Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json)
Hash identifier:          WfbuRlRge8fESFvfNYRQ6sx5JmFy8Ywkh98zkDUXA7U=
Subject key identifier:   45:64:F6:6F:CE:CB:5A:FE:A4:7D:BC:0A:26:A7:2E:4D:37:CB:6B:93
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       0857
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
Manifest number:          0850
Signing time:             Sun 20 Apr 2025 20:27:58 +0000
Manifest this update:     Sun 20 Apr 2025 20:27:57 +0000
Manifest next update:     Sun 27 Apr 2025 20:27:57 +0000
Files and hashes:         1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: kIbHT7aL0kaEy8TNY6Kh+UO2MaTuKa3X+iZl91jCWgE=)
                          2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: Apr 20 20:27:57 2025 GMT
            Not After : Apr 27 20:27:57 2025 GMT
        Subject: CN=680558ce-cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:62:76:ff:a9:54:de:3c:31:6c:4f:e5:f6:87:
                    91:84:62:87:b5:1f:39:5e:0c:ed:0d:60:98:48:04:
                    1b:fd:a1:83:20:37:f5:55:da:0e:0f:1c:2e:21:88:
                    c1:ee:27:7f:cd:55:c4:be:b4:6d:69:b6:4b:78:71:
                    e0:86:04:80:3d:60:fd:48:4f:17:1c:74:9d:c5:cb:
                    14:1e:04:82:65:7f:a5:6a:57:d6:24:c4:d1:dc:14:
                    e2:10:10:14:86:cb:f2:52:68:02:50:b6:88:96:8f:
                    06:9f:18:b1:d3:a6:fa:d9:76:0b:0a:e8:fe:95:0f:
                    6f:ba:e0:cd:e9:1e:7f:c0:28:b2:58:34:06:a1:d1:
                    7e:cc:f1:a0:d7:32:90:a8:f2:01:0d:51:e3:96:43:
                    f9:00:ad:c6:02:ea:62:c6:bb:25:fe:d7:eb:55:a0:
                    c8:ff:be:3b:b7:6c:db:73:25:2b:77:28:85:a2:7f:
                    82:47:3e:78:fa:6a:bf:e6:cd:3d:2f:ee:1b:63:e4:
                    cf:78:62:4d:d3:be:24:55:5e:c5:e9:7b:18:91:c0:
                    1d:1b:ab:89:33:17:0c:6e:e9:11:8d:6b:4c:1e:13:
                    e1:4b:ca:d0:8f:91:19:e0:ee:93:df:d9:26:49:0e:
                    db:3b:2f:b3:e0:1d:7c:61:60:bf:6b:97:fc:c9:8a:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:F6:6F:CE:CB:5A:FE:A4:7D:BC:0A:26:A7:2E:4D:37:CB:6B:93
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:88:a1:60:73:c0:27:fb:4e:79:d7:2b:af:9e:a3:1c:fc:
         e6:c8:cd:81:17:b2:db:db:e2:f0:ab:eb:d4:5a:d7:cf:01:a4:
         9d:26:c3:63:93:25:3d:b3:28:c5:28:df:5f:df:53:d7:41:ac:
         18:24:d3:0b:d1:b6:97:76:d6:7d:f6:0e:a1:15:18:57:8a:3e:
         30:61:17:53:86:4c:55:91:58:51:83:bc:e5:d2:68:39:1d:e0:
         4d:8b:2c:6f:91:82:61:81:98:2c:7c:a8:db:40:9c:e3:da:27:
         e3:ff:a5:47:de:af:fd:6b:23:74:10:a7:35:7c:29:d0:7c:10:
         41:56:c3:73:32:c2:46:f1:f3:23:18:2e:d0:56:9c:a3:db:03:
         bf:01:c7:80:c4:7e:0b:31:d0:b5:5c:c2:16:e0:15:cc:60:03:
         24:dc:c8:54:dc:3a:7f:d0:1c:75:77:9c:38:a4:f5:0f:ba:0c:
         9b:bc:24:2f:de:06:a7:ae:1a:22:0d:26:51:cb:44:b2:6c:84:
         62:1b:9e:ab:9d:80:df:3e:36:c4:14:23:f0:6c:36:23:7c:83:
         c8:5e:a6:01:a8:9e:6c:de:1b:07:1a:af:6b:26:21:00:31:45:
         01:d0:2c:1d:fd:b6:a3:ea:2a:b4:34:21:f6:d8:6f:7f:e3:fe:
         39:7e:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:04 2025 by rpki-client