Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
File:                     YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json)
Hash identifier:          aCNxv5dEAevIV0BpamGUi3XTH/xnjkQ/52zMek/J6tU=
Subject key identifier:   29:45:94:1D:A1:71:5E:96:AE:A0:54:51:BC:EB:56:C8:87:0B:38:C3
Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6
Certificate issuer:       /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
Manifest number:          45
Signing time:             Sat 23 Aug 2025 07:38:52 +0000
Manifest this update:     Sat 23 Aug 2025 07:38:51 +0000
Manifest next update:     Sat 30 Aug 2025 07:38:51 +0000
Files and hashes:         1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: 2+W9tV/YGinVOd/l/hCa8ABLv4PcnRmf7snOIvXgGpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6
        Validity
            Not Before: Aug 23 07:38:51 2025 GMT
            Not After : Aug 30 07:38:51 2025 GMT
        Subject: CN=68a9700c-b4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:fb:1a:f9:97:b2:86:9d:44:9d:22:c7:18:
                    09:0c:eb:d8:5c:cc:0c:7b:43:c9:b2:ee:11:ed:3b:
                    19:39:b9:09:2b:a3:a9:8f:e3:fd:01:ec:83:24:40:
                    79:77:00:35:57:9d:6f:6b:ba:2c:be:3c:9b:98:d9:
                    50:8b:d7:e5:da:3f:52:3d:16:96:c3:f1:43:2a:f6:
                    3a:2c:e4:8a:b2:c1:57:41:8f:49:cf:fc:2e:bf:f4:
                    b3:cb:d4:30:43:20:d8:4c:c5:c7:f8:6d:82:b1:ea:
                    e8:c4:72:fa:5b:be:80:ee:82:6d:fd:0d:42:8e:10:
                    df:cd:46:a6:f9:73:e8:14:8d:b5:92:38:1b:92:f4:
                    ae:81:38:7f:cf:dd:68:65:66:73:63:ce:11:d2:de:
                    23:e7:fb:24:df:82:42:03:0e:af:28:30:2a:74:22:
                    4a:cc:72:d4:a5:2e:c7:6e:62:2d:85:70:a8:f6:b4:
                    41:03:92:c7:b0:d7:40:af:7f:6c:84:4a:ac:f6:34:
                    64:ef:58:f2:7b:63:96:00:26:98:22:3c:d1:9b:bc:
                    62:b0:3e:cb:0b:ee:f1:da:10:d5:18:52:79:10:55:
                    09:f1:62:43:a0:27:33:d4:d7:ec:f5:56:19:78:b7:
                    e6:e3:d5:2e:c9:7d:9e:14:45:4e:11:d1:f8:a0:b8:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:94:1D:A1:71:5E:96:AE:A0:54:51:BC:EB:56:C8:87:0B:38:C3
            X509v3 Authority Key Identifier:
                keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:e7:c8:a6:40:57:56:78:05:06:c9:15:ab:f2:81:ee:94:
         8e:2e:96:24:4a:6d:01:cc:07:05:25:d5:0e:d4:28:2c:5b:b9:
         db:84:88:06:e6:9b:1a:b4:58:ba:a1:52:ed:b5:b6:e5:bc:2f:
         44:b9:dd:60:71:e8:04:fd:6a:64:b1:a4:b9:f6:0c:36:26:0d:
         08:6d:a8:a2:7b:ae:90:76:22:a5:06:75:28:41:ff:01:88:18:
         92:32:7b:01:83:c2:4c:11:df:b0:48:fb:f2:b8:f8:6e:1c:e1:
         64:d5:87:b8:48:6e:5b:0e:59:73:ee:97:df:1a:64:5a:f2:de:
         cb:1b:76:ba:32:2a:86:9e:29:28:2e:46:f4:b0:cb:27:36:cc:
         d9:70:9c:d4:7b:a8:84:11:d0:23:fb:35:50:ca:12:fb:05:cd:
         b8:65:2d:e2:ce:77:3b:5b:7d:61:41:38:65:32:98:51:ec:89:
         88:c2:52:20:42:f0:f8:d1:65:8a:bb:19:26:a7:cc:14:fe:0d:
         42:38:8e:84:86:36:eb:58:e5:a1:c9:9e:bf:f8:ab:7d:99:44:
         16:2b:2d:d4:d5:ba:49:3e:2b:34:f3:e5:e3:d9:24:23:be:3d:
         cf:2c:7b:59:39:87:4b:b9:e6:48:97:4b:f9:2a:88:83:f5:d3:
         c0:cf:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:57 2025 by rpki-client