Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          a9nhR1Im2/Al2b93X2VpVL9QHkZPXcELToFbB/6/E6k=
Subject key identifier:   15:43:C8:5B:FF:0F:63:11:1A:C2:4A:66:09:7A:BB:8A:7D:2D:05:F5
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       04A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          049F
Signing time:             Sat 23 Aug 2025 00:11:41 +0000
Manifest this update:     Sat 23 Aug 2025 00:11:40 +0000
Manifest next update:     Sat 30 Aug 2025 00:11:40 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: 03vaLn6Zozces3D99jxJNwOAf5Iw3tYC0NrAC13qRWQ=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Aug 23 00:11:40 2025 GMT
            Not After : Aug 30 00:11:40 2025 GMT
        Subject: CN=68a9073d-2b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:93:17:7d:60:04:cd:66:bd:d5:94:f8:43:
                    ab:51:18:5e:50:94:76:a7:52:14:20:a3:91:c0:43:
                    1c:1c:be:e6:67:39:a6:97:f3:bb:96:03:d4:1b:55:
                    95:c7:6e:e8:25:45:89:94:b4:15:65:72:71:47:80:
                    97:3d:38:81:6d:4a:29:0f:a3:88:9b:5f:be:ac:60:
                    3d:5b:5a:d4:1e:e7:d7:43:5c:de:bc:6f:b9:05:3b:
                    bc:92:66:b6:cf:f3:f1:a9:bc:8e:c8:94:0c:40:c7:
                    52:c6:2a:99:a7:30:37:63:6d:57:3d:82:80:91:f1:
                    60:ff:5d:c3:fc:f3:80:d1:7c:e2:7e:a2:9e:7b:63:
                    a1:ba:1c:52:21:26:8f:95:f0:ec:33:3b:e4:e2:c5:
                    59:9c:f1:61:0d:f1:86:f0:b5:35:51:2b:21:e4:6b:
                    27:79:3f:0f:c0:c1:90:7d:12:12:37:31:31:ce:2e:
                    21:17:78:ba:20:2f:b5:e3:63:ac:87:2f:11:63:a2:
                    d2:de:79:81:77:35:2a:38:62:aa:07:34:50:5c:50:
                    a2:67:6a:85:de:9f:37:fd:a1:1b:6f:c3:35:04:10:
                    6b:e9:6f:ca:b8:1a:da:bf:fa:59:7d:a3:8a:ca:11:
                    a1:5a:4f:21:ec:21:00:95:2d:1e:63:61:e9:de:f1:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:C8:5B:FF:0F:63:11:1A:C2:4A:66:09:7A:BB:8A:7D:2D:05:F5
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:8f:df:72:4f:4a:d8:17:eb:17:6b:a6:5f:00:3a:32:67:
         92:37:15:9a:15:1a:60:dc:db:d8:59:d8:8b:b1:5a:d7:06:bf:
         f4:53:01:e4:c5:93:9a:8c:82:25:1b:6f:62:9c:5e:c0:2c:0b:
         db:08:46:28:d7:63:07:cf:c1:a7:15:b6:fd:cd:31:3f:9e:a4:
         4c:0f:3a:db:d9:4a:16:c0:09:75:45:fe:8f:27:d3:ee:0a:d9:
         94:34:96:7e:5e:32:a5:d1:35:19:e2:dd:79:a1:d8:89:2d:93:
         10:e1:ea:99:b9:6c:c3:69:37:41:4d:d8:cb:4e:c3:fb:2a:d6:
         74:e0:fb:3f:04:4d:2d:18:fe:63:24:e6:68:19:d7:77:11:21:
         7a:1e:df:70:3b:12:98:71:bd:a0:1c:f8:ba:33:ac:ff:e6:20:
         9d:4d:16:37:0b:40:3f:a5:8f:b8:3f:9b:fb:f1:8a:49:61:91:
         17:1b:02:13:b1:a7:41:1e:86:e0:29:eb:24:6f:69:82:73:98:
         b8:cb:35:83:18:79:8e:bf:63:ac:a0:3c:bd:a2:ba:e0:8f:e1:
         85:78:79:42:2a:74:19:49:5d:5b:51:a6:44:f5:be:2b:2f:42:
         a4:63:e2:39:c2:f1:bb:1b:c2:28:62:b0:f7:06:d5:5b:c1:ee:
         96:6b:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:38 2025 by rpki-client