Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          cNfXE1GFQ3tUo1K9gtz+O0E/Ek8qJFGBxF070LDZ0RQ=
Subject key identifier:   0C:0F:03:5A:9C:AC:CF:49:28:51:39:92:F8:F9:72:F1:AF:D5:58:14
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          011D
Signing time:             Sat 09 Aug 2025 05:31:35 +0000
Manifest this update:     Sat 09 Aug 2025 05:31:35 +0000
Manifest next update:     Sat 16 Aug 2025 05:31:35 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: bK9eXYxdqf0vwkB7d82uyHo9hHTap1fpPRxCb20r9nY=)
                          2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: ej1Z6/vJKdXFXCjwXb83ZJtZZrkbIfDZkFd1eoC4aOQ=)
                          3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=)
                          4: F73A3EA458FF11F0831F6664C4F9AE02.roa (hash: 9HomyUX0PomXvq45psvaACwfTmVg8wmvwSi8lzKvi40=)
                          5: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=)
                          6: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Aug  9 05:31:35 2025 GMT
            Not After : Aug 16 05:31:35 2025 GMT
        Subject: CN=6896dd37-ce24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:83:eb:2c:6f:15:b7:1b:63:f7:1c:23:36:
                    31:43:e1:42:ad:ae:6b:79:bd:23:73:43:a1:75:a9:
                    d3:2b:16:79:17:90:6e:b5:4c:e5:a8:94:ab:93:cb:
                    88:4b:18:b2:71:cb:2a:e2:d2:b3:31:21:45:76:69:
                    87:62:32:a2:ed:4b:0e:ba:04:a4:bd:27:a8:0a:9c:
                    8f:6f:69:2f:ac:ce:b6:0b:eb:8f:6e:1e:21:32:b4:
                    df:02:78:91:1e:8d:03:e4:71:e2:0a:04:8e:0e:81:
                    df:6c:08:77:b3:86:0d:a1:50:4c:a9:cf:90:df:2c:
                    2b:d2:2c:8e:27:59:d0:f5:da:4b:2b:d2:3d:1e:4a:
                    50:ea:ee:b5:cd:0a:85:24:24:17:56:8a:a3:4f:9a:
                    28:e4:4a:7f:d1:c9:3f:a5:90:a5:13:c2:cf:92:4b:
                    59:27:f4:d2:5a:54:38:f4:ed:62:20:74:25:32:c2:
                    13:ab:64:bc:01:fe:c0:26:ae:90:5c:5c:18:ac:01:
                    25:28:a2:b3:d1:83:ba:5e:80:c7:c5:64:48:0b:1f:
                    f5:9b:60:03:0e:51:c8:ac:8b:05:89:65:ee:00:dc:
                    ef:3c:57:7b:0d:39:96:89:7e:51:b5:f9:5e:e7:c7:
                    ea:c4:3c:35:c8:72:fc:b1:4d:c3:1b:1c:f4:2e:34:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:03:5A:9C:AC:CF:49:28:51:39:92:F8:F9:72:F1:AF:D5:58:14
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:97:1c:3b:29:65:c2:53:ad:b3:bc:73:5a:50:53:1f:cc:
         c2:60:9b:04:d7:7f:ca:5e:27:fc:20:29:55:b7:51:bc:e9:c8:
         49:9f:c9:75:7e:81:f0:4a:ce:64:9c:d6:03:d9:56:e3:57:b6:
         0a:02:6e:c1:b4:38:87:a5:c9:17:ba:13:85:aa:d6:35:82:9e:
         75:b1:0b:30:92:53:2a:fa:27:ae:b6:37:2f:06:16:b3:8a:16:
         d2:a1:57:24:ee:e6:50:32:e2:39:c1:10:40:9d:f4:b6:d5:3a:
         5a:f6:33:d5:f6:1b:51:f1:fe:28:5e:6c:32:c8:32:5a:36:86:
         96:c1:7d:c4:dc:5b:38:c9:3f:06:0e:c6:af:d3:2e:8d:d0:34:
         b6:cc:ba:35:86:09:e3:55:73:53:f4:76:04:99:52:5f:9d:01:
         6a:55:91:f3:7f:e7:3b:05:ea:a9:e8:40:5b:77:0b:0e:c8:d5:
         60:b1:1c:a3:f2:0b:34:7c:47:27:d1:c8:6a:51:2c:19:7f:49:
         a0:37:f5:e1:e9:a2:60:34:a9:ad:51:45:95:39:ed:cb:b8:06:
         e0:7e:58:18:58:8f:d1:89:c5:cd:87:f2:00:70:fc:c5:26:92:
         8f:ed:2a:ab:02:48:6c:a4:c2:18:40:d1:b3:d6:51:71:4b:67:
         bf:1d:da:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1
QjVENjcyOUMwHhcNMjUwODA5MDUzMTM1WhcNMjUwODE2MDUzMTM1WjAYMRYwFAYD
VQQDEw02ODk2ZGQzNy1jZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7K6D6yxvFbcbY/ccIzYxQ+FCra5reb0jc0OhdanTKxZ5F5ButUzlqJSrk8uI
Sxiyccsq4tKzMSFFdmmHYjKi7UsOugSkvSeoCpyPb2kvrM62C+uPbh4hMrTfAniR
Ho0D5HHiCgSODoHfbAh3s4YNoVBMqc+Q3ywr0iyOJ1nQ9dpLK9I9HkpQ6u61zQqF
JCQXVoqjT5oo5Ep/0ck/pZClE8LPkktZJ/TSWlQ49O1iIHQlMsITq2S8Af7AJq6Q
XFwYrAElKKKz0YO6XoDHxWRICx/1m2ADDlHIrIsFiWXuANzvPFd7DTmWiX5Rtfle
58fqxDw1yHL8sU3DGxz0LjQ5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwPA1qc
rM9JKFE5kvj5cvGv1VgUMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD
NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0
NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAcZccOyllwlOts7xzWlBTH8zCYJsE13/KXif8IClVt1G86chJn8l1
foHwSs5knNYD2VbjV7YKAm7BtDiHpckXuhOFqtY1gp51sQswklMq+ieutjcvBhaz
ihbSoVck7uZQMuI5wRBAnfS21Tpa9jPV9htR8f4oXmwyyDJaNoaWwX3E3Fs4yT8G
Dsav0y6N0DS2zLo1hgnjVXNT9HYEmVJfnQFqVZHzf+c7Beqp6EBbdwsOyNVgsRyj
8gs0fEcn0chqUSwZf0mgN/Xh6aJgNKmtUUWVOe3LuAbgflgYWI/RicXNh/IAcPzF
JpKP7SqrAkhspMIYQNGz1lFxS2e/Hdry
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:51:19 2025 by rpki-client