Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File:                     YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier:          gBHM+vLm/Z/1JENKbASCkKGyVMLh7YBfsv/BDtzcfYA=
Subject key identifier:   96:3C:4B:21:1B:FE:88:14:8B:BA:D5:F8:B8:88:B6:2E:D9:64:DD:3B
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number:          F4
Signing time:             Sat 23 Aug 2025 05:25:21 +0000
Manifest this update:     Sat 23 Aug 2025 05:25:21 +0000
Manifest next update:     Sat 30 Aug 2025 05:25:21 +0000
Files and hashes:         1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: OOm8fpkSs44mFT3QVLgUqtZaLIpNh9K/WaFKW5viXZs=)
                          2: 884A59828D3211EF9E092384C4F9AE02.roa (hash: xOaimOfUZBkRNhY2P91bf0+ib8Nd/3H7NeCCoMewY1U=)
                          3: 878615B88D3211EF9E092384C4F9AE02.roa (hash: 1a6J1IrsKbEFpskMpI4op6cGGhceRlU8MHnA+P2UnnM=)
                          4: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: 7elI6AMeNa1Ca+M4fsrsmJ6YMM78ASd0PDly2IpzKgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Aug 23 05:25:21 2025 GMT
            Not After : Aug 30 05:25:21 2025 GMT
        Subject: CN=68a950c1-e801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:9e:af:3c:f6:40:9c:02:df:fc:71:30:e1:
                    3e:53:b5:70:ad:51:f6:c5:90:cf:5e:05:0f:9e:b8:
                    d4:90:19:f4:6d:76:0d:86:43:a0:4d:b5:b6:8e:2e:
                    d2:05:1d:2e:6f:d7:65:91:34:04:18:3a:bc:86:11:
                    ea:f7:99:e1:9c:43:a0:53:3b:79:f5:b7:4b:e9:00:
                    95:08:a3:86:be:c0:31:b1:02:6d:b6:c9:05:04:3c:
                    61:3c:4c:34:35:d0:3d:99:05:68:a0:72:50:f2:63:
                    af:09:ec:e7:0c:bb:7d:a1:92:9b:16:df:5c:9d:b0:
                    6d:98:6a:6b:4e:78:82:45:a2:3e:b3:32:b7:e4:f7:
                    1b:57:cf:20:e1:e5:87:27:03:91:2f:02:07:74:90:
                    f5:d7:be:b3:cf:2b:fb:58:f2:05:2c:82:10:36:d4:
                    f0:ac:93:f4:12:67:08:07:12:e6:cf:ff:ff:a0:33:
                    3f:d1:65:87:07:df:08:af:85:52:a8:76:ad:dc:cb:
                    55:e9:9c:d9:60:cb:26:ac:e6:04:79:9d:f5:12:6d:
                    88:8f:a6:29:d6:58:20:4f:bb:4a:6b:df:9c:80:a1:
                    2e:35:a6:14:08:30:f9:c2:47:33:79:5c:81:a1:73:
                    a9:ab:ac:05:e5:34:9c:71:36:d6:a0:25:44:0a:bd:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3C:4B:21:1B:FE:88:14:8B:BA:D5:F8:B8:88:B6:2E:D9:64:DD:3B
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:89:1f:c3:7c:f2:3f:a5:ff:41:b6:3f:d5:ae:e6:63:dd:
         a8:45:36:86:d1:ed:66:32:50:1b:d1:b3:cf:37:0c:1b:14:77:
         f4:09:fe:1b:a2:9d:d8:c2:29:00:a0:d8:d6:2a:a9:be:b2:c3:
         f0:53:77:2c:ef:21:92:34:23:8b:07:ae:c5:e8:9e:42:99:c0:
         f2:6c:6d:30:8a:c0:b8:0e:74:9f:1c:04:cb:1a:4c:ff:b7:eb:
         e0:1a:c0:08:0f:b3:4d:fc:6f:50:e5:0f:e9:a8:e7:96:14:80:
         bc:63:79:c1:cf:50:f3:7e:4a:4c:06:48:b1:7f:89:d1:da:07:
         20:89:06:7a:f4:31:03:00:c8:3e:bb:ed:09:c5:5c:05:8d:51:
         4c:0a:70:7c:d0:d6:da:06:7e:cd:fc:5d:56:cf:c9:94:74:06:
         3a:01:5b:6c:48:3a:2f:4a:87:1c:eb:c2:dd:c6:99:7c:a2:c8:
         1a:f1:51:e1:76:71:e6:81:df:19:82:64:29:b9:6c:11:e5:73:
         00:59:55:68:1d:18:fc:d6:49:59:a1:28:f6:01:08:4e:93:1c:
         9b:6f:88:b2:0f:22:92:7b:12:5d:88:08:55:94:3c:f2:e2:45:
         1e:4b:10:11:25:ae:bc:e9:29:f3:f5:5a:86:32:54:e6:6d:d1:
         2e:45:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:31 2025 by rpki-client