Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          aYWCmUoKpgn2taG2UyOPQNThmydF4wzOULKIw8nDx3Y=
Subject key identifier:   2A:CD:E9:94:A2:E7:E2:89:B3:8B:D4:07:C8:68:F3:13:5C:6D:BC:3C
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          0110
Signing time:             Wed 23 Jul 2025 05:20:34 +0000
Manifest this update:     Wed 23 Jul 2025 05:20:34 +0000
Manifest next update:     Wed 30 Jul 2025 05:20:34 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: 52L1hxgRk0fIv7BfKqVH0Sw3U8R2WWFDLdKB4APpqt4=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Jul 23 05:20:34 2025 GMT
            Not After : Jul 30 05:20:34 2025 GMT
        Subject: CN=68807122-5999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:3a:ea:fb:38:80:6a:30:aa:05:66:b3:f3:
                    e5:df:37:c8:43:ee:e4:32:16:ca:20:5b:7b:c2:26:
                    c3:ff:6c:22:fe:3d:f6:60:6d:6c:8d:b0:0a:8f:f6:
                    2b:42:0c:06:8d:2d:a3:f3:9d:ef:22:dc:27:64:05:
                    ac:bd:41:51:d8:5e:6c:a8:da:93:66:55:64:be:88:
                    a3:0d:fb:78:40:ed:45:7f:f1:e1:6d:54:6b:97:6b:
                    e0:de:dd:d8:64:4b:8d:a1:cf:c4:ce:16:98:06:e3:
                    cc:d8:1a:2b:7b:75:c6:6d:65:e4:1b:51:b3:77:ef:
                    26:b6:c3:6e:00:ff:c4:f6:b5:2d:d0:fa:b6:04:26:
                    3f:ff:0f:4b:8a:ce:b1:c1:04:be:16:d2:8f:54:c9:
                    b8:09:ae:31:98:7a:36:4a:f9:b0:39:d8:33:70:6c:
                    51:b5:1c:f0:86:3a:ab:02:27:02:6d:47:eb:f4:cd:
                    fc:07:23:f9:3d:a8:fe:c1:39:58:b5:c1:d2:6e:22:
                    6f:11:d7:db:14:25:b9:c1:07:94:12:07:e0:da:f3:
                    c1:15:f6:6d:cf:31:f2:60:3c:5d:7f:e9:9c:a5:5b:
                    43:b1:f8:41:c1:2c:61:90:46:12:7f:58:1a:a8:1b:
                    ec:58:52:97:ff:74:3a:90:41:10:c7:02:69:bf:bc:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CD:E9:94:A2:E7:E2:89:B3:8B:D4:07:C8:68:F3:13:5C:6D:BC:3C
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:32:32:ad:12:ad:7b:53:96:45:75:37:58:50:6e:a3:1c:
         8f:c9:0a:3d:77:2f:f5:96:d0:44:ee:e4:9d:62:2a:d7:50:58:
         fe:52:91:ba:93:b8:83:74:85:83:39:9b:92:1d:fd:f4:47:9b:
         e2:f7:ff:29:8a:b1:35:eb:97:0a:d1:90:fb:7d:68:d0:cb:5b:
         eb:b9:d0:0f:09:64:16:7f:6f:50:3d:6b:88:8a:b3:16:03:7c:
         56:5d:04:b9:2c:f4:3e:8c:0b:d4:d6:f3:f9:b3:69:c4:1a:a7:
         97:94:cb:8b:04:ae:f4:cc:15:bf:77:5d:a6:02:9c:d2:14:06:
         27:1e:3d:7f:1b:c8:42:82:68:1c:ba:fc:b0:a2:d1:94:0e:2b:
         b3:0c:8e:46:c3:fd:78:d5:8e:40:e6:0d:44:10:34:44:b3:6d:
         2b:15:a6:43:1c:9a:9d:78:91:33:61:70:d1:12:53:51:21:b8:
         6e:55:b5:77:93:a7:88:31:db:b4:ae:87:e5:8a:84:39:cf:27:
         af:af:05:c0:af:79:af:1a:e7:65:6a:94:84:c6:f7:0a:4d:cb:
         8b:ea:63:c6:5d:5f:e6:32:75:40:3a:be:4c:e6:24:28:40:8b:
         6d:dc:eb:6b:ce:ee:df:bc:26:d9:68:ed:2f:20:28:da:bb:80:
         b6:e8:83:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB
QTczMUI1NTIwHhcNMjUwNzIzMDUyMDM0WhcNMjUwNzMwMDUyMDM0WjAYMRYwFAYD
VQQDEw02ODgwNzEyMi01OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5qE66vs4gGowqgVms/Pl3zfIQ+7kMhbKIFt7wibD/2wi/j32YG1sjbAKj/Yr
QgwGjS2j853vItwnZAWsvUFR2F5sqNqTZlVkvoijDft4QO1Ff/HhbVRrl2vg3t3Y
ZEuNoc/EzhaYBuPM2Bore3XGbWXkG1Gzd+8mtsNuAP/E9rUt0Pq2BCY//w9Lis6x
wQS+FtKPVMm4Ca4xmHo2SvmwOdgzcGxRtRzwhjqrAicCbUfr9M38ByP5Paj+wTlY
tcHSbiJvEdfbFCW5wQeUEgfg2vPBFfZtzzHyYDxdf+mcpVtDsfhBwSxhkEYSf1ga
qBvsWFKX/3Q6kEEQxwJpv7z9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrN6ZSi
5+KJs4vUB8ho8xNcbbw8MB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5
RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx
VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeMTIyrRKte1OWRXU3WFBuoxyPyQo9dy/1ltBE7uSdYirXUFj+UpG6
k7iDdIWDOZuSHf30R5vi9/8pirE165cK0ZD7fWjQy1vrudAPCWQWf29QPWuIirMW
A3xWXQS5LPQ+jAvU1vP5s2nEGqeXlMuLBK70zBW/d12mApzSFAYnHj1/G8hCgmgc
uvywotGUDiuzDI5Gw/141Y5A5g1EEDREs20rFaZDHJqdeJEzYXDRElNRIbhuVbV3
k6eIMdu0roflioQ5zyevrwXAr3mvGudlapSExvcKTcuL6mPGXV/mMnVAOr5M5iQo
QItt3Otrzu7fvCbZaO0vICjau4C26IO2
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:52:00 2025 by rpki-client