Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File:                     YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier:          5Lncu6RFbrxhwSMnZ9XAWUA00Mx9Vucxl4/Y4sVXavM=
Subject key identifier:   BF:8C:A3:E5:E9:F4:06:82:F2:CA:32:D1:E9:14:1B:89:B5:25:10:56
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       0776
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number:          0766
Signing time:             Sat 28 Jun 2025 21:14:12 +0000
Manifest this update:     Sat 28 Jun 2025 21:14:11 +0000
Manifest next update:     Sat 05 Jul 2025 21:14:11 +0000
Files and hashes:         1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: onhd/zQ0nO/MV4++y4GHSLPclk8duy15RPx0BvXft5Q=)
                          2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=)
                          3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Jun 28 21:14:11 2025 GMT
            Not After : Jul  5 21:14:11 2025 GMT
        Subject: CN=68605b23-8440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:d1:92:81:55:18:cb:b9:dc:24:ee:09:40:
                    0d:e4:04:6f:17:57:5e:9c:4f:31:34:9f:b3:d5:8c:
                    d1:90:e5:04:58:30:af:f9:7b:d2:b1:f1:2b:99:cb:
                    d6:d3:e9:d3:fe:0b:e4:fb:04:1c:c9:5f:ba:f5:53:
                    a2:9d:69:51:a0:5e:f4:e4:22:ed:e1:b4:26:0a:31:
                    f9:f5:b8:fd:e6:6a:ef:07:90:15:55:69:50:3a:d1:
                    ff:08:e1:eb:05:82:f3:11:2e:bf:19:43:79:80:33:
                    65:a2:b5:7c:1e:36:f7:64:65:60:46:bc:22:d6:0e:
                    ee:a7:8a:13:11:90:a4:f5:d2:46:3f:66:5a:43:36:
                    2d:49:db:b2:cb:1f:66:c0:4d:b1:c7:62:b5:b5:20:
                    d4:e0:41:ca:9e:06:ad:a2:91:a3:8a:43:4d:5d:e5:
                    6f:4b:6b:62:57:0b:88:8c:24:42:87:4b:ab:cd:a1:
                    36:ab:4e:26:ee:ce:d4:14:fc:0e:af:60:2a:93:e8:
                    e6:95:b0:2d:51:0a:a8:0c:24:e7:b2:27:23:48:af:
                    56:2c:e9:a1:d3:ab:37:7a:01:ba:70:2c:bb:46:03:
                    29:68:d8:e4:82:2e:74:12:7c:d5:49:02:f4:62:4d:
                    66:46:f5:93:b2:c4:62:b5:4f:d4:c6:92:52:63:0c:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:A3:E5:E9:F4:06:82:F2:CA:32:D1:E9:14:1B:89:B5:25:10:56
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:54:9c:50:fb:0f:21:52:ea:27:e9:81:66:99:54:72:0c:
         89:80:e3:22:38:4c:40:cb:e0:31:a8:bc:36:31:75:5a:1e:22:
         00:d4:73:f9:c4:e8:ad:9a:45:ec:92:d6:73:04:29:66:41:aa:
         a1:90:5e:38:35:a0:f3:3a:3a:05:21:2f:21:0d:b2:3c:03:29:
         6b:89:ba:21:41:2e:23:85:4d:e7:3d:33:30:44:b6:08:4c:22:
         49:03:5f:81:13:b8:b7:32:16:d7:74:5f:4d:78:df:7b:81:16:
         ab:31:49:02:0f:64:8e:b0:bc:ce:dc:69:33:9e:6e:90:4b:10:
         90:91:41:75:34:c5:5d:f0:9d:44:56:6e:d7:95:63:aa:b3:01:
         9a:bb:62:3a:8e:f9:4b:de:e8:1b:00:01:a2:2c:88:b5:97:ba:
         40:62:73:e8:59:ab:77:ca:7f:77:cd:90:39:27:52:dc:29:cf:
         bf:ad:79:18:1f:fa:a5:5c:c3:3a:6a:fe:e5:fc:20:67:1f:05:
         39:e9:f8:06:76:87:3c:4e:e4:4c:bc:4c:ab:13:2b:d4:04:ea:
         bd:da:ae:2c:aa:eb:6d:f9:42:bb:55:65:09:d0:e0:f3:48:be:
         f7:3b:d4:de:d5:22:98:a6:a2:68:f4:73:44:d1:3c:16:03:4c:
         75:bf:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:56 2025 by rpki-client