Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
File:                     1ZVULlIPSK9153kD6majnGTB0KM.mft (raw, json)
Hash identifier:          fG0kVdk+3YJoFpGfgwJQGeD32oGKmyR53QE5u1JhQYs=
Subject key identifier:   B6:EF:E3:92:C0:03:12:13:89:FA:24:ED:B1:91:2B:B8:4C:5D:E3:A9
Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
Certificate issuer:       /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
Manifest number:          012B
Signing time:             Mon 11 Aug 2025 04:46:17 +0000
Manifest this update:     Mon 11 Aug 2025 04:46:16 +0000
Manifest next update:     Mon 18 Aug 2025 04:46:16 +0000
Files and hashes:         1: 1ZVULlIPSK9153kD6majnGTB0KM.crl (hash: tdzkou+4hc2MewiimmVCcD+AO7+kCOcw+3+sUO9nXmc=)
                          2: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (hash: 80qu5haW6721xx7xV/uutyDDcTxrv0bPQaiLvhProi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl
                          rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175866, serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
        Validity
            Not Before: Aug 11 04:46:16 2025 GMT
            Not After : Aug 18 04:46:16 2025 GMT
        Subject: CN=68997599-0c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:6a:a2:af:8f:7c:aa:74:a1:64:04:2b:86:
                    d8:70:57:fa:47:c5:1e:8d:13:ca:8c:97:cc:49:06:
                    6c:df:dd:5b:75:ae:14:7f:1a:c0:dc:8b:92:d7:a6:
                    6e:fa:18:6a:64:bf:6d:a6:47:75:62:d7:9b:20:52:
                    09:59:ef:ce:49:94:ce:e7:f6:df:54:4f:28:6c:be:
                    04:99:f9:2e:08:d3:1d:be:ae:04:5f:d6:c2:f7:d5:
                    e6:3b:8a:2e:f5:2f:2f:47:34:7a:67:5b:5b:08:5e:
                    eb:8b:fe:68:89:81:5c:e5:88:8e:09:6c:f3:12:c7:
                    67:eb:b8:b6:14:2a:85:f8:d8:ed:06:7b:84:f9:90:
                    1d:b3:12:80:0c:69:fc:85:a9:22:08:94:7f:27:44:
                    ca:5f:ae:9d:12:9d:38:a7:a1:70:c4:4a:d2:ca:6c:
                    6b:bb:20:83:09:ed:82:7e:57:ca:ae:86:e7:16:38:
                    c0:ad:5d:ca:22:07:bb:4f:79:de:2c:64:48:b4:7f:
                    14:23:42:12:cb:8b:1d:9a:5e:15:a2:93:3d:17:cb:
                    c7:96:0e:01:87:34:41:df:be:3e:6d:47:1a:58:43:
                    43:94:4b:4b:b4:53:8a:2d:25:43:44:4c:de:ac:c6:
                    f8:59:ac:e6:58:55:35:0c:18:bc:1b:65:56:1a:59:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EF:E3:92:C0:03:12:13:89:FA:24:ED:B1:91:2B:B8:4C:5D:E3:A9
            X509v3 Authority Key Identifier:
                keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:17:5a:ac:e9:42:33:8d:0f:6c:ac:3d:d6:24:4a:78:3e:
         75:a5:11:7c:68:b0:ff:d2:96:41:df:0e:a9:53:a4:93:68:9b:
         1b:3f:d3:4e:b4:b1:f6:b6:42:c5:ea:77:08:53:d5:bb:5a:31:
         ac:9d:a4:70:63:f1:92:32:75:df:5b:a0:ae:c8:72:72:e1:3a:
         6e:d0:35:61:6a:66:79:2b:60:81:a9:ae:5b:19:b5:1c:57:4f:
         bc:74:82:54:1e:07:d3:3a:55:69:ec:e3:06:65:9f:45:30:a8:
         bf:76:98:ce:43:8f:dd:36:f7:95:27:72:bb:46:cd:0b:ec:1f:
         38:d0:b8:a1:84:f1:5f:78:74:6f:7d:6c:8e:ba:11:11:c4:f0:
         22:c2:30:f3:0b:b3:76:49:c7:bb:d8:51:9c:4b:6d:d4:ab:9b:
         89:c2:b9:ac:c8:7c:af:cf:ab:62:63:13:81:c9:89:3d:c0:0c:
         95:b2:c0:9b:d6:26:47:4c:5d:17:21:5f:cd:38:7e:9b:fd:af:
         b5:1b:00:c4:bc:1d:70:51:1c:71:41:96:e7:67:6c:4c:d8:49:
         22:6a:b5:af:93:45:32:ef:a1:f1:81:00:a9:32:0a:3f:ec:3c:
         be:49:5b:1b:2d:73:01:0b:3a:1e:13:c0:bb:fe:f6:d0:a0:7c:
         83:9f:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:05 2025 by rpki-client