Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File:                     Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier:          hXsSnlrQm9Qehl0DD+boErGO6YWRQcIni3AHFD+wsOQ=
Subject key identifier:   2C:80:96:40:D2:94:B5:B4:46:86:25:84:0C:C8:2F:90:81:20:77:B0
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer:       /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number:          0150
Signing time:             Sat 23 Aug 2025 04:21:14 +0000
Manifest this update:     Sat 23 Aug 2025 04:21:14 +0000
Manifest next update:     Sat 30 Aug 2025 04:21:13 +0000
Files and hashes:         1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: KZxnD3lDQ8SN6yQuFSsm+XA/8Z7H30uqA5EFUsJrzNQ=)
                          2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: Si3a7BG/8OJeYXWshDKB1ssBaH31J9TWvH+Wp+wV/dA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
                          rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
        Validity
            Not Before: Aug 23 04:21:14 2025 GMT
            Not After : Aug 30 04:21:13 2025 GMT
        Subject: CN=68a941ba-08f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:0f:e9:35:4c:f8:9a:47:9a:71:6e:50:96:
                    c4:f7:a2:ed:fe:b8:d6:83:8c:55:2f:d0:49:99:26:
                    54:74:b3:cb:0a:17:1d:c4:8f:2c:23:10:0d:b8:59:
                    05:96:fe:d7:42:16:63:92:52:ac:40:b6:95:e0:1a:
                    c1:b3:f4:53:eb:f8:cd:2a:29:90:14:bb:96:f0:2f:
                    4f:fa:3d:32:ea:9d:7f:ac:7a:1d:4d:a9:b7:ce:34:
                    99:82:e1:91:4c:f9:fa:15:36:15:0d:2d:bb:ec:6f:
                    3f:71:7d:e4:d6:3c:9d:50:04:a5:4d:ae:08:13:aa:
                    5d:31:58:38:22:92:f0:43:4c:5a:39:e4:01:ce:27:
                    a5:62:ee:ec:70:8f:72:7c:de:bc:15:c9:e7:2d:ca:
                    bb:df:e1:53:33:4b:a2:e4:5f:9b:59:d6:e8:48:08:
                    e0:b2:ca:ca:31:f9:2f:2f:ea:35:8c:a1:c3:06:5d:
                    26:81:aa:aa:77:09:0d:22:6e:9d:35:23:ec:d7:07:
                    cb:d3:a0:e5:20:55:fb:62:a7:3d:a7:72:a6:6d:46:
                    9b:a9:d8:5d:7c:07:91:55:57:23:14:4b:58:e8:ea:
                    cf:ba:fd:6c:89:41:a5:7b:1f:ee:37:5f:5d:27:44:
                    ae:5e:97:1e:50:71:0c:d7:48:62:37:8b:b4:85:9d:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:80:96:40:D2:94:B5:B4:46:86:25:84:0C:C8:2F:90:81:20:77:B0
            X509v3 Authority Key Identifier:
                keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:46:aa:1d:29:e0:8a:08:dc:a7:43:6a:3e:9f:05:3c:3d:
         43:41:a3:d5:f3:47:d3:bf:36:d5:90:33:cf:5d:94:09:94:b7:
         3e:a1:67:d0:38:0f:d5:33:8d:bf:3c:29:45:f2:54:5e:88:58:
         12:79:9c:b1:e9:5b:1d:04:ca:c5:fc:d7:78:03:3d:9f:41:c8:
         61:b3:5f:b5:c6:be:fd:a5:52:60:f8:40:ef:bf:86:b3:8e:6e:
         e8:10:7a:c0:50:f7:69:16:3e:60:67:f3:b0:6d:66:62:79:c3:
         3d:ee:0c:98:9a:69:6b:cd:55:d4:f5:3b:48:c6:9c:4d:23:3d:
         d4:41:7b:43:9c:8f:39:14:3b:c2:62:26:8c:3b:63:65:40:c6:
         3f:e2:70:41:35:56:e4:c3:f0:4c:9e:ac:98:ab:e1:da:7e:4a:
         07:98:6b:ed:8e:d9:7e:c6:1f:00:83:ee:cc:a3:ef:29:db:95:
         f7:8c:46:99:5c:28:b5:07:a3:52:40:19:c7:3d:3b:dc:3b:41:
         2e:7c:66:6e:b9:75:76:c8:f2:df:9c:30:83:f4:91:a3:84:0f:
         72:22:00:95:74:15:52:a0:44:69:15:c8:97:91:31:0d:ca:cc:
         f2:6d:5d:7d:60:c4:eb:e9:80:25:ab:3a:e7:34:8a:3e:ca:ed:
         22:00:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:06 2025 by rpki-client