Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File:                     ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier:          QZYm8RWFWQY51IsRYjR8q/KIcink8rqxgSBUmVP5fr8=
Subject key identifier:   D4:36:44:5F:3A:3A:6F:E8:54:24:8A:89:04:FD:3F:44:F3:10:F2:7A
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer:       /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial:       1730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number:          1724
Signing time:             Sun 10 Aug 2025 16:36:43 +0000
Manifest this update:     Sun 10 Aug 2025 16:36:43 +0000
Manifest next update:     Sun 17 Aug 2025 16:36:43 +0000
Files and hashes:         1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: 1ztVNkAxnuuQot3LAtmMmq9aUhujc1gt2bS5GYUtpQs=)
                          2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: PelwRr9hgP7dCYd5KU90WVUNYfa/KyN0aFEd88yUz4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
                          rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5936 (0x1730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
        Validity
            Not Before: Aug 10 16:36:43 2025 GMT
            Not After : Aug 17 16:36:43 2025 GMT
        Subject: CN=6898ca9b-ead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:5d:0e:a1:5e:ad:03:5e:6c:f4:ba:82:a9:
                    59:28:0e:9a:8c:1c:d9:2d:1c:e2:f6:dd:b2:cf:60:
                    79:f6:0f:59:34:eb:2d:c5:37:31:e8:05:ac:c3:28:
                    78:fc:b6:91:c2:5e:d1:6a:6f:d5:79:41:da:12:7f:
                    32:a1:96:c8:37:83:79:4e:8f:58:73:58:61:00:67:
                    6e:10:fd:3d:bc:2d:c6:e4:d0:83:63:77:0a:fc:a4:
                    80:1b:cc:fd:04:21:16:46:06:bd:dd:79:4a:33:ca:
                    02:b1:26:97:40:a4:51:6a:61:61:77:6b:d5:86:89:
                    c4:e0:8b:e7:78:36:18:bb:8c:af:89:30:3d:e4:a6:
                    92:01:8b:1d:2b:e5:19:e7:7c:e2:f5:89:3a:ff:8b:
                    30:55:8c:25:f3:e0:90:8c:74:1b:e8:bf:bd:a3:d5:
                    81:46:f8:e0:26:d2:d4:18:7c:36:ed:3d:ca:fe:39:
                    cf:fd:14:35:d7:84:d1:a0:1e:75:c2:fc:05:be:b6:
                    1c:4c:a9:d4:20:c5:52:25:c1:3d:62:c4:31:e8:85:
                    cc:dc:e4:c9:2e:db:12:5b:2b:cf:48:48:f9:a5:67:
                    9d:5e:9c:2f:72:30:66:38:e1:4e:97:79:d2:a9:c5:
                    18:3d:67:a9:ba:62:9d:a7:73:f7:7e:28:58:89:e4:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:44:5F:3A:3A:6F:E8:54:24:8A:89:04:FD:3F:44:F3:10:F2:7A
            X509v3 Authority Key Identifier:
                keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e9:db:00:3d:a7:dc:b3:25:cc:7d:ba:30:20:e6:1c:3b:14:
         78:08:9b:dc:e6:9c:9f:4f:3b:37:17:27:98:9e:18:24:9f:6f:
         19:8d:6e:f8:a2:1c:63:6d:c6:13:11:ee:17:58:90:8f:ab:d4:
         7b:c1:c7:6f:8d:82:c9:6a:a9:3f:54:31:15:a2:6e:6d:66:81:
         68:c7:8e:dd:ad:3d:70:38:f7:4f:29:61:70:94:13:40:98:11:
         bc:d0:9c:5c:4b:eb:01:12:4e:53:55:53:ab:47:fd:7d:0f:fe:
         ad:60:29:52:5d:6b:63:93:a0:77:44:d4:1d:66:fe:98:f7:67:
         6b:55:b9:f7:dd:c0:4e:cd:d2:47:2e:9b:5b:0f:31:27:d0:07:
         8b:4e:72:0d:d7:90:27:e6:7c:e2:8e:7d:74:e3:76:39:31:a4:
         5e:ae:9c:04:8d:48:9c:8e:23:47:92:cd:d9:fa:e6:ce:bd:93:
         75:ed:ef:ed:d9:43:8f:32:88:ac:6b:50:1d:c8:c1:ec:f1:4a:
         ab:70:0c:19:e1:3a:d7:73:cc:4a:0f:99:9d:6d:30:31:11:22:
         c8:c7:58:cd:81:59:a4:4a:76:3a:72:68:f7:42:dd:68:75:df:
         3f:3d:5e:c0:a4:71:1e:19:b7:b8:f2:46:07:ed:d4:28:40:60:
         fe:6d:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:32 2025 by rpki-client