Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          yWOpZVAqq15XL/TAW8Cd4ovxXiClJEOA+6MISTDEWl4=
Subject key identifier:   C5:F0:7C:0F:1F:0B:11:32:AD:1A:75:38:D4:D6:A9:11:B2:C1:45:08
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          BE
Signing time:             Tue 09 Sep 2025 06:12:47 +0000
Manifest this update:     Tue 09 Sep 2025 06:12:46 +0000
Manifest next update:     Tue 16 Sep 2025 06:12:46 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: U0G67wC99cphDdHfSCX+pf1kJvuKSrH6UlWyM9JEtk4=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 06:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Sep  9 06:12:46 2025 GMT
            Not After : Sep 16 06:12:46 2025 GMT
        Subject: CN=68bfc55e-1a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:eb:2e:4b:09:f3:fc:a5:c9:b7:ce:a6:e4:
                    cf:b5:1c:08:78:20:4a:4e:6f:61:90:b4:d5:25:f9:
                    ab:04:f8:f8:97:c6:db:ce:1e:25:fa:bf:5e:58:c3:
                    28:15:eb:22:67:a0:2a:fe:37:be:ca:e8:1f:3f:ea:
                    d7:f6:08:b0:4c:49:e9:47:db:0f:55:61:07:9f:cf:
                    4d:4c:2f:05:29:05:6e:41:4d:5a:1e:f4:1b:90:85:
                    6a:18:d9:ff:51:c5:b7:cf:37:79:c4:75:f9:98:9c:
                    43:6f:9a:7e:42:d7:eb:e9:3c:41:79:26:4d:73:18:
                    a7:89:2a:82:0b:f3:1f:55:60:de:f4:0b:26:20:30:
                    a3:da:05:d4:3a:a6:a7:31:8a:dd:b6:72:2e:93:a9:
                    6a:56:be:6a:08:5b:7b:58:9c:95:0a:8e:bf:d5:fc:
                    f4:d5:45:d4:05:85:3a:2c:10:34:15:c5:96:22:d3:
                    9c:51:e7:4c:b2:ae:42:cd:1b:17:d4:e3:71:c8:d6:
                    75:5a:58:0e:ed:1b:a0:0c:52:b5:0f:17:ad:64:2a:
                    ba:db:66:56:ed:0f:4e:22:09:05:9f:14:6d:3f:cf:
                    6e:53:36:f5:52:0c:04:01:41:34:3b:e7:91:48:26:
                    d5:bb:5a:e5:6f:d6:1a:f0:66:75:c2:34:35:57:ae:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F0:7C:0F:1F:0B:11:32:AD:1A:75:38:D4:D6:A9:11:B2:C1:45:08
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:1b:0f:79:82:00:a6:e5:d6:ea:e1:1c:2b:9a:dc:d9:47:
         91:67:b2:a7:b5:2a:8e:a5:6a:21:75:20:f4:67:e1:7b:8e:56:
         8e:07:a4:5f:33:39:2a:af:af:ca:83:c5:bf:62:39:3f:2b:e0:
         1d:a9:55:ca:db:99:08:78:8a:ca:ca:5a:a6:ca:a8:1b:b2:7d:
         00:94:69:af:21:92:7a:40:a7:f1:ab:ed:98:45:71:ca:10:24:
         1a:e9:91:ee:c5:60:ca:af:d6:2a:92:79:53:99:2b:1c:1b:5c:
         18:0b:a3:19:3e:d5:8f:44:6a:f8:7d:7d:3c:05:ee:90:1a:a1:
         aa:46:3a:b4:58:db:84:fd:ad:71:48:80:66:4e:b5:94:c4:79:
         b6:ab:2e:ce:ec:d4:e5:49:0c:a7:a3:eb:2a:82:bd:d7:2b:09:
         84:ab:1f:f6:99:c9:a0:37:f7:40:ca:12:07:33:40:b3:12:d0:
         a1:66:6a:88:8c:4f:9f:50:fd:43:4c:66:91:48:8e:3b:16:61:
         11:5c:28:e3:30:46:75:05:71:57:6c:46:b6:a8:e6:8a:74:5f:
         4c:b6:fa:bd:19:29:df:9f:d0:86:1c:d1:47:c4:be:7f:a7:20:
         5d:ba:ea:55:43:e5:96:6a:0a:44:cb:df:62:27:d1:dd:47:81:
         60:8b:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:10:57 2025 by rpki-client