Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File:                     z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier:          v6I+uojPPeAhFozfEshU7PtgezvW72bQjpaHBPpX2RY=
Subject key identifier:   D9:F3:F5:79:01:95:32:B9:63:3D:7D:06:1C:E5:DD:44:EF:1E:D5:67
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer:       /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number:          0119
Signing time:             Mon 11 Aug 2025 04:57:48 +0000
Manifest this update:     Mon 11 Aug 2025 04:57:48 +0000
Manifest next update:     Mon 18 Aug 2025 04:57:48 +0000
Files and hashes:         1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: gtQGyipOyE5aRLD3/y0XFefNdIYnNy9OowssBPv2FpY=)
                          2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
        Validity
            Not Before: Aug 11 04:57:48 2025 GMT
            Not After : Aug 18 04:57:48 2025 GMT
        Subject: CN=6899784c-713d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:07:5b:19:9a:30:a1:25:4e:6d:55:fc:ed:
                    f0:38:9a:24:66:96:de:b3:75:c8:cf:ec:c2:91:22:
                    00:3a:b2:3e:12:f8:ec:83:20:59:b1:5a:18:0d:30:
                    b4:77:74:18:68:69:8f:2f:53:65:a8:fd:78:d9:8f:
                    ee:54:ae:77:16:e7:aa:b6:83:49:0e:18:f6:b5:3c:
                    5e:3b:1a:32:df:0f:2a:9b:12:ad:55:fa:a7:24:43:
                    ff:0b:8a:ee:bf:39:2e:5a:51:c7:e8:9a:6e:15:bd:
                    28:0b:9d:e3:c9:05:28:dd:ae:5f:0c:e8:a6:9f:35:
                    86:4a:f5:dd:4e:96:16:24:03:4e:95:54:6e:a1:15:
                    6c:78:b3:ee:b7:4b:62:f9:fc:14:49:f3:87:47:e3:
                    12:f2:d3:50:fa:83:e7:96:49:aa:8b:10:b2:6b:38:
                    3d:98:79:f0:37:1e:1e:61:f1:6f:39:10:5d:3d:1b:
                    a4:47:94:45:0c:2d:3c:58:30:0f:ea:78:a0:99:47:
                    eb:33:26:01:d3:b6:3c:6e:20:72:ce:b0:54:79:9a:
                    b7:f1:16:da:1d:e7:2e:04:ec:a3:55:5e:d6:47:71:
                    1d:9c:1d:d7:9a:14:ef:08:08:6c:01:14:01:d0:24:
                    20:80:04:ab:33:24:b9:6a:e0:df:51:ba:e4:c6:81:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F3:F5:79:01:95:32:B9:63:3D:7D:06:1C:E5:DD:44:EF:1E:D5:67
            X509v3 Authority Key Identifier:
                keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6f:fc:e6:91:94:08:72:ee:9b:57:2b:6b:a8:93:1f:5a:63:
         55:f4:37:70:3c:3a:50:a6:c0:32:b1:51:5e:cf:72:61:b0:c9:
         af:76:b0:1f:b7:f4:f2:94:08:f3:dd:87:24:39:ad:be:31:4a:
         a2:a6:20:5f:36:86:e8:d8:3c:6c:08:13:e3:d8:f9:f2:89:e4:
         f4:19:c6:3b:72:69:75:16:13:38:62:de:88:b8:8e:fb:da:68:
         85:74:00:2e:50:b1:5f:5e:95:1b:67:bf:93:15:21:6e:ef:6b:
         9b:7f:16:77:98:1a:c2:30:15:7b:ec:0d:c4:f5:b0:e6:30:07:
         d2:52:9c:d1:38:66:49:ae:0c:31:27:1b:72:0d:1c:af:da:a3:
         70:95:8e:f0:1b:70:7c:c2:04:f2:f7:8c:f3:72:78:82:19:55:
         67:fb:05:d4:b8:07:b5:5b:85:99:ee:ed:10:45:d6:bf:e6:55:
         49:99:c1:3b:4d:1e:71:f4:5a:16:84:a1:ca:42:43:48:86:c8:
         c2:a6:a0:89:b6:00:7a:24:b6:4c:bf:fd:74:b6:a9:7e:04:df:
         44:22:9c:2c:e2:d3:29:29:e9:87:3b:f2:b0:13:ce:5e:44:3e:
         90:4d:de:e6:5e:9a:40:88:d6:fb:f4:53:e3:0c:3d:fd:aa:6b:
         cd:07:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:00:55 2025 by rpki-client