Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          pvlQIbUtJyo+bPHieujCdLOF+QRGRs6QtcYADfxXj6Q=
Subject key identifier:   24:A7:A5:18:8F:13:30:85:4F:A7:D8:94:A1:96:9D:D6:D6:C8:C8:1D
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          03B6
Signing time:             Sun 03 Aug 2025 01:15:15 +0000
Manifest this update:     Sun 03 Aug 2025 01:15:15 +0000
Manifest next update:     Sun 10 Aug 2025 01:15:15 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: aRv645qYXRK+iJnsOl1RGbIELTN2uxHqJNiBupEoCjY=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: Yw6khJ43zV0yhFLOubPvbZbVWU58is2F1BhtT8qiLaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
                          rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 01:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: Aug  3 01:15:15 2025 GMT
            Not After : Aug 10 01:15:15 2025 GMT
        Subject: CN=688eb823-f30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:ca:be:da:b3:5e:ed:74:e2:d7:3f:5e:11:
                    1e:d8:e7:f3:94:9a:ac:e1:9f:b3:34:77:8b:b7:19:
                    5f:c1:b7:3b:9f:e2:e9:a6:6a:87:ed:27:6b:70:80:
                    da:7e:6b:47:40:03:c9:29:04:0b:bd:84:4d:af:9c:
                    ec:fc:2b:f6:3b:fc:07:b2:de:00:1a:41:d3:7b:e6:
                    a6:4a:08:0f:35:59:13:9b:67:19:ef:97:a9:4b:5b:
                    81:0a:9c:4f:cd:46:3c:02:8b:68:9c:7b:a4:ab:c4:
                    0e:bf:e1:f6:61:5d:44:b3:15:a4:ff:57:f1:0c:71:
                    c4:5a:ba:34:a9:f7:b3:10:f0:bd:3c:28:38:3d:c5:
                    54:d2:f0:d6:21:db:87:c0:48:53:a5:45:02:fe:eb:
                    62:33:44:d8:98:a3:95:88:fe:7a:2d:cd:ad:48:ec:
                    89:5f:65:a4:c4:06:94:07:4b:c6:1f:4f:44:19:ad:
                    f9:8d:28:da:76:0f:6c:19:56:3f:a1:42:c0:b6:fc:
                    fc:20:ce:fe:63:25:0d:5f:c7:63:0e:a6:d7:22:9f:
                    9f:82:34:46:40:7e:f1:2b:d1:e3:71:a9:24:30:a9:
                    8b:d7:86:6f:7c:c5:3b:ca:f5:87:62:1e:50:02:3e:
                    3a:2c:9c:f2:ca:34:77:2e:c9:46:2b:b9:7a:96:ae:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A7:A5:18:8F:13:30:85:4F:A7:D8:94:A1:96:9D:D6:D6:C8:C8:1D
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:b4:dd:7f:6d:db:f9:a7:24:61:f1:bc:32:7e:3f:20:4b:
         92:50:69:bd:eb:ee:6a:75:29:bd:21:3c:f2:0f:3c:32:cc:59:
         04:a8:1b:52:7c:64:0d:5f:33:49:b6:99:b4:cb:b3:85:42:8f:
         8d:24:48:a9:03:e2:e7:5e:75:82:cf:5b:e4:c6:71:44:3a:0a:
         bd:9c:41:f6:74:19:59:49:3b:cc:cd:6d:b7:be:0e:de:18:6f:
         bf:f6:9a:c6:5f:01:46:1e:fa:72:6f:b1:fd:d6:8c:5a:82:78:
         c2:60:2c:a4:1b:90:b9:ea:15:7a:f0:c9:97:08:71:9b:d4:1c:
         31:5f:f1:75:9d:3e:4b:46:bb:b6:4f:af:8c:f4:78:26:bc:73:
         6f:e6:12:a4:62:70:cd:ec:43:22:be:18:91:03:dd:b9:c1:69:
         8e:59:01:c9:74:32:06:95:c8:8c:b2:f5:9f:fd:74:de:de:9a:
         ea:c0:0f:dc:6a:b9:d6:99:3d:0c:50:1d:13:47:de:2e:23:06:
         50:ea:5a:33:0b:3d:7d:53:5f:f1:c7:19:a6:81:c9:65:f7:14:
         97:85:34:c4:d0:14:f4:ac:51:a0:7d:a5:3d:8f:92:87:9f:95:
         05:f8:39:54:f0:1e:90:1b:a5:af:50:d8:9d:2e:10:95:30:54:
         96:92:b3:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEN0MxMTAvBgNVBAUTKDY1NUIwNDI2RUEzNEIxOTc0NkVDMUQzQkRDQjFCMzc2
NzRERkExRUMwHhcNMjUwODAzMDExNTE1WhcNMjUwODEwMDExNTE1WjAYMRYwFAYD
VQQDEw02ODhlYjgyMy1mMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOLKvtqzXu104tc/XhEe2OfzlJqs4Z+zNHeLtxlfwbc7n+LppmqH7SdrcIDa
fmtHQAPJKQQLvYRNr5zs/Cv2O/wHst4AGkHTe+amSggPNVkTm2cZ75epS1uBCpxP
zUY8AotonHukq8QOv+H2YV1EsxWk/1fxDHHEWro0qfezEPC9PCg4PcVU0vDWIduH
wEhTpUUC/utiM0TYmKOViP56Lc2tSOyJX2WkxAaUB0vGH09EGa35jSjadg9sGVY/
oULAtvz8IM7+YyUNX8djDqbXIp+fgjRGQH7xK9HjcakkMKmL14ZvfMU7yvWHYh5Q
Aj46LJzyyjR3LslGK7l6lq4t8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSnpRiP
EzCFT6fYlKGWndbWyMgdMB8GA1UdIwQYMBaAFGVbBCbqNLGXRuwdO9yxs3Z036Hs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQ3Qy80QjVCQzcxQzlF
QUMxMUVDQTA2QkMxMEJDNEY5QUUwMi9aVnNFSnVvMHNaZEc3QjA3M0xHemRuVGZv
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWc0VKdW8wc1pkRzdCMDczTEd6ZG5UZm9ldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQ3Qy80QjVCQzcxQzlFQUMxMUVDQTA2QkMxMEJDNEY5QUUwMi9aVnNFSnVvMHNa
ZEc3QjA3M0xHemRuVGZvZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeq7Tdf23b+ackYfG8Mn4/IEuSUGm96+5qdSm9ITzyDzwyzFkEqBtS
fGQNXzNJtpm0y7OFQo+NJEipA+LnXnWCz1vkxnFEOgq9nEH2dBlZSTvMzW23vg7e
GG+/9prGXwFGHvpyb7H91oxagnjCYCykG5C56hV68MmXCHGb1BwxX/F1nT5LRru2
T6+M9HgmvHNv5hKkYnDN7EMivhiRA925wWmOWQHJdDIGlciMsvWf/XTe3prqwA/c
arnWmT0MUB0TR94uIwZQ6lozCz19U1/xxxmmgcll9xSXhTTE0BT0rFGgfaU9j5KH
n5UF+DlU8B6QG6WvUNidLhCVMFSWkrNE
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:43 2025 by rpki-client