Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
File:                     YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json)
Hash identifier:          9CWki+FtIX6qx4QsfylqA9NhESwejNFUioFOd/Oy4tg=
Subject key identifier:   0D:C7:F9:52:88:F7:1C:22:EB:6A:74:8B:DD:5A:93:21:A5:65:BE:FF
Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6
Certificate issuer:       /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
Manifest number:          2B
Signing time:             Thu 03 Jul 2025 07:59:44 +0000
Manifest this update:     Thu 03 Jul 2025 07:59:43 +0000
Manifest next update:     Thu 10 Jul 2025 07:59:43 +0000
Files and hashes:         1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: BLnArhVkhXOq9v/59eehIHUese2g+FlSZTZ6sMCtbaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
        Validity
            Not Before: Jul  3 07:59:43 2025 GMT
            Not After : Jul 10 07:59:43 2025 GMT
        Subject: CN=6866386f-6afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:ef:2e:67:1d:ea:7a:9a:55:4a:97:e4:88:
                    ce:82:0d:5a:6c:d9:92:e1:aa:fb:40:0a:fe:96:c5:
                    55:60:66:74:8a:d5:64:92:50:e8:3b:1d:67:ae:96:
                    eb:71:08:62:a2:1e:4d:fb:3d:91:20:cf:e2:19:63:
                    3c:59:14:a6:b8:3f:b5:97:dd:43:61:68:0f:5c:c8:
                    64:79:07:43:8c:48:0e:e7:33:55:5b:23:59:6c:5e:
                    65:37:3b:72:c8:cd:9c:a6:25:6f:cd:23:59:7a:0f:
                    dc:71:47:bd:42:43:74:cb:bb:5c:01:86:f5:b3:90:
                    15:94:03:11:c0:df:58:7c:3c:68:cf:3f:86:fb:31:
                    a4:3a:0e:1d:5b:77:6e:37:45:fd:08:7c:d9:fc:01:
                    c9:04:b2:fe:03:6f:7f:3c:8e:48:fb:31:10:87:db:
                    23:6f:fb:e9:5e:dd:5d:4f:97:30:0d:cc:70:ac:ee:
                    5b:62:15:af:62:5d:64:44:f9:40:64:dd:4a:53:66:
                    da:71:b8:02:18:ab:61:7b:0b:08:93:4e:1a:e6:70:
                    b7:91:05:65:dc:11:bf:51:2b:b6:0b:7c:17:8a:43:
                    c7:61:eb:26:18:72:ef:f6:1d:7b:7e:44:b0:22:e5:
                    c6:df:11:fa:17:92:67:90:0e:b8:70:8b:b1:69:56:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:F9:52:88:F7:1C:22:EB:6A:74:8B:DD:5A:93:21:A5:65:BE:FF
            X509v3 Authority Key Identifier:
                keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:33:91:ac:f0:dd:f9:f7:fa:72:a4:cf:f7:ab:ef:ee:3a:
         bb:b4:a2:00:98:2b:af:14:f4:2f:35:42:d0:50:f5:b2:22:2d:
         eb:58:cb:46:93:78:68:50:ec:da:b1:20:50:94:71:7c:e9:65:
         45:8a:3d:ba:77:ec:c1:4f:e0:f6:b1:bb:3c:bb:c4:91:c1:b0:
         9a:8e:80:41:4f:8e:9f:e6:95:73:04:43:46:55:91:f0:67:09:
         9d:71:5a:73:56:5d:d0:44:d5:fe:e5:a9:30:8f:f1:88:50:17:
         a8:4c:61:ba:c3:1a:8f:81:38:ea:48:65:cd:b6:e2:5a:b7:c9:
         b4:de:47:61:b2:67:99:e6:65:13:27:29:85:1d:9d:35:50:6c:
         f1:51:12:10:7b:ed:eb:cc:b8:65:7f:33:c7:c8:c9:d8:58:88:
         52:93:7c:38:71:a2:33:09:50:e8:43:96:25:64:81:5a:52:25:
         f0:5c:06:bf:05:b6:5d:a5:99:67:0c:a3:b2:6b:b3:91:85:f9:
         f5:a1:1a:d2:9b:69:ed:ea:1a:5a:f7:66:28:65:86:63:07:90:
         37:15:37:03:e3:a9:5f:43:d8:96:82:97:73:a7:b9:01:4b:db:
         d3:63:80:37:cb:da:92:82:3a:1a:1c:d5:1e:b9:6e:c7:72:bd:
         97:b1:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:24 2025 by rpki-client