Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
File:                     ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json)
Hash identifier:          S8aQwnPg0tb4wzs+lcenZBBNolb03dgMTCCuwzyxTpg=
Subject key identifier:   87:78:99:C1:EF:7A:F5:95:6D:7D:5E:92:DD:6C:CE:AD:55:A3:8F:40
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Certificate issuer:       /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
Manifest number:          02
Signing time:             Fri 22 Aug 2025 17:44:45 +0000
Manifest this update:     Fri 22 Aug 2025 17:44:44 +0000
Manifest next update:     Fri 29 Aug 2025 17:44:44 +0000
Files and hashes:         1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: Q3c3hq8uum5zN8horfEcCkvkmzi+c3AKFISvm/wzIkc=)
                          2: AE999E1E7F7F11F0B11FE740C4F9AE02.roa (hash: gOmLk9d78U2D5m5t6v74LTuBEyzyY+12QDGRiKX5u0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
                          rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
        Validity
            Not Before: Aug 22 17:44:44 2025 GMT
            Not After : Aug 29 17:44:44 2025 GMT
        Subject: CN=68a8ac8c-cd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:ba:48:45:38:76:09:92:ce:4c:94:82:36:
                    47:93:dd:f5:ff:76:c1:a6:cf:ca:36:af:fe:5c:c2:
                    78:d0:a2:61:b8:cc:48:35:4c:97:30:29:e2:6b:6f:
                    53:c4:85:c1:99:c2:bb:a3:67:b2:23:de:81:04:3c:
                    a9:e2:d5:41:2e:cd:bc:75:80:f5:5f:9f:8e:5a:8f:
                    fa:f7:65:27:67:55:43:dc:0c:50:43:c7:29:6c:e8:
                    7e:40:64:5b:6b:e5:5e:eb:4e:83:65:76:16:5a:1a:
                    3d:e7:c7:03:50:46:9d:0e:77:08:25:43:30:53:46:
                    d6:cb:19:b5:9b:62:03:85:f8:33:85:ce:29:20:56:
                    62:42:df:5a:8f:c4:aa:f0:69:5d:ae:8f:f4:88:cf:
                    6c:96:cb:9b:7b:12:45:9b:0c:ae:b4:27:1d:d0:5a:
                    e6:25:7a:5b:ba:17:77:38:cf:0d:e4:89:9a:1e:c0:
                    c7:c1:fb:04:b9:06:66:14:18:90:e2:ba:1d:a9:df:
                    1a:7a:74:db:91:47:d4:2a:07:4a:bc:8a:a2:e2:9f:
                    c7:e7:ae:f9:d2:87:39:7a:7c:44:30:b5:1d:50:6f:
                    71:c5:f9:81:c0:c4:06:91:11:ab:b6:f4:5b:57:50:
                    73:7f:10:c8:47:b3:3a:5a:fb:07:79:17:31:76:de:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:78:99:C1:EF:7A:F5:95:6D:7D:5E:92:DD:6C:CE:AD:55:A3:8F:40
            X509v3 Authority Key Identifier:
                keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:36:b2:96:bc:17:6b:c7:fe:42:b9:0c:7b:b1:e7:82:9c:
         e0:34:56:a1:6c:1f:9c:50:61:e0:91:20:ba:ee:a9:c7:91:7b:
         d7:5d:e2:9a:1f:86:9e:f4:72:68:bf:7c:9a:22:3f:e0:5f:ca:
         06:70:48:92:29:8a:b7:4c:9d:5d:fd:f4:75:ec:ac:f5:98:4d:
         d7:0d:6b:f9:03:82:dd:47:1e:d4:46:79:10:dc:14:7d:ad:49:
         cc:ad:b2:5d:11:94:39:3d:67:f9:77:e3:59:09:b2:1a:7b:16:
         a4:52:35:ac:95:4a:c1:eb:a9:93:1f:61:75:f0:88:3a:7b:df:
         b4:02:b6:bc:e5:96:08:36:da:60:e9:48:9b:1b:ae:12:0d:fa:
         ae:af:cf:43:af:56:42:e2:ab:2a:fa:83:3d:fa:5a:dd:2f:28:
         03:1a:96:f6:cd:3d:d3:4d:5e:86:29:40:fd:59:82:0c:ae:4a:
         29:46:5d:8a:ae:32:57:d6:07:9e:25:34:54:99:19:63:da:ca:
         f8:b5:19:98:f8:30:26:bd:0a:65:ff:1f:16:99:35:0f:27:53:
         31:b4:ee:a2:1e:a3:79:94:8c:f0:88:5b:a1:45:4e:9b:32:85:
         8e:42:0a:c7:08:0f:e7:70:ad:d1:f6:44:d6:3f:fe:92:45:6a:
         68:f6:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:20:18 2025 by rpki-client