Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File:                     Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier:          T+wXrKpMlnZnwASJSS/J1Begmchzmrw8KunskNipdzI=
Subject key identifier:   59:3A:36:A0:59:CB:CE:2F:07:16:FE:B6:7E:47:DC:3D:F2:2B:B2:B1
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       0FD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number:          0FC5
Signing time:             Sun 10 Aug 2025 17:30:37 +0000
Manifest this update:     Sun 10 Aug 2025 17:30:36 +0000
Manifest next update:     Sun 17 Aug 2025 17:30:36 +0000
Files and hashes:         1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: ItKnKfB+sPh/vtnDFRMiFJFVdgh1mgjeQNSuBjrEiZs=)
                          2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=)
                          3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=)
                          4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4051 (0xfd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Aug 10 17:30:36 2025 GMT
            Not After : Aug 17 17:30:36 2025 GMT
        Subject: CN=6898d73d-78f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:25:e2:3b:20:8e:e5:62:4f:9a:fb:de:a5:
                    ef:55:64:1f:14:ea:b0:ab:82:e0:c2:14:9d:b1:b6:
                    e6:aa:f1:12:bc:ab:23:7f:06:cf:d8:c5:fd:00:05:
                    ec:e2:3f:b7:0c:43:0e:e9:17:25:fa:73:23:d5:12:
                    dd:48:90:c4:12:09:86:57:c9:31:16:ea:60:d7:7b:
                    ed:0f:dc:5a:24:db:5a:9e:29:09:54:26:40:00:c6:
                    8b:5f:dc:b7:06:8c:ac:f9:54:70:99:33:81:e3:8e:
                    60:50:17:b4:b3:e9:c3:b6:70:2e:82:f3:bb:50:df:
                    6b:4e:df:32:21:72:f2:69:0d:2a:e6:6a:63:b1:f7:
                    d0:4b:4e:4c:8b:fc:bd:79:73:20:c7:d0:22:c9:75:
                    5d:7e:73:30:da:0c:53:3b:02:57:e0:fb:22:e3:e9:
                    e1:22:38:3d:be:6b:27:2b:58:55:53:b6:2e:b2:a2:
                    ed:b4:d8:90:5e:e7:50:8c:6e:83:14:34:33:62:d4:
                    68:f6:83:e3:43:b9:b5:77:85:13:d3:10:d8:7d:cb:
                    d3:ba:3e:b7:18:5a:b4:49:f1:f3:cc:b7:be:b1:f7:
                    03:5c:68:fa:dc:4e:db:f2:c9:62:40:12:7b:33:5b:
                    a5:f5:5f:47:e0:bc:1e:60:bd:83:bf:03:bb:99:d5:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:36:A0:59:CB:CE:2F:07:16:FE:B6:7E:47:DC:3D:F2:2B:B2:B1
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:b2:65:e3:70:36:08:0b:79:97:25:84:30:bc:d6:b3:a6:
         f1:57:74:6d:ed:f3:c5:4f:86:58:ec:fe:aa:78:0f:af:a0:84:
         3b:85:0b:c7:3a:f7:13:dc:23:17:75:df:89:24:d8:8d:4e:43:
         01:fa:13:13:d5:b5:a2:72:82:24:85:ba:5f:8d:fe:68:47:74:
         72:63:b7:aa:53:9f:28:a4:c1:7e:da:b7:47:60:40:da:e2:94:
         b4:3a:42:f2:5e:aa:d1:1b:34:15:41:0a:0a:a6:64:55:6c:86:
         b9:b4:a2:da:c3:c2:09:bc:82:79:b1:9a:7a:7b:a7:1b:86:03:
         7a:f4:3e:fa:3a:0b:6a:58:67:97:62:ae:d1:15:b9:4e:a0:bf:
         c0:b7:69:15:74:44:ac:b2:fd:cf:89:f9:fd:19:a8:2c:c8:d0:
         86:b7:aa:a7:06:09:77:08:a1:5f:34:62:69:ac:9e:98:b1:cd:
         98:54:f8:2d:34:10:dd:68:98:30:fc:69:b1:3d:2a:76:93:f2:
         06:94:fd:fc:f6:61:e1:86:5d:ac:a8:ca:bb:39:45:21:47:09:
         c7:de:46:59:ac:17:03:6f:0f:7a:ac:3a:17:80:93:0e:95:f5:
         4c:3b:12:a8:5a:35:40:6a:cb:f3:05:76:e2:48:6e:1d:6b:b9:
         07:33:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:30:54 2025 by rpki-client