Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File:                     _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier:          nltFWUWbfV3U0dysIX9OPvrzo3qbkypk1ohaOygXFmo=
Subject key identifier:   65:6C:50:08:92:85:40:C6:A5:2F:59:C5:24:41:BA:54:B4:AF:2A:7F
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer:       /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number:          6D
Signing time:             Sat 23 Aug 2025 07:10:41 +0000
Manifest this update:     Sat 23 Aug 2025 07:10:40 +0000
Manifest next update:     Sat 30 Aug 2025 07:10:40 +0000
Files and hashes:         1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: s2lttGT/yKDg9dkrQ8FN2d1TGap6+KNwFz3KvCpdKnM=)
                          2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
                          rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
        Validity
            Not Before: Aug 23 07:10:40 2025 GMT
            Not After : Aug 30 07:10:40 2025 GMT
        Subject: CN=68a96970-ef93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:61:81:49:32:50:23:13:a8:97:a2:1d:4a:
                    9e:b6:36:4f:b1:5e:47:b6:70:0f:c6:55:0b:9b:1a:
                    e4:d4:73:7d:02:7b:3a:a3:a1:a9:e0:5b:e2:66:6d:
                    f1:ed:66:34:ac:cf:88:b0:7f:e6:88:c9:02:ec:34:
                    87:cd:64:6b:82:f3:99:a8:80:3a:15:79:fa:86:12:
                    1a:49:c5:86:40:bc:6d:7d:71:7f:6f:3e:ac:ab:d4:
                    79:d4:bb:ae:91:e5:cb:71:ac:cf:96:b2:d4:24:91:
                    6f:f5:14:d1:f4:e4:f4:d6:02:88:83:cb:ba:6e:a7:
                    68:33:f6:5d:da:d3:89:b3:be:16:1d:cf:8e:b4:8f:
                    e2:25:31:85:b2:67:0b:40:4b:69:29:98:35:a4:9b:
                    6c:be:cd:48:a1:e0:ba:c9:3c:b3:c1:ee:95:48:32:
                    1b:f4:83:77:75:a6:fe:f6:63:dc:37:08:8c:f0:67:
                    d7:b7:d0:45:da:09:a9:1a:9d:dc:d3:21:d6:50:14:
                    c5:1b:79:49:cc:7b:c9:75:22:c4:43:e6:0c:94:5f:
                    5b:4b:cc:17:ef:3d:1e:cc:08:78:e3:1e:81:f2:7a:
                    4d:cb:1f:21:c0:29:bf:46:1c:7c:8e:c8:fc:16:c8:
                    b5:f1:97:cf:85:f5:0d:fe:ee:22:cd:a3:40:94:83:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:50:08:92:85:40:C6:A5:2F:59:C5:24:41:BA:54:B4:AF:2A:7F
            X509v3 Authority Key Identifier:
                keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:06:2d:f9:33:7c:91:ba:70:5e:64:69:66:e3:b6:1e:b2:
         03:83:ba:82:7e:24:f4:60:03:29:68:3a:cf:3e:55:e2:79:77:
         28:91:6f:68:03:ff:b3:8e:ee:33:1a:b2:10:d8:6d:f0:82:d7:
         f3:d5:19:97:e6:e4:65:d0:98:89:16:b0:fd:3d:27:80:0d:07:
         d7:62:d2:65:09:f5:c9:6c:ec:33:06:c4:86:1a:bb:9f:fd:2d:
         34:30:1b:36:2e:88:9c:2b:22:55:db:3f:87:59:f7:b5:ac:db:
         10:db:69:d8:fa:0e:92:50:34:21:6a:b6:77:51:b0:d1:4a:08:
         62:7b:74:6e:cf:b7:c0:27:d2:50:d5:30:36:ef:9d:29:eb:f3:
         2c:47:7e:4f:de:c0:a9:c9:2b:0a:4d:63:43:33:15:ed:99:fc:
         ed:63:60:22:2b:c6:70:f1:c5:b7:ce:2d:48:dc:d2:09:83:27:
         40:db:bf:4b:6d:8e:60:38:45:30:8f:98:86:bc:23:5f:ec:f2:
         6d:df:ca:54:b8:5f:ba:15:11:41:22:78:9e:0e:b7:94:e8:04:
         b5:31:30:87:18:98:a3:6d:98:7d:fd:2f:83:b8:f1:80:52:95:
         38:37:74:32:5d:a6:77:3c:89:00:aa:67:f3:64:56:d2:e6:73:
         40:be:d0:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy
RUI3RkEyMDAeFw0yNTA4MjMwNzEwNDBaFw0yNTA4MzAwNzEwNDBaMBgxFjAUBgNV
BAMTDTY4YTk2OTcwLWVmOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiRGGBSTJQIxOol6IdSp62Nk+xXke2cA/GVQubGuTUc30CezqjoangW+JmbfHt
ZjSsz4iwf+aIyQLsNIfNZGuC85mogDoVefqGEhpJxYZAvG19cX9vPqyr1HnUu66R
5ctxrM+WstQkkW/1FNH05PTWAoiDy7pup2gz9l3a04mzvhYdz460j+IlMYWyZwtA
S2kpmDWkm2y+zUih4LrJPLPB7pVIMhv0g3d1pv72Y9w3CIzwZ9e30EXaCakandzT
IdZQFMUbeUnMe8l1IsRD5gyUX1tLzBfvPR7MCHjjHoHyek3LHyHAKb9GHHyOyPwW
yLXxl8+F9Q3+7iLNo0CUg7EXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZWxQCJKF
QMalL1nFJEG6VLSvKn8wHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE
QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z
NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJSNBi35M3yRunBeZGlm47YesgODuoJ+JPRgAyloOs8+VeJ5dyiRb2gD
/7OO7jMashDYbfCC1/PVGZfm5GXQmIkWsP09J4ANB9di0mUJ9cls7DMGxIYau5/9
LTQwGzYuiJwrIlXbP4dZ97Ws2xDbadj6DpJQNCFqtndRsNFKCGJ7dG7Pt8An0lDV
MDbvnSnr8yxHfk/ewKnJKwpNY0MzFe2Z/O1jYCIrxnDxxbfOLUjc0gmDJ0Dbv0tt
jmA4RTCPmIa8I1/s8m3fylS4X7oVEUEieJ4Ot5ToBLUxMIcYmKNtmH39L4O48YBS
lTg3dDJdpnc8iQCqZ/NkVtLmc0C+0CE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:12 2025 by rpki-client