Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File:                     sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier:          /wjJekhXwRjhjXtHmK8GnZ7WC2ydgabXUY+fJIxVvIM=
Subject key identifier:   E4:4F:6D:D0:E2:03:0B:54:13:A2:FA:94:72:DE:FE:9B:3B:71:4B:C0
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number:          0184
Signing time:             Mon 11 Aug 2025 03:44:08 +0000
Manifest this update:     Mon 11 Aug 2025 03:44:08 +0000
Manifest next update:     Mon 18 Aug 2025 03:44:08 +0000
Files and hashes:         1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: TtDKt62sOO1PQW80xIAVOEfCKtZnUWg6BKUk5UK+Gzk=)
                          2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: nABejWMWIKR8qcS8KhtXdqBPw2NE9lHrgwgK6ncqFFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
                          rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Aug 11 03:44:08 2025 GMT
            Not After : Aug 18 03:44:08 2025 GMT
        Subject: CN=68996708-6370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:78:bb:4b:6d:b5:fb:a4:c1:67:02:9c:95:
                    ba:8c:c6:9b:16:f5:32:9a:e0:ba:ce:2d:4e:5d:58:
                    76:43:fa:a8:e3:68:03:2e:9b:39:6b:62:1f:51:14:
                    a6:f2:95:42:a6:8a:74:c3:3c:94:63:2e:7a:eb:aa:
                    c1:36:4f:b4:ec:00:66:6a:b6:b5:ce:58:31:08:c8:
                    b8:23:0b:87:a6:94:92:9c:3d:99:fd:64:8a:78:cc:
                    50:43:ab:06:9b:7c:ee:27:13:25:aa:8b:a3:2a:05:
                    cb:fc:6f:21:62:76:5c:7e:64:57:a0:58:35:94:0e:
                    1c:fd:91:ad:e0:f6:56:ca:03:96:d6:71:dd:ea:4c:
                    b3:66:9e:47:4e:c1:ee:0a:13:54:4b:3f:84:6c:33:
                    3c:73:2c:57:39:c3:c5:f1:f0:9f:c7:33:60:8b:fc:
                    d1:15:0c:c1:2c:58:8f:96:52:f9:78:05:90:6a:ec:
                    ce:65:e2:f2:7f:58:ac:b2:24:da:3c:6b:4e:8c:a3:
                    a4:9c:41:78:af:42:43:19:e4:f7:11:87:05:51:a8:
                    32:56:4f:46:4f:7c:26:aa:78:f0:ae:ff:96:a4:67:
                    e8:f2:79:71:1a:e7:71:da:0d:61:71:85:ef:e5:92:
                    25:b1:40:53:9a:7d:40:ea:1f:74:f6:3c:f4:88:68:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:6D:D0:E2:03:0B:54:13:A2:FA:94:72:DE:FE:9B:3B:71:4B:C0
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:21:63:a0:db:79:db:f2:e7:19:56:9b:42:ec:55:92:85:3e:
         c3:c5:15:c7:7a:92:31:fd:3e:f1:8b:a4:e3:71:26:50:bd:bb:
         5b:4d:57:39:74:8e:36:5e:b1:18:16:00:c7:ff:0f:42:4e:8b:
         14:2f:0f:f8:08:11:65:7a:82:d7:f2:72:a9:69:83:06:4a:d3:
         ef:07:3c:06:ee:7a:40:91:d1:1e:dc:9d:9c:a4:97:22:9d:e8:
         9b:8d:46:c8:1b:ad:1a:08:7c:ec:dd:dc:8b:02:d2:03:71:0f:
         cc:f5:bd:ae:58:37:a2:b1:ef:1b:4b:dc:79:a1:e8:b0:c5:89:
         4d:1d:ce:65:b4:e8:eb:cc:1c:8c:47:22:d4:99:6f:03:1c:3d:
         b2:7a:57:ed:e6:eb:85:dd:41:1d:7a:28:83:24:26:d1:d3:cf:
         18:e0:7c:56:b0:d7:5e:82:74:49:3d:26:32:34:55:68:14:58:
         27:cd:48:ce:18:c5:e7:0e:fe:7c:c5:00:7c:a7:f8:ef:12:4d:
         7c:3e:8f:d3:30:85:87:fc:a1:15:2e:f4:d7:7f:09:93:25:5f:
         0d:39:8b:29:23:a2:50:b5:52:38:84:d7:3a:53:fe:ce:26:a6:
         dd:11:ea:a7:ea:63:0e:6b:c3:26:fe:c2:6e:1a:b2:2c:33:20:
         ff:09:f6:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RFREYxMTAvBgNVBAUTKEIxOTJBRDQ0NERFMUYyREU3NUJFQkExRUVGRDEyMkVF
Q0Y3RDc3Q0MwHhcNMjUwODExMDM0NDA4WhcNMjUwODE4MDM0NDA4WjAYMRYwFAYD
VQQDEw02ODk5NjcwOC02MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6mt4u0tttfukwWcCnJW6jMabFvUymuC6zi1OXVh2Q/qo42gDLps5a2IfURSm
8pVCpop0wzyUYy5666rBNk+07ABmara1zlgxCMi4IwuHppSSnD2Z/WSKeMxQQ6sG
m3zuJxMlqoujKgXL/G8hYnZcfmRXoFg1lA4c/ZGt4PZWygOW1nHd6kyzZp5HTsHu
ChNUSz+EbDM8cyxXOcPF8fCfxzNgi/zRFQzBLFiPllL5eAWQauzOZeLyf1issiTa
PGtOjKOknEF4r0JDGeT3EYcFUagyVk9GT3wmqnjwrv+WpGfo8nlxGudx2g1hcYXv
5ZIlsUBTmn1A6h909jz0iGiVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORPbdDi
AwtUE6L6lHLe/ps7cUvAMB8GA1UdIwQYMBaAFLGSrURN4fLedb66Hu/RIu7PfXfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREVERi9CMkQ2MDk5RTJC
MjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0NTF2cm9lNzlFaTdzOTlk
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NaS3RSRTNoOHQ1MXZyb2U3OUVpN3M5OWQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REVERi9CMkQ2MDk5RTJCMjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0
NTF2cm9lNzlFaTdzOTlkOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHIWOg23nb8ucZVptC7FWShT7DxRXHepIx/T7xi6TjcSZQvbtbTVc5
dI42XrEYFgDH/w9CTosULw/4CBFleoLX8nKpaYMGStPvBzwG7npAkdEe3J2cpJci
neibjUbIG60aCHzs3dyLAtIDcQ/M9b2uWDeise8bS9x5oeiwxYlNHc5ltOjrzByM
RyLUmW8DHD2yelft5uuF3UEdeiiDJCbR088Y4HxWsNdegnRJPSYyNFVoFFgnzUjO
GMXnDv58xQB8p/jvEk18Po/TMIWH/KEVLvTXfwmTJV8NOYspI6JQtVI4hNc6U/7O
JqbdEeqn6mMOa8Mm/sJuGrIsMyD/Cfal
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:24 2025 by rpki-client