Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File:                     zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier:          PnxsIyX5qfJ/iAe7ntMn/pCBJYezWNaBfrTCadYZPxE=
Subject key identifier:   52:96:30:64:AA:79:65:45:34:FB:EA:A6:E2:0A:6D:83:4E:EE:14:EC
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number:          018D
Signing time:             Fri 13 Jun 2025 02:41:23 +0000
Manifest this update:     Fri 13 Jun 2025 02:41:22 +0000
Manifest next update:     Fri 20 Jun 2025 02:41:22 +0000
Files and hashes:         1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: URrFa6/jrNUDSx09cvV4LU3tboeUxid+QAVmqciBxjQ=)
                          2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=)
                          3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=)
                          4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=)
                          5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=)
                          6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun 13 02:41:22 2025 GMT
            Not After : Jun 20 02:41:22 2025 GMT
        Subject: CN=684b8fd3-4c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:7d:c1:8e:d3:c1:53:84:3d:6e:ae:74:2c:
                    93:b2:30:1d:e0:b0:af:4a:e5:39:42:92:24:23:ea:
                    91:8a:9d:ca:48:de:93:cd:f4:c5:3b:5d:cd:6d:22:
                    fd:94:3f:f8:5b:7f:39:f3:ab:5f:9c:cc:aa:6f:ac:
                    24:10:0d:fd:8a:12:d5:ad:e1:9a:2b:d4:c4:e7:94:
                    e4:9f:7b:60:cc:c5:43:3b:be:b7:72:30:98:b3:18:
                    fc:00:f2:fd:05:a7:7b:06:5e:c1:a5:12:29:0a:72:
                    c7:34:e9:2d:a9:fd:94:b0:7f:05:4d:08:79:47:94:
                    62:77:62:fd:19:0c:d2:2c:a1:b5:8a:f5:e9:ea:93:
                    69:cd:8d:2e:d2:66:02:32:87:e2:ce:02:cf:6a:6b:
                    27:5a:8e:c4:a9:10:c8:46:3b:7c:6c:9b:3a:84:38:
                    45:96:83:bc:33:51:68:97:c5:4c:58:d4:70:83:2f:
                    ac:e1:89:e3:09:3e:ee:93:0f:62:cb:31:b7:ac:27:
                    79:e2:a9:ed:c8:80:ee:01:55:40:5a:2b:14:e0:62:
                    83:26:79:48:e0:aa:e3:9f:a5:20:c8:e0:c9:71:66:
                    45:3b:41:fb:0e:4b:00:1a:3b:70:64:af:4b:8f:bd:
                    94:91:36:20:0b:02:e7:61:f0:ca:a4:71:14:0f:8a:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:30:64:AA:79:65:45:34:FB:EA:A6:E2:0A:6D:83:4E:EE:14:EC
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:3d:3a:b2:b6:98:80:09:15:ba:c3:04:50:e4:56:86:34:06:
         71:7f:4a:46:c8:9b:e9:25:b3:b2:09:2f:5d:95:0a:4c:65:10:
         89:40:36:c4:1f:b8:2d:c2:4b:ef:ab:a3:4e:ba:7b:81:70:e5:
         c6:fb:65:03:ee:ff:89:d3:d1:a7:b1:8a:cd:cf:a2:e4:f4:28:
         e3:f4:c3:a3:fb:88:9b:a8:ec:f7:7d:03:c1:6c:64:84:07:a1:
         f6:1e:84:1f:9f:56:df:da:4a:0a:ae:bc:fb:c0:1f:8d:d3:98:
         30:a8:6b:4c:dd:da:37:f5:4b:77:1e:a7:a5:16:4e:b6:55:6b:
         23:e6:76:9a:94:ad:41:2f:f7:f0:d8:20:b8:1d:fa:a5:ca:f3:
         c5:1b:e4:ed:28:5d:e6:4f:7c:22:92:e7:73:3d:cf:61:c4:71:
         76:2e:0d:75:df:89:0d:85:dc:28:95:26:c5:e8:5e:35:c9:e6:
         a2:87:7e:3f:a6:12:63:11:b7:56:e4:f6:88:2f:8d:c4:9e:33:
         0c:7b:84:86:c4:63:46:a1:6b:93:b7:68:18:91:07:31:7a:ba:
         11:67:de:eb:f5:ea:9c:fb:e5:fd:c9:61:32:3b:a2:8d:18:c0:
         7e:56:b5:ef:fc:56:b1:66:ab:d5:31:79:fc:db:83:84:af:35:
         ef:95:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:22:20 2025 by rpki-client