Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          A1xmIu4N9qVxFrBRIdo2RMiYau+k+0x7ArtfWFIiUX0=
Subject key identifier:   24:94:6E:20:9B:BA:3C:A8:DA:16:71:89:2B:AB:31:81:F1:61:5A:15
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       048A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0485
Signing time:             Thu 03 Jul 2025 00:23:36 +0000
Manifest this update:     Thu 03 Jul 2025 00:23:35 +0000
Manifest next update:     Thu 10 Jul 2025 00:23:35 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: ijLSRd/aEDTxsSapkEaByn7QILyn8rTFVw3OQWwh7OI=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Jul  3 00:23:35 2025 GMT
            Not After : Jul 10 00:23:35 2025 GMT
        Subject: CN=6865cd87-ac4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:9a:5e:db:a3:70:dc:16:ff:94:f0:69:9d:
                    59:89:ab:1a:41:dc:85:fd:28:50:24:04:db:23:38:
                    86:02:e9:af:bb:36:7f:60:93:1a:fa:1b:c5:16:e2:
                    1c:22:e5:a7:16:a3:e2:fa:cc:6a:a8:ba:84:5f:33:
                    75:15:ea:4b:b1:da:1f:b1:3e:75:93:3e:a5:94:7c:
                    38:ae:ba:7a:44:f6:90:17:4d:ba:b9:0c:36:84:3f:
                    08:01:e8:12:bd:a8:50:33:e0:e8:2a:a7:93:d4:2b:
                    e0:1e:c0:c6:3e:c9:2b:50:59:5e:2a:00:dc:a6:54:
                    ea:d5:7a:d1:41:b2:a2:a6:52:26:41:93:10:ba:04:
                    f3:93:15:25:71:bc:05:17:2d:1b:52:1a:4a:62:0f:
                    fc:2d:6e:01:80:90:4e:12:d7:2e:56:49:3c:72:9d:
                    32:2b:55:8c:f9:01:5d:ee:c9:a3:fa:be:2c:3d:2e:
                    12:d9:07:90:4f:fd:ac:cc:2b:0d:d4:70:80:fd:d4:
                    69:b0:a8:e9:26:f7:ce:2e:d9:49:1d:b4:9b:e0:3c:
                    37:2c:e7:fa:1e:4b:3f:59:7d:c9:95:67:f2:6a:a8:
                    91:57:ea:ba:ea:4a:71:23:72:80:80:11:c3:a0:c7:
                    6f:ec:85:79:6c:51:32:89:06:9c:47:db:8a:bc:5d:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:6E:20:9B:BA:3C:A8:DA:16:71:89:2B:AB:31:81:F1:61:5A:15
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:6f:7a:88:84:47:1d:47:9f:30:c4:30:b4:54:74:49:b8:
         2d:4b:00:3b:68:7c:9f:97:68:ba:85:03:a0:2e:72:00:3d:2d:
         07:ea:7f:33:c6:d5:61:0b:51:85:d4:47:2d:77:eb:d4:3f:fd:
         f0:50:31:cc:2b:18:dc:24:12:fe:6b:59:e0:9b:13:c6:9f:53:
         39:ca:65:f4:6d:26:70:94:9a:35:8d:a8:2e:63:9d:ee:fa:b8:
         0b:51:c7:55:94:f7:f7:83:93:91:c2:13:ef:d5:3a:6e:35:9a:
         1f:18:0d:b4:a1:53:6c:ca:82:d0:13:ed:09:58:e5:1b:08:04:
         4c:b8:94:dd:bc:c1:44:78:40:f7:8c:e6:8a:b6:72:4b:ea:33:
         a5:50:2c:54:af:79:47:eb:91:17:5f:a2:36:a7:ed:af:75:9f:
         c6:a1:fa:8b:c6:cb:85:d4:c3:08:7d:40:36:29:96:46:37:3f:
         96:4c:e0:ce:3e:17:d8:ce:78:64:c3:71:4a:01:c1:80:d6:72:
         38:24:c4:55:93:2d:d4:e2:51:d0:70:b2:12:2e:70:b3:1f:84:
         14:70:8b:d3:03:f5:2e:14:08:2f:02:da:96:7e:6d:c8:61:19:
         6b:ba:b6:3e:43:76:0c:2d:32:0a:36:5d:5e:ac:a5:e6:c4:07:
         52:19:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:14:33 2025 by rpki-client