Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
File:                     i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json)
Hash identifier:          Op61/UvTE3626ttAjLFPHXqDHYhWR80Uxt/hfaLH0BQ=
Subject key identifier:   C7:64:76:DA:1D:80:E6:82:8E:4C:E1:C0:6A:C8:86:10:DB:D3:6C:3A
Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29
Certificate issuer:       /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
Manifest number:          01B8
Signing time:             Fri 13 Jun 2025 02:11:08 +0000
Manifest this update:     Fri 13 Jun 2025 02:11:08 +0000
Manifest next update:     Fri 20 Jun 2025 02:11:08 +0000
Files and hashes:         1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: w5kBPexgyDIrMB0pQ37qOb/xS21a+0FMgZF5f3lMbK8=)
                          2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: g7Iu0qsIgHA2DsVqzJPZwAHsWDw0BvGfzGeWjQmEdZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl
                          rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1A8, serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
        Validity
            Not Before: Jun 13 02:11:08 2025 GMT
            Not After : Jun 20 02:11:08 2025 GMT
        Subject: CN=684b88bc-7fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:d9:e5:bb:11:04:1d:a4:09:6b:a6:ab:46:
                    9f:f1:46:75:17:e9:02:91:d0:64:17:37:de:03:13:
                    17:f2:38:8c:70:b3:88:b6:75:ba:b3:ee:b9:3a:a0:
                    79:60:a4:a8:20:3a:5f:2c:a8:97:f6:bb:b7:25:7c:
                    a8:eb:92:5a:2d:dd:7e:c9:53:b0:f1:98:d5:9c:7f:
                    b5:a7:5f:2a:01:d0:47:b8:4c:7b:12:f9:2c:d0:14:
                    46:c7:63:c6:b6:03:c6:01:07:90:27:9d:5e:ef:2f:
                    4b:ba:b4:07:8a:b5:67:a9:d2:6b:6f:8a:a7:f3:1d:
                    ef:cc:9e:50:e0:a9:1b:c4:89:e3:89:ea:5f:55:77:
                    27:89:61:ad:03:07:cb:d6:d0:ed:2e:fa:ef:e6:b2:
                    e1:81:d0:96:16:a3:fe:7c:7c:ba:91:38:e0:08:ab:
                    1d:9c:45:cc:4b:81:2a:27:56:c6:25:11:30:3a:b5:
                    33:e5:8c:90:b5:53:42:30:c1:f3:20:51:da:c1:e4:
                    2d:7a:be:9d:cd:7b:35:38:f9:25:de:63:97:76:6c:
                    49:71:df:9a:18:8d:1d:43:61:4d:3f:2d:fd:37:40:
                    a6:5d:3a:30:b4:66:99:e6:20:b1:7f:98:c2:77:7a:
                    a3:e8:b1:8a:5f:ac:60:50:0d:7d:12:69:cc:fd:f6:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:76:DA:1D:80:E6:82:8E:4C:E1:C0:6A:C8:86:10:DB:D3:6C:3A
            X509v3 Authority Key Identifier:
                keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:27:dc:2e:54:c4:64:22:6b:aa:d1:3e:ff:e1:cd:7d:42:
         14:27:d9:74:e1:87:b3:bd:e7:f3:34:e4:1c:cf:04:38:dd:78:
         b3:75:dd:86:5a:17:56:d8:fc:59:fe:33:e1:31:70:f6:0c:a9:
         2b:c1:7e:ba:c1:b2:b3:8b:e5:27:8a:a4:7e:75:8a:df:e0:cd:
         31:54:95:7d:aa:c6:99:f8:95:ac:13:b0:06:a4:ae:25:f2:6c:
         dc:59:c0:e2:dc:e4:f0:b4:91:b7:2f:34:3d:81:3e:a7:98:13:
         65:b8:9b:bd:a6:f9:98:d8:05:2c:b6:12:47:cf:f2:79:66:7f:
         24:c6:c7:07:a7:9f:8b:37:c3:ee:26:ee:a0:4d:42:07:e5:27:
         6e:b1:2b:74:6e:c7:10:f9:6c:41:20:c9:8a:a5:68:ee:b5:b1:
         84:74:19:8a:86:27:68:1c:25:f4:e8:32:da:ab:fa:b5:33:74:
         5f:6a:a0:ed:42:93:ca:ff:64:1b:91:54:bb:76:4f:71:3e:bf:
         7b:67:f1:02:55:47:fa:2d:2f:b9:d3:50:cc:40:eb:eb:7f:9c:
         96:b2:b6:77:68:5c:3d:23:10:ec:eb:41:3a:c2:3c:f1:1a:4e:
         34:af:90:ed:3d:f8:09:a7:87:b3:e5:99:25:87:57:6d:4c:56:
         69:bb:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:58:11 2025 by rpki-client