Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File:                     ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier:          zf+RLIQ3/4yKwwc2uvobdnUOV7DsSB94WbtqagcTDg4=
Subject key identifier:   C5:AC:4D:A4:05:C5:62:F1:2C:7D:13:A7:C5:25:85:E8:EB:0F:67:65
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer:       /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial:       05D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number:          05CC
Signing time:             Thu 24 Apr 2025 22:48:36 +0000
Manifest this update:     Thu 24 Apr 2025 22:48:35 +0000
Manifest next update:     Thu 01 May 2025 22:48:35 +0000
Files and hashes:         1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: 5wMSsrQzPZAvUJnid0oAIfZnnf096FbXqIEGuvTdF9g=)
                          2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
                          rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
        Validity
            Not Before: Apr 24 22:48:35 2025 GMT
            Not After : May  1 22:48:35 2025 GMT
        Subject: CN=680abfc4-badf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:01:19:69:74:ad:7e:be:22:af:43:eb:28:
                    ba:ac:6d:f4:e7:7f:e5:f9:3d:e5:77:d7:af:18:1d:
                    48:94:5c:49:e2:40:58:f6:64:b5:1a:f5:fd:88:3f:
                    7b:98:71:4a:87:e3:aa:7b:32:5f:e7:00:1d:62:79:
                    54:84:2e:a1:8c:52:75:fd:85:b1:0d:33:a8:14:b6:
                    75:8d:d5:04:16:a1:c1:45:a7:eb:97:8b:e2:a0:b7:
                    4c:9d:f1:65:58:01:a3:71:38:96:f9:9b:b8:b0:64:
                    01:91:f5:c3:80:f3:bd:be:fe:c6:bd:2f:92:82:23:
                    3c:03:7c:d2:d6:19:47:90:41:eb:40:4b:99:e6:06:
                    95:04:83:2d:f5:86:b8:ce:e9:02:cb:97:df:2c:13:
                    01:02:a2:44:9d:c1:ac:ce:28:20:14:ab:70:db:7e:
                    62:88:9a:05:24:e8:19:a0:f1:b6:83:9b:10:00:23:
                    79:0d:ec:4a:6f:17:c5:17:37:ce:57:81:46:1c:75:
                    83:24:d4:05:23:7b:9a:a2:4b:d3:4b:80:4c:28:0e:
                    69:70:92:be:d4:c7:9d:1d:9c:5a:3b:ae:90:74:85:
                    2a:77:1a:e0:a3:d3:87:10:80:e9:28:44:83:fa:a4:
                    cb:6e:0a:f3:4b:0e:c9:eb:24:a7:f6:1e:23:8f:69:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:4D:A4:05:C5:62:F1:2C:7D:13:A7:C5:25:85:E8:EB:0F:67:65
            X509v3 Authority Key Identifier:
                keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:e3:17:44:81:09:2b:58:ba:d8:87:ca:0d:8e:da:4e:33:
         2d:62:a7:1a:b0:a0:a6:7b:a1:c4:c2:d1:86:8a:97:63:5b:a2:
         42:97:26:9e:5b:11:32:17:f1:20:87:42:3c:90:15:67:57:37:
         fe:98:35:72:5d:b0:ff:e3:03:3a:33:ae:72:d4:61:45:83:d7:
         41:74:ff:45:4e:d8:8f:13:71:e9:b6:98:06:39:ae:c3:93:15:
         a6:96:70:80:5b:fb:fe:cd:ae:e8:b6:17:f1:e6:6b:65:b7:f3:
         bb:e0:ac:7e:9d:06:a6:74:4d:74:49:2e:3a:4f:75:db:d0:07:
         24:e7:6d:44:b4:c8:42:0f:84:1d:3f:72:3b:2d:da:c2:1f:70:
         7b:ae:29:4e:d0:1d:cd:3a:e5:bb:3d:d7:9f:c5:89:8a:85:5b:
         6d:7b:a3:4c:90:9e:bb:70:e2:25:a1:36:b5:50:63:59:49:5f:
         6f:ad:f6:61:2a:b3:f0:26:bc:33:4d:72:d5:6f:5f:35:be:d9:
         05:4c:52:2a:b4:3c:02:0a:47:41:a6:56:3f:3b:7d:88:01:47:
         24:f5:d8:a6:7e:7f:d3:17:2f:fb:90:47:ac:89:60:af:f3:f4:
         88:96:ab:83:69:35:94:87:f1:4d:c5:5f:67:d1:52:01:54:ad:
         8d:8a:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:43 2025 by rpki-client