Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
File:                     mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json)
Hash identifier:          ktQvTawvsbxnoOcQI2VxfYyE1SbeSZyi54RkzFS4rQc=
Subject key identifier:   36:9C:B0:EC:82:9B:31:05:CB:A7:29:C3:42:A9:DE:44:7C:AD:3A:FA
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
Manifest number:          0740
Signing time:             Fri 08 Aug 2025 22:07:08 +0000
Manifest this update:     Fri 08 Aug 2025 22:07:07 +0000
Manifest next update:     Fri 15 Aug 2025 22:07:07 +0000
Files and hashes:         1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: IdfulOCTS26MxPn7YWdWuJMYlrwdLkIm7a/Z+LYOeH8=)
                          2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: MX4yOu1oCqUSOCDHmBztUTuNn37/SxpV/qX8mmPxh2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
        Validity
            Not Before: Aug  8 22:07:07 2025 GMT
            Not After : Aug 15 22:07:07 2025 GMT
        Subject: CN=6896750c-172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:c5:8a:6a:da:06:0e:a8:ef:7b:fd:07:eb:
                    40:d1:74:64:9e:98:de:5a:9f:7a:01:75:b9:70:30:
                    02:b1:7e:49:d2:f9:62:1b:b7:9b:97:00:49:30:65:
                    2a:34:bb:1c:68:bf:1c:f0:46:02:d7:7e:9c:50:e2:
                    6d:64:71:13:3f:a3:a2:8c:27:3c:a6:44:53:6a:2f:
                    49:b4:be:8e:f6:5b:15:4e:65:9d:04:33:35:ea:58:
                    18:70:0e:b0:c6:f0:58:64:5d:8c:eb:90:a3:a5:3a:
                    f4:b8:1c:1e:cd:66:02:e1:12:ec:7e:53:1d:c2:a5:
                    ff:15:0e:9d:a9:0e:ad:d6:b8:d4:b7:0b:05:2d:a3:
                    bb:28:7b:aa:a0:7a:b7:6b:4b:8b:ee:90:1f:ba:6b:
                    29:10:51:cc:7a:1f:36:c0:de:1b:21:78:d1:aa:53:
                    e4:45:a5:07:0b:f1:83:97:d7:45:57:97:7e:fb:97:
                    0a:bd:ef:3f:59:72:45:d3:9e:45:ad:79:b0:85:80:
                    52:e2:a0:6c:ab:a2:27:01:71:00:47:32:f4:a1:3a:
                    40:6e:e2:18:d2:b3:62:33:9e:44:d5:9a:e6:04:ca:
                    be:0c:79:44:d9:cd:65:04:c7:54:10:f6:4f:b2:ea:
                    67:ff:42:52:1c:22:34:5c:95:46:69:90:71:c9:43:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9C:B0:EC:82:9B:31:05:CB:A7:29:C3:42:A9:DE:44:7C:AD:3A:FA
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:64:38:11:e6:61:a6:fd:96:2e:aa:96:5b:43:a1:61:d5:74:
         a4:69:0f:74:d8:21:14:dc:90:e1:77:77:fb:38:d8:75:e9:12:
         16:91:d3:76:89:57:15:d6:21:c0:f7:38:61:b7:7f:57:bb:14:
         96:77:12:29:3f:44:9e:86:ef:3b:a4:86:61:3f:75:f1:2c:25:
         8e:94:48:d4:89:2a:a8:91:1b:99:a0:58:44:e2:d5:a1:1e:32:
         3c:bc:26:d7:5a:67:9f:5f:82:51:e3:36:70:7f:5d:a7:81:4e:
         20:3c:17:af:cb:5b:07:cd:65:95:76:21:d5:75:af:81:60:c5:
         e0:08:02:3b:62:e9:f6:41:ab:7f:8b:6a:fc:a8:da:7f:d2:37:
         df:e0:a8:b7:4e:d0:1c:e5:67:38:e5:11:b2:49:35:b8:fb:33:
         b6:3d:45:31:8a:8b:52:2a:88:2c:4d:d7:a2:6f:32:53:87:61:
         5d:d3:44:61:52:5d:6f:c2:0d:66:45:3b:ee:8c:d2:0f:6e:dc:
         4a:5a:42:c2:d5:a6:ab:52:67:6a:be:ea:31:a0:19:f6:5c:b0:
         15:a6:f4:0b:d5:a7:76:11:00:5e:77:fb:86:45:32:23:a9:45:
         1d:fd:ff:12:47:e0:d3:13:02:d1:12:9d:9a:ca:02:b0:2a:16:
         bf:87:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:19 2025 by rpki-client