Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
File:                     zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json)
Hash identifier:          WtJRAFl1MqNAXTPe8TQjtK71SENfxTzyvqpkFNbBYPw=
Subject key identifier:   29:E3:8E:6F:EE:8B:B3:4D:92:81:B6:E2:97:FA:86:F0:03:EC:50:E7
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Certificate issuer:       /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
Manifest number:          0449
Signing time:             Sun 03 Aug 2025 00:50:53 +0000
Manifest this update:     Sun 03 Aug 2025 00:50:52 +0000
Manifest next update:     Sun 10 Aug 2025 00:50:52 +0000
Files and hashes:         1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: 3znzSSaguzbFDFgvA2sG8Oai2IP2hpQJyjxsZXcZnZs=)
                          2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 00:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
        Validity
            Not Before: Aug  3 00:50:52 2025 GMT
            Not After : Aug 10 00:50:52 2025 GMT
        Subject: CN=688eb26d-7c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:ab:29:54:7c:32:5b:7e:ef:9a:10:fa:de:
                    b2:ef:05:65:9a:61:43:a7:fc:95:c3:3d:e0:57:14:
                    85:b3:33:8e:13:bc:40:30:f2:05:d4:cc:20:3b:be:
                    4f:aa:74:b7:30:c3:d3:10:78:09:dd:93:6e:c9:4c:
                    8a:d4:43:eb:c2:41:ec:7d:32:a4:51:40:b0:ac:3a:
                    c9:95:54:26:45:bf:7a:4c:fa:93:fb:27:13:bb:10:
                    b5:d3:fb:5b:51:cb:a3:99:55:a2:47:5c:28:c4:03:
                    09:76:36:7e:cb:88:a0:27:5c:25:aa:00:41:3e:67:
                    c6:99:8f:28:67:4f:60:dd:d4:c6:b6:22:41:73:59:
                    06:69:43:03:c9:a7:e1:47:dc:e7:d0:01:d4:d3:c6:
                    78:fe:9a:ed:b9:77:1d:63:55:90:4c:a0:4d:bb:97:
                    22:58:c9:68:c2:f5:5d:59:70:c5:a4:ed:e6:c7:af:
                    50:25:53:00:ba:c1:69:b6:3e:f6:8e:28:59:b3:11:
                    e1:d9:35:3c:9a:10:c2:e6:5c:52:3e:1a:0e:7f:4b:
                    53:45:1c:4a:f5:02:e4:9d:03:f6:d3:03:dd:fa:22:
                    91:c4:03:94:5e:0b:cd:df:ae:a0:81:de:6a:0c:2d:
                    b4:43:00:35:e0:66:0d:c6:df:8d:2e:b3:84:9d:6c:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E3:8E:6F:EE:8B:B3:4D:92:81:B6:E2:97:FA:86:F0:03:EC:50:E7
            X509v3 Authority Key Identifier:
                keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:25:ac:05:2e:ec:8d:87:21:30:a6:cf:4c:3c:44:88:c0:
         1e:45:87:9f:91:b2:ef:a3:df:4a:8b:12:39:70:22:58:7b:8d:
         23:63:99:6f:cb:b4:3e:2e:54:55:16:6f:e7:56:bb:43:e0:d5:
         b2:c3:6c:22:8b:d1:88:27:2b:d4:54:a5:a1:86:a4:29:ce:04:
         de:a5:ba:f8:40:d6:1d:69:a0:43:5e:d8:bd:03:8e:91:ff:2d:
         3a:01:60:8a:5a:f0:db:75:bb:c4:bc:69:7d:e2:e9:b0:18:fd:
         80:36:3c:3d:3d:58:16:94:e7:53:57:1d:a2:ba:f2:4c:d9:d7:
         e8:ee:43:f8:e2:00:ff:10:16:14:ab:ea:70:95:99:50:19:b7:
         2d:0a:fb:30:d0:17:37:2b:1f:20:08:f1:ea:19:f8:68:01:1b:
         69:09:a4:d1:99:18:75:97:c1:fc:1a:30:77:12:50:a5:46:dc:
         c8:b4:9a:8a:79:d2:44:1d:d8:0d:7d:c7:c9:70:bc:39:0a:9c:
         fd:7b:32:dd:3f:83:02:9d:9a:61:bf:a4:34:95:08:ad:70:c9:
         06:17:07:83:d4:6c:0d:c5:36:2a:0d:0b:41:86:16:49:72:a0:
         b8:35:5f:fb:31:84:f8:dc:6d:d4:e8:f1:d3:d5:29:8f:f3:f0:
         2a:c9:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:21 2025 by rpki-client