Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
File:                     znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json)
Hash identifier:          B+hkNN8FEd/tzl7hsmBSD2i7Oqq1R+Y90UxdfKDpRj0=
Subject key identifier:   D8:9B:63:72:49:36:B4:F0:46:90:C8:29:E5:1B:8D:A1:27:18:C3:9B
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Certificate issuer:       /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
Manifest number:          0828
Signing time:             Sat 14 Jun 2025 20:39:41 +0000
Manifest this update:     Sat 14 Jun 2025 20:39:41 +0000
Manifest next update:     Sat 21 Jun 2025 20:39:41 +0000
Files and hashes:         1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: KSI84XLBzeIzNklnxJ78g682LMu6sx2foMpRL7TKK+M=)
                          2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: V9wdh8jyKUELoyH3ltxRaciIlStsT6ht66mAyTIa1HI=)
                          3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Fa6SdUbTPUudXOpSSwXnBEDK9cTtldS1jBd7HoHcy+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
                          rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
        Validity
            Not Before: Jun 14 20:39:41 2025 GMT
            Not After : Jun 21 20:39:41 2025 GMT
        Subject: CN=684dde0d-a5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:70:b5:30:cf:5d:a5:4a:b8:d6:72:c9:95:
                    76:a4:35:72:bc:30:ff:0b:8f:20:6a:5c:58:87:78:
                    10:c7:9d:47:4b:a1:d5:35:b5:86:27:d9:ba:9a:ea:
                    b4:96:d7:f4:48:f7:5e:e5:0e:80:d6:bb:a6:3f:04:
                    77:86:b7:4a:ee:7d:98:61:b4:17:ec:2d:ee:cf:ee:
                    88:cb:3b:30:17:1a:9a:5c:77:e0:fe:0c:2c:84:10:
                    a8:6e:2f:ee:44:50:72:76:32:ba:3c:80:24:f7:16:
                    16:d4:c1:56:ac:89:d7:27:57:69:5d:e6:c4:87:a6:
                    f2:93:58:4c:1a:4a:73:70:d4:ed:52:02:71:17:51:
                    b6:8a:54:e1:49:c6:b2:fe:72:6a:87:c2:c6:98:95:
                    90:80:0e:32:41:b0:ed:1f:06:08:9c:9b:24:18:f4:
                    23:40:06:94:12:df:a3:ae:cf:1b:65:a3:3a:2f:b4:
                    5d:e5:74:63:85:0f:08:9b:fc:6d:84:52:2f:1c:f7:
                    11:25:91:55:d3:45:ca:38:40:77:97:70:13:fb:9c:
                    05:9a:97:fc:83:1a:c9:5a:e4:e8:99:cb:38:4e:7d:
                    2f:ad:62:1d:78:be:99:01:a6:f9:81:83:b8:69:f4:
                    29:75:a7:ec:6e:16:df:fb:01:4a:7b:83:f3:47:36:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9B:63:72:49:36:B4:F0:46:90:C8:29:E5:1B:8D:A1:27:18:C3:9B
            X509v3 Authority Key Identifier:
                keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:5d:31:7f:f2:d3:f1:3e:85:0c:21:77:cb:4b:34:a6:07:
         00:db:13:99:23:0e:59:fc:9d:2c:50:a7:7f:b2:2a:52:8e:e5:
         a6:37:b1:ec:44:7e:a9:25:69:c3:40:61:c6:d3:fa:75:e1:4c:
         9f:57:f1:56:e5:49:b5:45:d2:e5:48:c8:1a:f8:0a:37:6d:b0:
         db:e9:98:fc:4e:31:87:6e:22:c0:eb:69:71:85:36:80:60:55:
         d3:0d:86:b2:39:9b:47:34:a1:c1:91:fd:b2:99:97:24:60:73:
         25:21:3d:86:95:db:1a:45:f6:f5:b1:8d:7f:fb:9e:35:4e:4d:
         82:11:dc:b9:4f:48:f2:18:8f:c7:b2:66:62:be:4f:26:99:ca:
         5a:1a:83:04:b8:96:a1:4b:4c:d2:e2:52:5c:f6:3e:b3:3b:0d:
         e2:82:ad:19:1a:f9:b0:43:4a:c7:ad:10:8f:e1:67:91:58:40:
         de:b6:c8:f3:fa:f2:fa:7f:b2:2b:3c:67:ed:65:91:ad:6a:a6:
         58:b5:1f:31:9e:fd:87:e2:43:99:f5:60:6b:2c:f3:a3:60:03:
         0c:28:ef:fd:73:bc:2f:0a:62:78:74:a7:f4:0a:92:e5:53:dc:
         88:91:bd:eb:49:36:f0:a3:20:71:0a:fe:5b:eb:65:b5:c3:77:
         9a:98:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:17 2025 by rpki-client