Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
File:                     JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json)
Hash identifier:          2TM9KdZeDqOXKHH7vLsI3hDv0Zyn2Z7jIu4IRDSktcY=
Subject key identifier:   A5:9D:28:FD:1C:5E:F3:21:84:8B:B9:EB:B6:33:A6:33:4B:18:E6:9F
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
Manifest number:          02CD
Signing time:             Sat 23 Aug 2025 01:38:15 +0000
Manifest this update:     Sat 23 Aug 2025 01:38:14 +0000
Manifest next update:     Sat 30 Aug 2025 01:38:14 +0000
Files and hashes:         1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: PmfLRXLDoRAO7WdMxdSCkxQoDlZZMF4X29SKAwlxjLQ=)
                          2: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: 8amN8Nk9oVQpcGLG743ZVOV+dvrusSJP1h0AZ4Q+u2o=)
                          3: CED1044A623011F09444A631C4F9AE02.roa (hash: +Fo2WH8m2cjw8oh/lmjoipeX9n0Y/HKkf4WjvsdtG10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Aug 23 01:38:14 2025 GMT
            Not After : Aug 30 01:38:14 2025 GMT
        Subject: CN=68a91b87-e17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:90:0c:39:84:91:a1:42:ce:ad:0c:09:51:
                    33:d6:fc:ee:4e:8a:f1:70:84:1e:0b:77:90:40:38:
                    f7:c3:00:98:97:f7:42:ef:d7:57:25:0a:0b:d6:6f:
                    ca:61:ef:ac:9b:b5:00:e0:c3:d7:24:f7:c9:9f:66:
                    9e:4b:d2:d9:ca:c5:7f:57:7a:84:db:ca:50:50:f9:
                    42:26:c9:b7:9c:c0:e5:63:0a:0a:d7:e4:07:ca:cf:
                    e0:bc:70:7d:61:db:13:c8:f7:35:99:00:c6:27:a3:
                    42:d2:e9:10:2f:04:e5:d6:fc:e6:b6:f1:62:8f:fc:
                    cc:32:23:b8:62:48:c4:50:c2:0c:3b:c4:57:80:8d:
                    6b:8c:76:be:a4:b0:a9:bf:19:f7:91:3b:a0:e1:50:
                    ce:a2:f0:be:27:6e:1f:66:86:5f:ee:25:da:a2:cb:
                    3b:5f:e5:a0:14:62:a4:24:56:33:61:ca:f0:2d:ac:
                    d0:81:bd:a1:0d:76:6e:c0:29:e5:d8:de:50:b5:72:
                    80:bc:9f:1e:d9:73:ed:4d:11:f4:49:9e:20:cf:e3:
                    56:a5:4c:b6:d6:42:fc:a3:4f:c6:d9:f7:b2:34:d7:
                    e6:60:50:34:5e:fd:9d:fd:29:a3:96:da:e7:da:59:
                    8a:ce:0e:fb:12:81:f5:56:33:22:32:fe:d0:f1:1c:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9D:28:FD:1C:5E:F3:21:84:8B:B9:EB:B6:33:A6:33:4B:18:E6:9F
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:21:d0:50:22:67:90:2f:4b:d9:0d:5e:19:6f:8d:8d:01:77:
         b7:25:af:52:3e:fd:0c:8b:e6:a8:f8:9b:1e:52:b2:86:ba:12:
         9c:7f:1c:99:ef:a6:7c:cc:86:23:6f:4d:86:3d:97:f2:a3:33:
         20:00:a4:03:cc:9c:f2:fc:a6:f8:d8:48:2d:17:98:22:58:84:
         58:80:a5:94:7d:d7:a2:8a:44:eb:4b:96:1b:41:ef:fd:de:3d:
         ea:6b:f1:72:34:5e:7b:ab:05:87:ed:64:97:f4:2f:62:f2:86:
         e7:94:34:a9:f1:80:08:3a:1e:4f:34:4f:4e:5d:95:95:94:ca:
         be:94:a4:19:5f:eb:52:40:15:46:45:70:f3:71:3a:18:73:c2:
         8a:d3:c8:b8:e3:e1:f8:bf:e9:45:bc:87:32:59:f2:2e:3c:95:
         b2:8f:ce:08:69:e8:4b:84:54:80:0e:2a:bb:b8:fa:ec:c1:4d:
         33:9b:6f:9f:5b:68:63:0f:5d:0e:5d:d2:cc:1a:4b:53:12:0f:
         c6:4b:05:a9:3f:08:3c:2a:13:c7:95:88:97:c1:11:34:67:d0:
         6b:be:77:02:1f:64:34:4e:dd:be:2b:9d:32:c1:a8:38:b9:4a:
         4b:f6:dc:67:af:5a:01:1e:4b:71:95:3c:37:50:4e:21:05:74:
         71:ab:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:07 2025 by rpki-client