Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          iyUxohxdrJsq09Taspjg1f1pNfUY/Bf8/wrzhJZ/Ia0=
Subject key identifier:   EE:9D:C8:35:0B:43:E7:84:DD:90:48:D3:F8:27:69:83:9F:1E:1E:1B
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          0540
Signing time:             Mon 30 Jun 2025 23:55:22 +0000
Manifest this update:     Mon 30 Jun 2025 23:55:22 +0000
Manifest next update:     Mon 07 Jul 2025 23:55:22 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: cfy5YWtvkuBiXT6cSSVGU8ejQCeKQLHx53Lg7aZXDOc=)
                          2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Jun 30 23:55:22 2025 GMT
            Not After : Jul  7 23:55:22 2025 GMT
        Subject: CN=686323ea-6b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:ef:99:7e:3c:62:72:7d:05:47:2d:44:ab:
                    c8:c4:35:6f:a0:d5:8e:19:e1:dc:25:9d:aa:45:fa:
                    26:67:e6:7b:31:f5:3b:79:97:f1:19:dc:9a:75:2b:
                    53:26:5f:6d:ce:0e:04:c5:fc:53:f3:8a:8c:d3:82:
                    e2:f5:75:75:6d:af:46:14:b7:3f:25:15:a3:eb:15:
                    c5:d7:c3:c9:fd:73:ff:24:3b:62:74:cb:69:0b:21:
                    df:8d:89:4a:4a:5d:5d:e3:d1:b8:92:76:a5:c8:1b:
                    3c:fb:76:11:b6:2d:16:4b:a3:45:45:78:41:65:6d:
                    e7:d7:df:83:44:36:ee:0a:8b:66:4f:fa:66:ba:1f:
                    11:02:b1:e3:50:5c:86:4d:68:c0:83:c6:00:01:4a:
                    66:75:75:65:21:58:71:33:ef:08:d5:f1:8d:91:e3:
                    8c:74:d9:f3:a3:95:3c:9f:33:e6:a8:20:b7:d6:58:
                    03:35:50:73:ac:47:b3:36:12:61:8f:aa:09:b3:f4:
                    4f:b4:4f:4d:87:75:c1:fb:ca:07:b4:c0:0c:96:55:
                    33:72:56:27:48:78:6e:11:27:dd:dd:d5:5c:9f:e0:
                    ad:7d:94:c5:3b:5a:37:28:68:49:88:e8:d8:bb:24:
                    76:07:9e:2e:4a:7d:3d:ee:4f:15:f9:03:3a:8a:41:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:C8:35:0B:43:E7:84:DD:90:48:D3:F8:27:69:83:9F:1E:1E:1B
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:2b:21:90:99:ab:50:f5:e4:ac:15:d3:16:59:c1:8e:44:
         94:78:2c:c3:87:62:25:fc:05:cc:b8:e5:7f:44:e4:5b:c6:ed:
         b6:2d:c7:d4:88:57:00:1f:53:00:b8:b2:bf:9c:50:90:89:61:
         e5:0c:da:90:e5:b3:9a:95:86:70:a4:bf:dd:5f:2e:55:80:0e:
         ab:66:eb:43:f0:d3:24:d8:01:b5:0c:b3:4f:0f:70:8c:7e:72:
         d7:54:4c:e5:bd:21:2f:91:12:64:98:94:31:f0:ad:e0:cd:9b:
         f3:bd:d0:6a:41:1d:c0:f8:5e:d6:fb:0b:54:c5:94:bf:eb:2d:
         b2:0c:b8:ce:45:d5:be:f7:cb:b7:ca:8f:f9:48:ee:1d:73:bb:
         69:eb:21:17:2a:a9:50:2a:6c:b0:a1:41:fe:09:a5:6e:60:57:
         9f:61:43:98:40:9b:e5:14:17:61:9d:02:e6:dd:a5:f4:b5:cf:
         dc:f3:f4:65:8e:55:4f:b9:df:04:a2:5c:4d:67:b7:68:b7:ae:
         3b:70:14:d8:e3:97:0f:2e:60:bf:c6:84:e3:22:ee:05:bc:b2:
         98:0f:71:08:06:3b:25:fc:71:68:95:5c:7d:3d:90:51:29:52:
         94:5d:61:b9:51:9b:2a:0a:68:1e:ab:f3:40:77:d7:9f:80:57:
         63:34:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:10:23 2025 by rpki-client