Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
File:                     Syj186m-bJVf8b4Pe1CAOrF-tGA.mft (raw, json)
Hash identifier:          EmNgX1KeFQVYa06TbqBG+49pZ3ex9wl7gG6ZulrtBHU=
Subject key identifier:   DD:92:50:18:25:20:E8:D5:38:A7:FE:E5:15:99:19:E1:2F:47:34:5C
Authority key identifier: 4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60
Certificate issuer:       /CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
Manifest number:          DF
Signing time:             Sat 23 Aug 2025 05:39:35 +0000
Manifest this update:     Sat 23 Aug 2025 05:39:34 +0000
Manifest next update:     Sat 30 Aug 2025 05:39:34 +0000
Files and hashes:         1: Syj186m-bJVf8b4Pe1CAOrF-tGA.crl (hash: IPzmflo0Hm5iMIO4auiDstVWI6yfmiOdeIu1erDGyg4=)
                          2: 8E20940E32AE11EFAE6AE719C4F9AE02.roa (hash: bTdH2BNkxu8pmsOX7z6m4Cai9a9U6KqGeoJPp3UjSyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC324, serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460
        Validity
            Not Before: Aug 23 05:39:34 2025 GMT
            Not After : Aug 30 05:39:34 2025 GMT
        Subject: CN=68a95417-eac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:d4:97:7f:3f:b2:4a:9f:2c:66:fe:7c:96:
                    22:be:fc:00:81:7f:ba:77:09:7c:0f:6b:d5:c0:5e:
                    38:41:d8:8d:7e:fd:39:8b:9a:91:be:75:fb:01:1f:
                    02:48:29:ff:c8:37:52:dc:4c:b5:0b:4d:b5:0e:18:
                    81:0c:a2:2f:9f:80:08:41:fe:b8:35:84:0e:3b:da:
                    70:66:3e:56:85:40:69:bd:df:27:50:4d:19:48:80:
                    d8:27:1b:84:a1:33:01:9f:15:75:ca:b7:e2:67:1e:
                    e8:9c:26:6b:aa:35:6f:f8:7c:05:e3:c1:bd:ac:80:
                    8c:c5:32:04:a3:d0:69:5e:00:8c:a1:02:f4:01:f5:
                    10:d8:b5:fc:55:c9:93:26:14:02:69:aa:e2:95:47:
                    75:60:ea:45:41:6f:cc:d9:93:c0:c4:0c:b2:38:51:
                    36:f7:71:6a:ad:cf:a9:e3:35:94:90:30:e0:d7:54:
                    5d:45:b0:25:b7:33:f5:68:fb:56:85:e6:64:9c:e3:
                    60:a9:91:38:32:8f:07:08:b7:2f:41:a2:53:2b:2f:
                    61:2d:fe:30:86:97:59:3c:01:bc:69:6b:ea:94:6c:
                    8a:d1:b5:3f:aa:0b:38:08:fb:63:e3:8e:5e:43:97:
                    b5:42:bb:4e:a7:fa:53:21:52:b3:30:55:57:e2:4c:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:92:50:18:25:20:E8:D5:38:A7:FE:E5:15:99:19:E1:2F:47:34:5C
            X509v3 Authority Key Identifier:
                keyid:4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:ac:ee:59:45:83:de:cc:1f:b0:74:a1:61:b8:e6:80:a7:
         9b:48:09:a8:53:6b:7f:6d:93:86:56:8f:82:ff:0e:af:0b:66:
         17:9e:d5:12:57:33:72:62:b3:85:70:40:b3:44:62:7f:0d:11:
         00:4a:7e:f7:f4:eb:f4:45:41:08:06:62:31:65:e7:8c:90:76:
         3b:6e:ac:e7:83:6a:0f:ee:c9:aa:8b:ea:11:3a:b5:8a:c8:59:
         c2:34:48:41:95:b5:9d:53:68:aa:47:6b:24:7e:1c:10:7d:63:
         a7:d3:08:90:c0:00:05:ae:d4:1c:5e:4e:f8:22:49:ad:d2:b2:
         1e:90:be:e2:37:54:ec:d0:56:8b:8a:60:4f:af:d6:1f:e1:47:
         03:dc:9e:53:2a:15:e3:c6:3a:b3:7c:dc:4f:45:9d:97:8c:53:
         a5:ff:b6:8b:5d:23:71:c6:5a:5b:cc:be:64:62:e1:81:12:a4:
         42:06:25:b3:bc:ce:ca:c4:d0:b6:fe:cb:f7:b4:e0:6d:1b:a4:
         73:bc:01:7e:3d:b9:b0:d2:f3:e4:5a:53:bb:a3:fd:f2:8a:b2:
         87:89:d7:e5:ad:02:a4:d3:51:b3:a4:91:e1:0d:9f:c1:1e:b9:
         04:69:c8:e1:5c:c9:c0:74:cf:2a:86:f4:08:5b:ba:90:60:e4:
         3f:60:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:42 2025 by rpki-client