Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          eJi4AJs+csSftwPd372O9TuPz5yKPqbULs2z61thWKc=
Subject key identifier:   6E:AE:8B:84:FB:92:B5:DC:08:40:79:59:3C:5F:36:06:8A:27:D4:21
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       05B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          05B4
Signing time:             Fri 30 May 2025 23:20:12 +0000
Manifest this update:     Fri 30 May 2025 23:20:11 +0000
Manifest next update:     Fri 06 Jun 2025 23:20:11 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: rxJIRUyGotCFCR5XOMb4nbw3WpzCHj1hXxIcZ8yMDFM=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: JmgPCoqfxLnmCXZ9Kqg1cLPcucyGnFbjlpBzEMSmBKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: May 30 23:20:11 2025 GMT
            Not After : Jun  6 23:20:11 2025 GMT
        Subject: CN=683a3d2c-01ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:48:0f:29:99:73:50:e4:89:be:7c:e2:b2:
                    07:7b:5a:20:f7:24:38:6c:b8:01:67:eb:4f:93:e5:
                    0e:bb:51:ab:ff:63:85:76:9b:be:5f:d3:71:47:a5:
                    31:da:07:0f:d9:9f:8e:14:18:17:1f:05:f1:13:73:
                    e1:8c:48:42:6b:67:19:84:c9:e0:73:40:a4:1b:f1:
                    52:b8:6d:a3:d6:fa:8b:fc:eb:d6:29:3c:83:13:cb:
                    7d:14:d2:1a:26:17:a6:66:11:0c:fc:14:54:9a:33:
                    4a:6c:13:b2:00:a3:c9:e9:00:de:64:e9:46:6d:77:
                    f2:5c:d1:2e:b9:f0:59:0e:5d:00:c3:8e:58:95:fc:
                    e7:8c:74:17:af:ca:96:d4:db:6c:34:1a:72:76:2d:
                    ed:3f:cf:57:14:81:91:3d:c7:0f:75:ab:aa:85:74:
                    dd:3c:1f:b3:16:21:54:e8:51:dc:38:bc:33:5c:65:
                    60:30:fc:fd:87:78:db:b4:09:79:5f:8d:ee:fc:13:
                    ae:41:f6:5e:17:e3:44:b1:03:96:c3:15:20:a6:f4:
                    e4:e1:2f:55:33:b9:00:a8:eb:0d:6f:bf:ab:d7:e9:
                    44:8a:a7:65:e4:44:e5:5e:eb:31:2f:13:2e:fd:70:
                    c8:5a:1c:9b:3d:b6:f2:89:df:a1:76:e0:25:54:d5:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:8B:84:FB:92:B5:DC:08:40:79:59:3C:5F:36:06:8A:27:D4:21
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:96:32:76:e6:54:03:ff:cb:f7:c8:7e:70:1a:28:53:89:
         7e:f4:33:10:54:72:23:1a:ab:4c:2a:1e:76:c2:cb:2a:f6:00:
         11:96:76:b1:71:ba:40:77:c5:d5:47:d3:16:24:ca:7e:7f:44:
         0a:b3:e4:70:9b:67:7d:84:1b:2f:b4:f3:4c:c2:34:e3:1f:1b:
         5d:45:cd:74:c0:08:07:04:04:e4:66:5c:bc:3c:36:8e:97:a1:
         43:86:8d:db:3b:17:b5:aa:bf:42:86:b7:09:52:ac:04:c1:51:
         3e:b8:53:d8:7a:81:c4:f9:ff:00:f6:3a:49:09:b9:23:7d:02:
         ed:0b:cf:f4:f8:9a:21:4a:c4:45:35:eb:48:de:0c:e0:30:7d:
         9e:06:bf:92:0b:a3:cd:8d:5d:31:8d:3e:49:40:48:9b:99:06:
         0f:52:7b:4d:88:b9:a6:97:c3:7a:40:97:79:dc:a0:1e:e4:e6:
         c6:d0:0d:d3:9a:72:ed:96:43:a8:28:73:a9:3d:d7:60:b0:1b:
         28:d0:ce:12:41:12:82:04:1d:71:aa:42:1f:2b:ab:ff:7d:82:
         f6:28:de:1b:56:11:6d:17:0d:40:c0:a5:5b:0f:64:8b:be:d9:
         9f:1f:df:58:ba:9c:8e:4e:c2:17:df:84:bf:f5:b6:db:1d:25:
         e9:8b:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:50:43 2025 by rpki-client