a:4d:00:db:2b:2e:11:42:92:3f:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:3E:02:4E:EE:95:73:68:6E:D1:F3:73:8E:2D:08:4C:7C:76:9C
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:84:ba:d5:ee:7b:01:4a:9d:64:80:0e:68:d0:f4:56:71:
         e3:85:62:1d:5c:aa:59:74:cb:cc:e6:15:37:51:09:5c:5d:2a:
         44:d2:79:66:09:f6:35:cd:cd:29:42:67:04:ef:81:fc:40:c4:
         71:bc:da:69:9a:2d:11:1c:1f:11:9b:b8:3c:b5:04:c6:e4:e6:
         5d:fb:a9:20:1a:52:76:29:1e:13:c1:fc:96:03:72:ad:e6:26:
         35:66:07:2f:07:1a:bf:bc:bb:3a:09:c5:dd:b1:c2:95:44:c8:
         10:9b:07:4c:89:91:88:63:63:c9:81:0a:c3:05:a4:c7:92:75:
         13:46:b4:52:cf:13:b3:a1:5b:6b:4b:49:18:6c:2e:65:ea:58:
         97:a2:b1:11:6f:73:1c:74:07:4e:e8:3f:86:e3:15:6c:25:5b:
         13:05:72:22:2f:84:35:f4:36:8c:29:87:82:1a:af:5f:3e:3e:
         f6:83:68:e6:86:b5:ba:58:33:5e:d1:75:64:1f:85:06:f4:07:
         41:23:ff:3c:25:44:cd:0c:c8:79:8c:bd:ea:6c:8a:4c:fd:d1:
         fe:ee:42:62:c6:cd:54:58:44:68:09:22:6b:b4:65:8d:64:21:
         f4:74:f4:01:ef:5f:c8:5b:e9:1f:43:c4:80:00:93:3b:80:07:
         d2:d5:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:08:58 2025 by rpki-client