Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File:                     VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier:          YPIsxokTLey0Vvxe+M5fHPqmB4oXLMHuKSinppmGwOE=
Subject key identifier:   D3:08:6D:1D:37:4C:2C:5D:48:F6:7D:A4:3F:86:2C:60:D4:90:FB:46
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       097A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number:          0974
Signing time:             Thu 24 Jul 2025 20:18:13 +0000
Manifest this update:     Thu 24 Jul 2025 20:18:13 +0000
Manifest next update:     Thu 31 Jul 2025 20:18:13 +0000
Files and hashes:         1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: qgCAvtnvXo8QeyabmXlwyJWCA+D5r4qM7wqUNaaos0U=)
                          2: 8247E286967711EA81018623C4F9AE02.roa (hash: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Jul 24 20:18:13 2025 GMT
            Not After : Jul 31 20:18:13 2025 GMT
        Subject: CN=68829505-f940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:e2:ba:80:75:19:6e:44:a9:c4:04:df:81:
                    6a:8b:89:54:a0:d5:61:22:b0:ae:52:85:ad:40:4c:
                    f1:36:05:de:13:43:ef:3b:f9:00:b3:44:27:37:ef:
                    15:77:e1:d7:51:5f:f0:65:2e:f2:5d:d6:2f:23:18:
                    22:b2:a7:cb:bf:f0:54:fb:24:7a:b8:db:a4:12:b7:
                    35:a5:22:ce:24:7c:90:39:4e:a7:66:03:46:49:10:
                    1b:cc:cc:0a:db:94:2b:04:41:ef:d2:ba:74:dd:9d:
                    ac:7d:be:82:9a:54:8c:c2:9d:cf:ad:52:0f:ea:5a:
                    e2:19:d6:64:13:b0:cb:41:b6:6e:10:b0:cb:ff:db:
                    87:41:54:d3:1d:65:84:48:11:ef:4c:e0:06:09:f1:
                    cb:91:52:97:f0:07:96:e1:77:14:ff:c9:03:54:8b:
                    71:cb:85:17:97:a7:65:23:93:36:60:31:49:c5:c8:
                    b0:c4:83:ca:4b:50:70:81:e0:12:d2:54:9e:5f:49:
                    52:04:fb:91:6b:8f:12:50:52:0d:62:50:bb:c3:31:
                    1f:66:33:cb:c0:7c:ae:14:dd:40:8f:1b:7b:f5:dd:
                    ba:c4:09:41:a5:fd:2c:d9:8f:d9:b0:a9:cd:5f:af:
                    2e:9f:81:f2:ae:ba:a9:81:49:18:41:b8:0c:6f:d3:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:08:6D:1D:37:4C:2C:5D:48:F6:7D:A4:3F:86:2C:60:D4:90:FB:46
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:42:c7:76:11:29:17:94:15:50:8c:ef:2c:52:a8:d3:31:
         c2:81:f4:27:c5:a8:4f:48:d6:85:93:0f:de:e1:36:c3:46:7d:
         6e:26:ca:9c:44:bc:31:eb:11:5b:03:3c:e7:2a:58:5e:c1:87:
         8c:60:69:51:17:7a:11:81:e3:e6:02:25:60:ba:a5:e2:57:09:
         fb:77:ff:03:5d:54:76:7f:76:b0:1b:b2:e5:aa:d4:04:f1:aa:
         e0:1c:71:8f:48:85:17:79:31:b5:ea:93:c6:8e:18:91:e4:53:
         b6:e2:3a:9c:72:a9:d6:e4:52:ad:41:7f:8a:f2:bf:62:a3:3b:
         21:df:7b:62:31:a4:33:79:eb:ed:b9:24:fc:d0:8f:4e:79:20:
         88:2c:63:1f:8e:a3:29:e7:c3:7b:70:f5:76:cd:ef:bb:8d:a6:
         75:f4:19:11:81:e4:77:8e:b2:0c:ce:70:64:7f:42:ed:0b:56:
         35:a1:15:74:d3:1d:f9:89:c1:4b:28:6d:e1:eb:0f:4d:b9:ae:
         94:e1:7f:c2:ef:48:19:27:da:56:56:d3:09:b5:fa:6b:5c:bd:
         3a:a0:b8:7d:b9:8e:82:17:65:b1:16:53:e4:1a:c8:42:d7:ae:
         da:97:03:62:3b:ca:2b:31:36:3a:bc:f8:19:11:e4:f8:be:d6:
         89:d0:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:22:07 2025 by rpki-client