Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File:                     y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier:          5EvGYqtUYabxxt3hdCF/IsFBueY9NPvjWNID8E1KApY=
Subject key identifier:   4B:90:4F:AF:FA:F9:5D:92:96:AF:3B:2A:C1:D0:ED:AE:40:85:01:68
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer:       /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number:          018C
Signing time:             Sat 23 Aug 2025 03:37:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:37:47 +0000
Manifest next update:     Sat 30 Aug 2025 03:37:47 +0000
Files and hashes:         1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: FHUYg+w8Vr7ydT3vocFSk65pTWuvJSNjoVxZkub/Xic=)
                          2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
                          rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
        Validity
            Not Before: Aug 23 03:37:47 2025 GMT
            Not After : Aug 30 03:37:47 2025 GMT
        Subject: CN=68a9378b-f69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:e2:89:7e:81:6f:05:8c:d5:16:1d:6a:83:
                    20:a6:91:b7:79:c2:a2:85:88:53:85:bd:ba:28:a6:
                    09:ab:9b:ec:09:c1:a4:73:49:fd:ca:27:dc:86:8c:
                    9e:56:68:1b:c6:f0:fa:b3:81:04:52:ce:54:61:1e:
                    c8:b7:f1:58:aa:51:67:bc:f6:5f:f4:4e:53:a4:29:
                    c4:10:96:41:25:bf:bb:1a:c8:11:b4:eb:7d:ec:1b:
                    16:b3:a0:e7:7f:b1:1d:8d:73:b8:4e:c4:b3:61:b3:
                    40:dc:59:f3:52:fd:77:70:04:81:0b:aa:47:c4:f9:
                    23:3a:13:2f:32:ca:36:85:d9:2d:19:f7:5b:fe:9a:
                    f1:c2:35:dd:b0:22:c4:ce:6b:47:b6:0d:32:02:4b:
                    71:4f:5f:d1:89:60:2c:43:bb:7d:ed:83:35:2b:1e:
                    24:53:ca:dc:8d:5e:ab:ad:46:ee:5d:66:e4:76:6c:
                    e4:75:73:c8:45:d5:44:86:87:64:bc:87:53:37:a4:
                    d7:85:d0:73:44:ed:0c:10:08:93:30:24:e8:c3:d0:
                    53:05:17:6c:3f:1d:ff:26:e9:d1:4e:a0:e5:40:5d:
                    0a:3d:fe:aa:0b:c4:bc:18:db:48:98:ff:46:b6:30:
                    7c:20:7b:1c:6f:70:24:ce:e4:4e:08:a2:2e:6f:f0:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:90:4F:AF:FA:F9:5D:92:96:AF:3B:2A:C1:D0:ED:AE:40:85:01:68
            X509v3 Authority Key Identifier:
                keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:c2:10:ee:e8:ef:46:3e:94:34:ab:9f:79:0b:91:6b:3b:
         d6:bc:ec:09:47:e4:6e:15:5a:a8:92:9a:46:7d:62:26:28:fe:
         aa:c7:d2:ee:41:c3:21:de:03:69:86:c5:b8:66:59:ae:6d:fb:
         09:51:a0:b9:4b:6c:2f:ce:ee:ec:50:3f:8c:11:fc:72:e9:b5:
         7d:64:8c:d4:00:95:77:86:8b:7c:90:18:23:b7:64:40:3e:08:
         d2:a7:12:08:6f:5e:5d:db:66:4e:88:fe:f9:39:f7:4e:b2:65:
         4a:d0:4e:3a:87:87:30:08:4c:61:8e:19:7a:22:ac:7e:2b:09:
         b3:47:b3:44:b0:3e:3a:60:3b:3f:01:dc:09:69:85:c5:53:e4:
         e5:0f:70:db:18:64:32:49:4e:0e:4a:c5:8c:70:8c:2f:5f:c1:
         92:f7:0c:22:e5:5c:39:c5:38:6e:60:a3:75:1c:9e:49:fe:62:
         a3:cf:3c:44:c1:bb:f0:cd:62:59:0a:f4:eb:13:47:76:86:90:
         82:63:df:77:82:0d:72:0b:5e:86:38:74:7e:74:92:f8:46:12:
         8c:ad:42:a5:4e:17:68:a7:96:f6:cf:b9:06:7f:7c:ae:e1:30:
         40:7d:30:09:a1:5d:bb:24:c3:5a:d6:70:a9:7e:56:d6:8c:f4:
         96:83:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:18 2025 by rpki-client