Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File:                     zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier:          DzCJrm082R3RD04rIq7fHQzzQLoDEUZUlI2uM1XGjU0=
Subject key identifier:   C6:79:40:7A:A2:39:E2:B0:12:75:20:61:98:20:3B:7D:D1:06:A8:EE
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer:       /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number:          06D8
Signing time:             Tue 22 Jul 2025 22:47:08 +0000
Manifest this update:     Tue 22 Jul 2025 22:47:08 +0000
Manifest next update:     Tue 29 Jul 2025 22:47:08 +0000
Files and hashes:         1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: ZVwJf03XMt5Egx8ahmOD3sbgFChjYYj3nk+EN5c9x5M=)
                          2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=)
                          3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=)
                          4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=)
                          5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=)
                          6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=)
                          7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 22:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
        Validity
            Not Before: Jul 22 22:47:08 2025 GMT
            Not After : Jul 29 22:47:08 2025 GMT
        Subject: CN=688014ec-ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:4a:40:e7:1f:b5:83:77:71:b8:ac:cf:c4:
                    4a:b4:38:8f:5d:4c:9c:3d:94:28:ca:a1:8e:e5:ea:
                    01:b6:b1:17:ba:4f:8b:61:43:ed:dd:2e:ab:21:46:
                    cf:22:d3:2d:84:19:f4:37:8a:2b:eb:ec:f5:4a:f4:
                    8b:21:cb:a5:32:b9:33:18:cb:f3:a1:7b:9e:48:e2:
                    dd:8c:69:fe:52:c4:be:ee:10:55:a0:93:88:90:bf:
                    37:36:b3:51:7a:9a:a8:eb:0f:4f:bc:4b:dc:f8:86:
                    62:32:bd:b3:03:94:3b:53:09:69:80:fb:ae:6a:27:
                    6b:3c:d7:b0:84:e4:a7:2b:62:da:ef:ad:57:62:8c:
                    6a:b6:9a:f6:b8:bc:66:36:e9:cd:fd:4a:eb:ca:5c:
                    41:2d:a6:08:4c:d5:8c:2c:97:d0:e9:13:71:3e:4e:
                    75:2f:52:96:45:47:5e:4a:5a:ed:04:d0:f9:8c:ed:
                    85:5c:90:37:a8:66:42:fd:c4:25:d0:ec:3c:02:5f:
                    b5:68:b0:52:21:96:4c:ff:4a:be:86:06:d4:30:36:
                    06:b1:1a:81:6a:5f:76:d8:03:b8:72:fd:0d:0b:db:
                    34:67:40:5d:72:f0:a4:f9:e4:f2:39:21:4d:e8:e4:
                    c6:7f:b1:db:be:87:ac:d4:87:66:29:21:36:45:20:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:40:7A:A2:39:E2:B0:12:75:20:61:98:20:3B:7D:D1:06:A8:EE
            X509v3 Authority Key Identifier:
                keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:81:50:1c:0e:0f:43:e0:27:b2:fe:01:ea:1c:50:29:35:
         8a:2a:b8:61:92:4a:a3:0c:a0:30:03:fc:0e:bc:b2:07:87:10:
         7a:ce:5d:30:6e:8f:07:a6:0e:0b:70:61:c2:6d:38:30:65:e7:
         78:e1:7f:96:99:a1:fa:64:b7:b8:05:57:31:03:98:cb:7f:cb:
         ec:86:21:0e:18:a4:6f:91:44:86:2e:f9:f3:3f:01:f4:23:71:
         06:16:87:a5:4d:ee:bf:c1:c6:5a:ee:00:c0:e6:a8:48:d5:8b:
         2e:21:00:91:75:b6:de:55:28:c1:4a:7f:e2:6e:6a:c2:c9:58:
         2b:e6:a5:ee:01:f1:f9:5c:67:fd:aa:87:13:c4:c7:96:0c:a2:
         16:e9:4e:63:f7:70:e7:24:fa:d3:94:9b:90:32:d9:1f:dd:77:
         c3:a1:7e:64:78:b3:c2:a7:e6:e8:e0:57:59:a4:af:9a:34:31:
         95:aa:72:b3:6a:f9:41:53:e0:93:31:9a:da:ce:ed:57:7b:5a:
         c8:64:f6:63:59:40:39:37:f9:40:18:2a:14:68:37:0b:0e:93:
         b5:52:be:ad:0b:16:70:2a:93:65:7d:0e:ed:cf:8f:f5:d7:d1:
         ea:52:f1:28:11:c0:a6:8d:a6:52:f2:23:a7:64:4f:82:34:1c:
         68:b2:b5:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD
NTBCNUJBMTQwHhcNMjUwNzIyMjI0NzA4WhcNMjUwNzI5MjI0NzA4WjAYMRYwFAYD
VQQDEw02ODgwMTRlYy1lZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL5KQOcftYN3cbisz8RKtDiPXUycPZQoyqGO5eoBtrEXuk+LYUPt3S6rIUbP
ItMthBn0N4or6+z1SvSLIculMrkzGMvzoXueSOLdjGn+UsS+7hBVoJOIkL83NrNR
epqo6w9PvEvc+IZiMr2zA5Q7UwlpgPuuaidrPNewhOSnK2La761XYoxqtpr2uLxm
NunN/UrrylxBLaYITNWMLJfQ6RNxPk51L1KWRUdeSlrtBND5jO2FXJA3qGZC/cQl
0Ow8Al+1aLBSIZZM/0q+hgbUMDYGsRqBal922AO4cv0NC9s0Z0BdcvCk+eTyOSFN
6OTGf7Hbvoes1IdmKSE2RSC7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ5QHqi
OeKwEnUgYZggO33RBqjuMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3
QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN
TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNhYFQHA4PQ+Ansv4B6hxQKTWKKrhhkkqjDKAwA/wOvLIHhxB6zl0w
bo8Hpg4LcGHCbTgwZed44X+WmaH6ZLe4BVcxA5jLf8vshiEOGKRvkUSGLvnzPwH0
I3EGFoelTe6/wcZa7gDA5qhI1YsuIQCRdbbeVSjBSn/ibmrCyVgr5qXuAfH5XGf9
qocTxMeWDKIW6U5j93DnJPrTlJuQMtkf3XfDoX5keLPCp+bo4FdZpK+aNDGVqnKz
avlBU+CTMZrazu1Xe1rIZPZjWUA5N/lAGCoUaDcLDpO1Ur6tCxZwKpNlfQ7tz4/1
19HqUvEoEcCmjaZS8iOnZE+CNBxosrUZ
-----END CERTIFICATE-----
Generated at Thu Jul 24 05:06:16 2025 by rpki-client