Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          dnNKIBlFaKso5cFke5OxGhgt/BL4Hz2ZuRb83YqnRQw=
Subject key identifier:   24:91:12:85:9D:12:50:36:47:35:4E:E8:0F:7B:75:3D:8E:7F:48:8B
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0C6D
Signing time:             Sun 10 Aug 2025 18:21:59 +0000
Manifest this update:     Sun 10 Aug 2025 18:21:58 +0000
Manifest next update:     Sun 17 Aug 2025 18:21:58 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: rMgyvCZpcIwaBhUEkV0MVWphx7WeY+nq5ADwwmS5EjU=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: Aug 10 18:21:58 2025 GMT
            Not After : Aug 17 18:21:58 2025 GMT
        Subject: CN=6898e346-af4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:02:6f:83:07:53:ba:47:d7:9a:e4:49:3a:
                    a8:e0:14:c8:ee:ea:d4:a9:2c:9e:f7:2b:c2:98:1c:
                    92:bb:ff:fd:80:09:a2:2e:80:32:88:d3:3c:0d:ed:
                    ca:dd:aa:d2:41:8f:fd:c6:60:36:12:9a:d9:30:7c:
                    e4:e6:91:99:82:30:56:3f:ef:1c:66:a2:d7:5c:83:
                    9e:0f:c8:2f:82:8b:08:92:7f:7f:1f:fa:47:33:13:
                    2c:78:75:34:50:e3:91:c5:91:a9:47:40:d9:b4:ad:
                    b9:a8:b6:a2:e6:56:12:a6:29:ae:d2:cf:b7:5b:95:
                    ca:70:74:fd:22:90:f9:af:57:3e:64:d8:31:ca:d2:
                    ba:85:38:82:b5:78:6b:00:8d:da:70:57:80:f1:20:
                    f4:be:74:74:3d:ee:42:c6:dc:bb:60:c8:88:f6:f5:
                    95:db:95:12:02:83:ce:0b:f9:a6:38:c3:27:39:d0:
                    7e:a7:20:21:71:7b:db:7d:04:93:57:9c:d5:81:df:
                    06:32:b0:bb:e2:70:21:9f:ab:80:35:3a:1b:a9:84:
                    be:fe:a8:cf:23:b6:a5:cd:a2:1d:72:7a:ae:c7:1b:
                    bb:2c:10:48:6d:0d:e2:df:b3:4c:42:2a:1e:75:a3:
                    7c:9c:68:1a:e2:2c:96:7e:25:7b:dc:34:6d:4f:39:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:91:12:85:9D:12:50:36:47:35:4E:E8:0F:7B:75:3D:8E:7F:48:8B
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5d:fe:8f:b1:df:b5:b7:8a:b3:9c:52:24:0e:74:ff:ed:a5:
         8a:79:8b:15:77:8a:7e:04:e0:e3:fc:07:d8:2e:d4:4e:c8:21:
         fb:84:71:3b:bf:df:6a:1b:f1:24:5f:dc:e5:b0:23:d7:de:c5:
         3b:c6:24:8e:95:1e:74:f1:b2:d7:e7:9b:09:51:bc:95:23:a6:
         27:dd:a1:02:06:44:50:5c:6d:c4:75:3e:3f:a5:1d:21:db:31:
         0a:5a:78:c2:3e:ca:25:e5:75:40:16:7a:d7:15:35:e0:64:51:
         d1:8b:a0:31:c1:f2:6b:ed:5e:8a:df:7c:43:53:b4:13:ad:47:
         86:7f:81:c4:9c:4b:60:b7:bd:5d:97:89:55:dd:c5:af:8c:39:
         f5:b1:2a:69:23:2d:0c:9a:de:9d:8f:6f:86:45:64:a9:88:5a:
         5e:00:1b:85:6e:32:7f:ba:3a:d0:ef:3f:72:46:a0:25:6b:a7:
         64:c4:e2:4a:14:db:39:ac:24:d4:80:e9:3b:0a:d8:4f:23:6b:
         2e:b1:87:94:75:64:7b:f1:18:7c:9e:49:7a:74:ff:59:a5:a0:
         7b:bd:83:d0:08:b5:d7:47:82:1f:d9:fe:bb:97:7a:74:9e:1f:
         e0:41:7e:72:80:b7:f1:60:a1:66:df:e5:71:7d:2f:c5:94:0c:
         6c:18:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:04 2025 by rpki-client