Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          x/L4lpLqFjtf38ReDzfWmEA4giiMjjX5HKoedvXWfy0=
Subject key identifier:   17:43:6A:12:F6:5E:B8:89:6F:FE:EF:D1:89:AD:F3:B7:FC:7A:73:DE
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          0574
Signing time:             Thu 24 Jul 2025 23:39:43 +0000
Manifest this update:     Thu 24 Jul 2025 23:39:42 +0000
Manifest next update:     Thu 31 Jul 2025 23:39:42 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: dfwHKcWzOlZRh1UuLge+Lj9QLDJxTEHCwV7HkejbpRY=)
                          2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: efdLoq6zZv0F6RR1ze+KA4UrdZ3dfGQdbaEk/qTBX+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Jul 24 23:39:42 2025 GMT
            Not After : Jul 31 23:39:42 2025 GMT
        Subject: CN=6882c43f-c080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:f5:1b:f1:1e:e1:e5:69:eb:ca:98:9a:6b:
                    3c:c0:d5:0f:c5:a4:7f:01:da:fc:22:d9:d0:28:d3:
                    23:53:0c:90:cf:c0:50:92:75:15:35:33:8e:b7:23:
                    54:01:9e:e8:db:d4:53:14:98:b5:48:6b:b0:83:42:
                    92:a0:95:6a:f4:03:31:3c:45:ee:92:57:cf:aa:bd:
                    0d:b1:47:bc:5b:c6:94:ea:fc:b0:7e:23:ff:c6:ab:
                    9a:7d:70:b0:45:da:e3:d9:c9:4a:8d:5b:45:12:c7:
                    17:05:c1:db:7b:42:73:d5:44:0c:d7:6a:0a:88:ea:
                    57:c3:9b:75:e3:25:ee:c9:a4:f2:fa:4e:ce:60:42:
                    b6:ad:db:1a:a0:b1:bb:5d:1a:f5:d5:fb:18:f5:ca:
                    eb:aa:b5:27:c0:de:3e:01:b1:c0:83:c9:25:06:3b:
                    56:9d:74:3c:c6:a5:5c:ee:7c:cb:78:c3:ed:9c:84:
                    52:4a:1b:e2:07:84:ff:98:ff:04:f5:35:87:ae:63:
                    b6:72:cd:ce:09:82:2a:0f:e8:51:02:dc:1e:21:63:
                    b1:48:f5:e0:43:3f:68:fd:47:e8:35:5f:25:95:4a:
                    ef:8a:98:da:24:45:e5:53:02:3e:31:4e:35:21:cf:
                    f6:ed:dd:fa:5b:61:42:67:a4:08:58:74:1a:c3:df:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:6A:12:F6:5E:B8:89:6F:FE:EF:D1:89:AD:F3:B7:FC:7A:73:DE
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:a7:4c:7e:a9:bb:bc:7d:d2:93:53:36:da:25:80:a6:bc:
         d3:12:57:5d:ea:6a:a3:a3:65:5f:a5:16:16:bc:b9:d4:52:3c:
         ea:14:28:64:3c:2e:c7:11:95:93:c3:1b:d4:df:20:da:e5:c4:
         8d:84:78:f2:0e:f9:3b:5a:0c:d9:9f:19:81:c9:15:e4:e2:9e:
         16:82:54:93:6e:64:08:4c:74:ee:e2:16:eb:9e:ec:5b:4f:db:
         3e:8b:00:fc:21:92:39:f3:ce:e7:b2:94:3a:d9:93:ed:33:d0:
         12:50:1e:ab:43:20:2d:3d:4d:8b:1c:bc:f7:0a:67:47:7e:2f:
         6b:e1:bd:1f:7d:63:54:f7:9c:4f:8d:00:0d:a1:5c:9d:ba:65:
         3a:f7:db:07:5e:60:3e:b8:03:84:22:36:34:44:98:cd:99:ce:
         91:dc:63:c2:66:cd:f7:3f:8f:5b:a7:5c:3a:97:80:2d:44:e7:
         2e:22:b1:1d:85:33:7c:be:8b:97:81:dc:6c:05:a2:b0:3d:1c:
         f2:f1:82:41:2e:a3:ac:80:32:1f:f1:49:8d:7c:69:2b:57:db:
         cf:91:ea:ac:55:24:64:28:bc:ff:2a:21:62:1c:42:09:1c:c8:
         bb:a8:71:88:a2:7b:28:08:2c:24:13:83:9f:ec:84:9a:5e:22:
         51:2e:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:05:30 2025 by rpki-client