Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File:                     ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier:          8x0gUapRi0bFYtyuP4FvIR400RrAHcVzYgPHvnDIl/g=
Subject key identifier:   B2:D4:68:0D:EE:68:28:CF:4C:51:95:EF:AC:11:84:A1:A4:B3:21:D3
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       08BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number:          08A8
Signing time:             Sat 26 Apr 2025 20:18:42 +0000
Manifest this update:     Sat 26 Apr 2025 20:18:41 +0000
Manifest next update:     Sat 03 May 2025 20:18:41 +0000
Files and hashes:         1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: E/4SCRj1qhMxIl7jb82fiFwYxj7urDVV/WnTF9iLpNM=)
                          2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: ejgjifoiJDZJ+gWsoAobC1JoVa6W0Im+MVj8NKJ7EYw=)
                          3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: 5yaZ6S1Dp8sDk+BVEX55LZpSEffc1QPyVJT4ZIYCENM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Apr 26 20:18:41 2025 GMT
            Not After : May  3 20:18:41 2025 GMT
        Subject: CN=680d3fa1-0db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:a2:a0:0e:c0:d0:62:3f:6a:66:1e:be:73:
                    71:f2:1b:48:f7:ef:1c:76:6e:52:77:c9:bc:b0:04:
                    3f:e2:6b:cb:18:13:39:d2:4f:fe:7a:e8:f8:94:36:
                    dd:0b:55:2f:d7:eb:0f:01:a7:c6:de:c2:ed:49:a9:
                    a0:05:e5:fa:a9:f5:18:a6:53:17:99:2f:35:1d:f5:
                    6d:d1:98:70:f7:88:8d:29:61:64:7a:ec:8f:65:5c:
                    7e:97:91:0e:70:58:8c:ae:d2:8c:9e:46:bf:36:27:
                    7b:20:5c:d1:6f:9a:0c:47:61:0e:19:f3:8b:bc:26:
                    9d:4f:0f:25:00:cb:a5:6a:b7:f7:f5:31:24:e1:c3:
                    c2:30:73:95:e1:fb:5a:5b:5b:50:6b:e0:47:6a:74:
                    cd:83:50:21:ba:8d:b5:ef:45:9f:3b:db:09:82:3f:
                    cf:ca:38:55:42:d7:04:13:2b:19:1c:0f:05:e2:7e:
                    b7:2d:dc:07:93:dd:ee:fe:bf:21:9b:2f:5b:aa:84:
                    db:a5:c3:ef:41:86:88:5b:a8:cd:fb:f6:bb:d7:ea:
                    a9:19:bf:ae:69:53:43:c6:10:ec:a2:7c:4f:21:fa:
                    82:dd:5a:c2:0e:00:a7:06:c3:13:04:eb:38:ae:c7:
                    59:67:c5:3b:fd:2c:52:44:57:cb:9a:37:b7:dd:f3:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:68:0D:EE:68:28:CF:4C:51:95:EF:AC:11:84:A1:A4:B3:21:D3
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:12:81:6b:35:10:e2:cb:a3:4a:f4:37:e0:f9:aa:f8:01:57:
         a3:68:f4:fb:27:24:76:71:6a:91:ff:62:a8:30:fa:09:f4:83:
         48:11:62:36:4d:f8:20:e2:37:df:68:14:3f:31:4c:1c:45:6f:
         50:1e:f6:4d:83:e5:27:02:52:8b:9a:1f:f9:3a:1a:2e:b2:99:
         fd:15:37:67:33:94:10:85:d8:1a:77:64:13:a8:a4:12:55:34:
         9f:f9:eb:83:b8:fe:77:08:2e:05:0e:2e:a0:03:4b:cb:45:3f:
         b8:9e:af:6a:af:34:9a:d0:5d:d0:3f:0b:79:2f:e7:38:a6:d8:
         ec:23:f5:45:a6:b8:72:2c:6a:3a:0f:c4:df:e5:93:5d:93:90:
         6b:94:20:c8:ec:da:4d:94:c2:7a:38:4d:0f:89:e4:27:26:23:
         ae:a3:16:05:d7:8c:8a:b6:b2:c2:c3:ec:dc:0c:13:e1:a9:57:
         21:bc:a2:7e:eb:eb:d4:6a:8b:72:11:65:de:19:7f:ce:8c:f3:
         14:e5:bf:74:49:73:90:17:c1:7e:21:de:ff:fd:d5:4b:ce:37:
         9e:b2:aa:93:6b:cd:2f:fe:a8:a6:ca:ed:9e:32:86:2b:c6:30:
         d6:4c:3f:84:01:35:6b:34:08:45:a0:01:22:11:26:90:77:b0:
         b3:95:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:53 2025 by rpki-client on console.sobornost.net