Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
File:                     vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json)
Hash identifier:          ZbhKdN62sWS3CdPwZ7TxgCNsgHDrQCGNix1Q6EJKL2I=
Subject key identifier:   DD:43:1F:27:F0:16:10:C1:FF:32:97:33:2A:A7:84:1A:E7:B8:95:89
Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Certificate issuer:       /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
Manifest number:          A7
Signing time:             Thu 07 Aug 2025 06:45:21 +0000
Manifest this update:     Thu 07 Aug 2025 06:45:21 +0000
Manifest next update:     Thu 14 Aug 2025 06:45:21 +0000
Files and hashes:         1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: BaOXTqnrreE+xf0SVMTaLn1DMuVkR/inTtZ7XaIQm5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
        Validity
            Not Before: Aug  7 06:45:21 2025 GMT
            Not After : Aug 14 06:45:21 2025 GMT
        Subject: CN=68944b81-a1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:f6:5e:c0:1e:3a:6f:8b:bc:42:7e:20:ac:
                    83:a8:19:66:e9:e4:c6:b3:2b:1c:a1:e6:4e:83:5b:
                    35:7b:65:ff:2f:69:99:c7:9a:24:8f:68:c5:90:fe:
                    c0:b2:3a:d0:24:da:8a:ad:49:17:25:c6:3a:a3:4f:
                    89:22:4e:11:73:0e:00:0b:00:23:de:39:87:b1:ad:
                    cc:1b:5a:41:46:68:ba:82:d5:a8:ee:18:50:9d:0b:
                    bf:fd:0e:b1:1f:33:cb:54:97:8f:ef:30:80:37:bc:
                    6b:a3:65:89:0a:ea:92:f9:53:3c:78:d9:a5:24:b6:
                    6b:6c:77:dd:65:72:e1:60:b1:8f:e8:01:c7:e9:fe:
                    83:2c:03:9b:5f:03:28:7e:ef:63:4c:20:25:50:f7:
                    53:1b:31:52:28:5e:2c:b2:a5:1a:66:c1:f0:a7:60:
                    a3:e2:18:71:64:ea:6b:3d:7d:15:81:98:f5:e0:c8:
                    6b:a9:17:c7:0a:22:a1:c1:f5:11:08:22:7f:ca:82:
                    88:cb:2a:3b:09:b6:38:71:34:e5:de:d6:cf:97:a0:
                    4f:b1:a6:bc:5d:73:fe:b0:36:cd:81:64:c9:e3:63:
                    c3:ad:31:2b:34:e6:d5:b3:34:54:68:02:5a:28:76:
                    8e:71:e1:78:ce:74:36:f0:3a:5f:35:49:42:f4:ae:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:1F:27:F0:16:10:C1:FF:32:97:33:2A:A7:84:1A:E7:B8:95:89
            X509v3 Authority Key Identifier:
                keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:db:6c:8f:25:9f:a8:76:2a:2a:18:98:45:71:87:1d:93:00:
         74:f1:df:ee:08:63:45:a1:55:0c:88:3b:5c:42:23:9c:4c:62:
         07:20:d3:53:2d:32:10:99:8d:f3:4a:3d:c2:bd:c6:d9:08:86:
         f7:32:fb:40:f3:f8:fb:00:b9:46:e0:fc:dd:04:3e:48:e8:da:
         1a:ae:c4:ab:1f:0f:46:a1:a6:c7:4c:1a:54:c2:63:ee:d1:2b:
         7c:4e:86:11:d4:7e:9d:36:75:96:67:8f:0a:10:52:57:2f:8c:
         78:00:00:f0:7c:90:51:64:d7:bb:41:f0:81:34:0d:41:80:31:
         14:da:c3:ac:42:4f:b3:9a:ef:fa:cf:cf:27:c8:55:44:c1:f3:
         2d:7f:3f:ae:95:46:8e:c7:a7:bc:68:bc:07:44:c7:a6:c5:a2:
         5a:eb:5d:51:9e:fa:c9:e6:2b:dc:7a:e7:b0:7b:20:fc:17:09:
         59:f2:b8:44:a1:b3:6c:b2:36:ee:ff:0b:1a:a9:71:5a:7e:e7:
         9c:3b:66:d7:9e:67:7d:b9:27:14:e3:33:98:63:85:3d:c8:96:
         2b:b7:0f:7e:df:0e:8e:0b:5f:c8:e3:eb:25:bb:b2:54:25:ee:
         61:7d:74:45:48:53:2a:92:c5:c5:17:df:1b:71:bf:cf:a0:87:
         32:30:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:34 2025 by rpki-client