Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File:                     ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier:          gA0cvA1WLQlhZ2/8qfER4fplLrhF2Y9mQHs3unpXwIM=
Subject key identifier:   94:04:FB:A6:15:06:78:30:72:9A:46:0D:6D:B7:A7:A1:0B:58:89:63
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number:          BA
Signing time:             Sat 09 Aug 2025 06:21:53 +0000
Manifest this update:     Sat 09 Aug 2025 06:21:53 +0000
Manifest next update:     Sat 16 Aug 2025 06:21:53 +0000
Files and hashes:         1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: 42svyrgsiTK5Cb0WliSjc4TDi82dQK0Y7MNNJC8U+9o=)
                          2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Aug  9 06:21:53 2025 GMT
            Not After : Aug 16 06:21:53 2025 GMT
        Subject: CN=6896e901-dda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:88:1d:85:08:84:e2:c3:ad:38:7f:97:2a:
                    0c:7c:21:c6:c9:a5:82:66:c8:2d:77:4d:56:9b:ed:
                    a0:a2:77:b0:0d:bc:01:44:c0:5b:17:c1:72:a4:ea:
                    6a:0b:56:39:0d:e0:84:e2:5f:7e:5b:f0:d9:25:8c:
                    87:16:c0:dd:d2:fd:74:ad:3e:7b:71:00:5a:38:13:
                    06:ce:aa:e0:a2:6d:e1:77:d7:b5:36:d8:6d:85:14:
                    b7:83:7c:c6:61:65:7f:68:9b:eb:f1:bc:77:54:74:
                    c1:5d:2d:32:61:89:5d:8d:c8:e5:fd:55:5e:bc:ea:
                    60:72:19:ce:9c:32:db:b7:02:ec:1b:3c:81:62:63:
                    6b:54:0a:05:ae:44:ed:8e:bf:ad:8b:36:c5:0b:35:
                    10:2d:03:db:cf:cb:c8:30:c9:a9:f8:11:6e:67:ed:
                    3d:43:2b:99:70:ef:aa:31:8a:a7:26:89:2c:d8:ac:
                    91:78:98:ba:21:64:07:8f:ee:f9:1b:44:9b:f4:d0:
                    6a:05:a9:70:d2:e4:a1:95:5a:92:33:7c:8e:bd:e6:
                    34:02:4a:51:e1:61:cd:45:49:07:92:4d:86:9d:b4:
                    33:76:07:3e:7f:93:29:7c:b4:02:e8:04:17:0f:74:
                    57:b1:e5:a9:29:4b:a4:19:d7:ad:76:8d:59:95:a0:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:FB:A6:15:06:78:30:72:9A:46:0D:6D:B7:A7:A1:0B:58:89:63
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:73:9a:82:0f:be:76:77:2f:7d:54:d2:9e:f6:8a:e1:05:a6:
         d6:7a:3c:ed:25:3e:4d:05:2f:06:f4:8b:d6:26:93:39:6a:ef:
         84:02:07:ac:8f:94:71:5d:8a:03:75:0d:ae:90:42:75:c6:bd:
         65:9e:fd:27:ba:5d:06:13:66:c9:84:0f:01:a9:39:da:ab:29:
         e2:d0:02:ea:19:b4:56:11:8e:8d:49:7e:9d:64:96:e7:ef:e3:
         0a:48:b4:f5:2e:26:c4:2a:16:a9:16:d1:5b:60:d2:ed:f2:6d:
         a3:38:7b:13:e1:90:c6:a6:4f:58:da:85:2e:23:04:08:30:48:
         60:73:c5:40:df:0f:50:9a:2f:24:18:96:23:42:0e:56:09:7b:
         50:40:ed:70:24:c5:7b:da:00:9e:c5:c1:c1:31:72:4a:15:9b:
         1d:8c:79:40:3e:b9:01:49:bd:f3:e0:81:26:ba:fc:5b:09:64:
         a4:c4:40:c1:55:09:fd:bb:d9:9e:f9:bb:9d:eb:bf:cb:d3:6a:
         fb:b0:4f:1b:49:d1:7a:fd:d0:ec:28:4e:70:0d:f4:fd:45:18:
         45:ff:50:f6:73:7f:6d:64:91:97:16:65:81:52:b2:5f:e0:9e:
         cb:fc:18:17:ea:ad:9f:bf:08:8e:72:4e:2e:10:6f:6c:dc:38:
         92:98:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:25:34 2025 by rpki-client