Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
File:                     ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json)
Hash identifier:          uUXX6swJ6rq0SNU/b6ErZ2526zH0tK0pJUqymQiCIgc=
Subject key identifier:   7B:03:96:11:7E:D6:A7:9A:37:55:77:9D:E3:D7:3F:38:3A:70:59:D4
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1B06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
Manifest number:          9FD6
Signing time:             Sun 10 Aug 2025 14:30:15 +0000
Manifest this update:     Sun 10 Aug 2025 14:30:14 +0000
Manifest next update:     Sun 17 Aug 2025 14:30:14 +0000
Files and hashes:         1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: GXSuTMLGMUKWV6fNaxeBrH3i3B5oZUBLqGKXXHwCG98=)
                          2: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: RYynr8uizf4mxXQD/bYs58a0i9OmwI4vdpj7nHmjiJU=)
                          3: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: oMF/P2hGXRHcLkAXgbmeUw5lcthqUMWdcFQRgDGmw2Q=)
                          4: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc=)
                          5: 191363A69DD911EC99D91668C4F9AE02.roa (hash: oqniAucPfqcKV0mTFTmt9sxkwi/yyX2GOXb0nYNRsyI=)
                          6: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: SpN5g9M2rsSW+Cra37fKcK/lk5XqYbPAMh8S4vUS9qk=)
                          7: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: U9RF+JaWcsKZTr1DEGw1Y5hTdB+oWxy9sRXTz5ZgIuo=)
                          8: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: Y+JgutBZqKB0sr/67XUkEfaEMyqBwPZIYt+9Yv44r5c=)
                          9: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ=)
                          10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: Dnw6VZCydK3JoKDSOzotlEvfgmRpxLVN7ezEA2ZyyGo=)
                          11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: Y+xehgtewaeOdOL6PowHHRPVgAd4mQJAADuq74in7FA=)
                          12: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: +Q2D0d9yEIcvHWqL458RmFQjgHnoWa/Nyf3wOjdRqJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6918 (0x1b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Aug 10 14:30:14 2025 GMT
            Not After : Aug 17 14:30:14 2025 GMT
        Subject: CN=6898acf7-c052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:33:10:54:c5:cd:6d:ee:65:5a:f5:c3:76:
                    7e:df:3b:68:35:c7:af:36:9c:07:49:94:dd:c7:b4:
                    02:24:55:5e:76:a2:19:39:3c:36:1b:6b:b6:ce:a3:
                    13:01:ba:ac:28:a5:c1:46:e7:9e:0d:0f:35:04:cd:
                    a3:8c:b9:dc:cc:63:6b:11:2b:d0:da:b5:32:d7:b6:
                    d6:3b:0d:e5:b6:5f:3a:a5:b2:8d:24:33:37:5f:d4:
                    90:e3:b4:0f:4b:5d:4d:f9:04:f2:97:92:e3:58:a2:
                    84:37:87:df:f6:a0:b8:84:c9:d7:de:9b:97:37:4b:
                    e8:bd:6d:bf:c3:f4:9b:2a:c4:55:d8:c2:d1:ca:dc:
                    d6:bf:34:61:15:a3:44:c2:a3:c3:64:f3:60:a5:df:
                    55:24:18:99:39:ee:2f:e3:d9:40:89:a9:1e:8f:2e:
                    e8:7e:9a:92:40:16:fc:e4:ec:8f:0d:f0:05:19:8d:
                    c0:8a:68:d8:a7:c0:61:91:e6:a8:93:25:fe:c4:c2:
                    9b:ca:dd:72:6d:65:32:cb:f7:5f:53:6f:f3:79:22:
                    15:ec:23:2e:f8:e5:4f:a1:76:dd:17:cd:f7:f0:b1:
                    74:31:19:bb:29:70:db:af:16:c6:78:4b:19:f5:34:
                    61:f8:06:4b:da:02:21:a6:da:10:6b:52:b7:92:0b:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:96:11:7E:D6:A7:9A:37:55:77:9D:E3:D7:3F:38:3A:70:59:D4
            X509v3 Authority Key Identifier:
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:3e:dc:9d:4d:c2:38:6d:48:69:e4:1a:4b:55:77:85:04:
         42:5f:ff:9e:96:8e:5a:6a:ca:8b:47:71:95:98:a5:f1:72:e5:
         a9:5d:05:6b:ae:7c:92:00:83:63:8b:77:53:63:7c:6d:74:0d:
         2e:bc:ec:ac:64:9b:91:0c:a0:22:3c:a8:68:32:f8:24:ab:24:
         7d:a5:4b:b9:de:34:81:d1:ce:a4:77:db:2f:ea:f2:16:31:a3:
         4f:6a:b1:fe:6c:1f:74:77:7f:3b:80:b9:d4:58:d2:a0:00:43:
         61:1c:3b:7b:bb:82:12:16:87:c2:13:26:16:18:a0:af:12:d0:
         d5:bf:14:43:17:d6:ab:fd:98:7a:9a:a5:ea:51:15:c5:c6:c9:
         da:89:78:6d:99:39:b4:de:18:f2:6a:ce:a4:b3:b7:f3:3c:7c:
         9f:c8:58:55:dd:88:aa:56:da:bc:84:ec:6d:56:0f:d1:f9:31:
         04:e2:a2:cf:91:06:43:23:aa:8e:a0:71:56:57:87:b8:ec:0a:
         e1:79:5e:ce:68:f0:da:73:f5:d8:b2:53:6d:83:49:52:20:af:
         ff:66:3b:7e:c9:9e:f1:06:0f:d8:5c:3f:68:82:3d:ac:7a:62:
         3c:32:aa:b9:02:d7:56:01:92:1d:09:db:38:b7:ed:42:cb:24:
         83:34:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:54:44 2025 by rpki-client