Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          OVbnJOhn+yrgK4L2cnbKzP6bIvqjw8+0RoAusuI6c0U=
Subject key identifier:   57:07:FA:63:23:A0:74:C8:C9:E6:85:6C:3A:36:5C:C5:92:E2:A6:C1
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       04FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          04DF
Signing time:             Sat 09 Aug 2025 00:21:39 +0000
Manifest this update:     Sat 09 Aug 2025 00:21:39 +0000
Manifest next update:     Sat 16 Aug 2025 00:21:39 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: 2gq0/j7wBjreE2CI/wuT3G/nVVt2RZenAs2Xi6KaeF0=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Aug  9 00:21:39 2025 GMT
            Not After : Aug 16 00:21:39 2025 GMT
        Subject: CN=68969493-83aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:22:ab:30:e7:3a:c7:9d:75:9f:bd:98:d2:
                    78:b6:81:26:a5:b7:29:ab:6a:45:a7:37:a7:3c:67:
                    54:53:90:2c:67:54:5d:39:d9:f6:2d:dc:35:23:c8:
                    d6:57:27:d4:43:9f:a5:74:bf:dc:20:22:e2:c0:4c:
                    44:bf:85:cb:ab:cb:ec:01:71:53:41:e2:3c:90:87:
                    39:2b:69:7f:6e:73:78:9e:83:51:f3:bb:e6:a8:96:
                    50:d9:35:68:b4:c8:19:74:ba:b2:70:23:4d:b0:cd:
                    3c:47:ac:13:80:f6:16:51:03:f7:2f:e6:bc:38:c6:
                    12:16:0f:26:b0:4a:0f:56:11:34:7f:77:58:d9:ea:
                    ad:bc:ec:78:44:d2:d0:49:2b:e2:ff:76:06:69:ce:
                    0e:8a:40:b0:14:b0:31:6f:93:68:3e:67:2c:77:18:
                    ae:35:59:7f:52:59:ca:6b:90:f4:9e:33:80:ee:9c:
                    a9:ed:c8:5a:24:4d:03:0e:74:7f:3d:4d:0c:5d:08:
                    a7:a6:05:23:73:fc:68:0b:43:aa:77:f3:f5:8c:17:
                    9e:b1:77:30:49:6b:be:67:3a:e3:4e:db:f4:94:9b:
                    27:62:6d:07:60:72:9e:2d:ff:55:95:a1:74:ad:2b:
                    25:de:f2:55:8b:ac:9f:18:a2:a4:03:c8:4f:e5:1e:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:FA:63:23:A0:74:C8:C9:E6:85:6C:3A:36:5C:C5:92:E2:A6:C1
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:46:6e:70:62:c1:67:70:4b:4e:5f:8c:11:51:e7:60:d1:f6:
         2a:95:92:19:15:14:b9:01:4c:39:63:92:c9:e3:f1:e5:96:b1:
         3f:20:57:05:7a:83:c1:d0:64:46:73:49:64:cb:4d:0b:b3:84:
         ee:59:99:52:82:61:46:50:bb:55:23:15:59:96:0d:c9:84:45:
         42:35:a1:a2:fd:32:3d:19:57:b2:ae:2f:05:85:ab:7b:1d:74:
         11:04:03:45:d6:9b:d7:63:a6:02:86:97:b4:84:b1:7c:f5:bc:
         11:4e:4f:31:36:60:82:38:d0:ea:71:c1:bb:b7:cb:fe:36:ef:
         6e:71:69:da:9a:4e:b3:3a:73:cb:6d:c0:17:bf:14:18:f9:f3:
         9e:e5:81:24:89:aa:b7:b5:b9:c4:c3:67:0d:b4:bf:79:5a:f6:
         aa:23:01:65:da:36:95:03:ad:72:7b:27:d7:55:20:85:9c:6f:
         14:18:b0:ad:b3:a2:3c:97:17:5a:80:8f:22:b3:45:80:c3:16:
         d6:21:00:5c:39:2d:a1:17:ab:ef:2b:54:54:a0:3b:4b:06:dd:
         9e:99:ec:bc:78:a3:85:62:88:29:22:dc:c9:42:2b:2a:bb:92:
         7f:dc:4e:a9:eb:ab:d3:af:df:81:64:e5:bf:19:ed:0b:b3:fc:
         da:e2:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:41:56 2025 by rpki-client