Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File:                     YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier:          ccZ3+3FBh2blS6aoGduCUEy97j1Vrk/hqCgZak+/pOw=
Subject key identifier:   88:ED:3A:62:1A:84:42:5A:6F:9B:41:58:B6:E3:51:19:CA:92:96:EA
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       097D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number:          0975
Signing time:             Fri 16 May 2025 20:25:57 +0000
Manifest this update:     Fri 16 May 2025 20:25:56 +0000
Manifest next update:     Fri 23 May 2025 20:25:56 +0000
Files and hashes:         1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: IYzh7BEFqQjzrAOJN94WFxElUFv8d5HTn1E7FtsFiVk=)
                          2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: kppfjOmUGO+tWg93gbF2w14mllXA4v8g2v3smcz3zqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: May 16 20:25:56 2025 GMT
            Not After : May 23 20:25:56 2025 GMT
        Subject: CN=68279f54-86fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:42:bb:c9:93:7e:87:21:45:6e:fe:ee:b8:
                    ff:47:11:21:0b:5d:e3:2d:79:39:0c:51:95:97:33:
                    1c:34:ef:78:26:08:63:1e:57:d6:8e:3f:3a:7d:6a:
                    19:89:e6:b4:8d:5b:9d:eb:fe:8c:b3:69:df:4b:ef:
                    8f:0b:33:ba:c7:99:cd:6e:d9:4f:a6:ee:ed:d3:3a:
                    e3:7a:fc:15:35:9e:14:b4:1b:4b:3b:84:71:9f:77:
                    80:18:73:af:eb:21:a3:5b:ea:91:bb:d3:65:0b:75:
                    ae:24:09:1c:97:b8:fe:45:7c:07:4a:2e:44:11:c8:
                    c7:a3:f1:cd:31:6f:ef:42:a2:a6:a9:4e:db:b8:2c:
                    2c:aa:bc:f7:5e:de:98:b9:cb:60:42:78:92:66:a9:
                    0c:18:71:b3:31:ab:84:cb:f1:88:d0:c0:ab:7f:ee:
                    8a:68:94:66:71:72:7c:b7:2b:0b:eb:c9:c9:ad:4a:
                    69:4e:7a:d1:df:86:18:67:8e:86:4a:be:f8:5b:11:
                    bb:6e:d3:04:19:02:b3:46:b1:67:1b:8f:99:e7:38:
                    a6:c8:36:52:c2:9d:90:f1:a6:b0:78:a5:6d:13:5b:
                    f6:24:c5:64:f9:31:16:d7:16:bc:66:45:50:97:ae:
                    a5:83:11:8a:63:07:b4:c8:65:c9:5f:4a:2f:e1:9a:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:3A:62:1A:84:42:5A:6F:9B:41:58:B6:E3:51:19:CA:92:96:EA
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:ab:df:17:3c:7a:65:38:fe:f8:0d:d3:71:10:44:4c:36:
         92:99:f1:24:47:d6:91:6c:64:78:33:57:24:bc:09:7c:ad:bc:
         49:b0:fd:84:c9:99:eb:af:62:b7:5e:fd:e2:3a:6a:fa:59:b3:
         b9:73:c8:99:c1:99:ba:ff:63:d8:0f:37:35:ec:d6:8c:a6:51:
         87:ec:67:3c:08:18:3a:4b:0c:87:83:1e:b6:bf:82:50:40:9a:
         2b:e0:7a:3a:a7:4c:bd:d7:09:c3:fa:49:d1:51:1a:a8:78:77:
         bf:cc:12:28:90:28:d8:e6:af:06:81:dc:6d:ab:aa:50:4a:dd:
         0a:62:92:96:9e:34:17:05:70:b4:cf:09:69:54:4a:47:42:cc:
         9e:6f:52:af:87:83:ce:36:f8:51:46:2a:62:97:63:f2:cb:39:
         e6:d1:c6:ff:4b:29:6a:3e:3a:93:7f:d2:04:60:c4:9c:c4:eb:
         e6:e8:d9:f4:a6:69:4d:4a:d0:1d:90:b3:38:94:c5:60:45:61:
         ff:38:0b:ed:be:89:4a:97:12:eb:28:3c:4f:6c:3b:6d:1c:ac:
         3e:2b:94:48:77:9b:ab:6d:8a:e9:49:30:f1:92:e0:8c:fe:c5:
         e9:d8:57:df:85:a2:89:60:43:a9:80:31:5b:c4:dc:c3:57:0f:
         9f:33:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:41:33 2025 by rpki-client