Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          GG0Qy2KtghES2BtJTd6ulhJD9KbXylm2TlAciWrb2/g=
Subject key identifier:   85:0C:01:5C:14:88:CE:AF:5E:B4:23:23:AB:97:E5:DB:52:A1:F0:B1
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       07CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          07C2
Signing time:             Sat 06 Sep 2025 21:29:54 +0000
Manifest this update:     Sat 06 Sep 2025 21:29:54 +0000
Manifest next update:     Sat 13 Sep 2025 21:29:54 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: wofgqA37CHvlml79Jlqk2q/qGAjDKLo8xVbiTIKjliQ=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: eWRDLsuHoJc/nz9fA7Tw+nXYU13UB2p69Sw5UsXcXsQ=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: qfHny3neEqciJUugDLFWYSVPfWoplVFPNaZG5R/1xwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Sep  6 21:29:54 2025 GMT
            Not After : Sep 13 21:29:54 2025 GMT
        Subject: CN=68bca7d2-173a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:89:30:2b:a0:3f:ca:05:75:69:d2:47:74:
                    e2:58:d6:6f:23:af:93:29:21:58:3e:0e:fe:25:87:
                    c4:28:f2:a5:52:37:d2:72:36:4c:4e:8c:62:2f:76:
                    4a:c2:84:31:b3:d3:71:06:44:6c:be:89:05:82:93:
                    fe:e1:14:cb:0e:7d:52:36:00:95:65:10:85:25:7c:
                    88:57:b0:b0:a5:66:d7:bb:81:1e:43:20:d4:7c:2d:
                    4b:8f:73:97:e9:eb:e9:53:85:c9:4a:f7:2f:ab:9f:
                    e7:bb:4d:fd:2f:e4:d9:a2:fd:75:ea:d5:f7:42:d7:
                    91:1e:98:59:f9:1c:fc:23:10:f6:fb:58:90:49:3f:
                    d5:43:c9:67:fd:48:a2:b9:60:f1:2e:46:17:4b:2c:
                    04:53:48:9e:59:25:e8:d2:06:da:31:f4:64:7d:9b:
                    52:42:c0:05:49:d3:e4:01:04:9a:d8:bf:28:fa:87:
                    ea:47:9d:b6:3b:97:b7:84:eb:47:40:87:96:ca:e2:
                    3f:35:fe:0d:d6:75:2c:de:1f:5a:4a:22:d6:f1:5c:
                    7a:cf:0c:cc:4e:96:e5:0c:ae:b8:74:88:09:a6:d2:
                    d7:1f:8b:b0:45:cd:74:65:de:ae:6b:04:a1:de:81:
                    98:bf:fa:77:ba:aa:a7:c2:75:2b:b5:45:f1:0a:f0:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0C:01:5C:14:88:CE:AF:5E:B4:23:23:AB:97:E5:DB:52:A1:F0:B1
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:d5:f7:ab:60:db:50:c8:3b:b8:e0:ae:73:02:af:46:1d:
         36:35:8e:5a:01:3b:ba:bf:27:e3:a5:25:1c:cb:94:d3:8c:70:
         f3:b9:26:ef:be:82:fd:8d:8f:e1:cf:30:e8:ba:3a:29:32:a6:
         50:b9:34:f9:7e:ff:d9:ba:8e:c6:d6:55:41:af:24:49:ec:59:
         7e:71:13:9c:07:e8:20:12:ba:5f:13:33:a6:b3:b0:15:93:92:
         30:ba:ae:1e:91:9e:67:44:a7:e2:42:f0:4b:9a:25:71:7c:03:
         e4:9c:9b:bb:aa:9a:1b:41:1c:0e:f3:ee:18:ff:ec:ef:c1:a0:
         08:b6:f5:a4:a6:dc:85:40:f1:7e:fc:2c:45:7c:e8:e7:08:cc:
         3d:8b:bd:8c:24:e8:d0:1f:78:a6:bb:24:81:56:6b:9b:a6:f1:
         84:aa:68:53:0b:c9:46:b5:fa:c9:96:62:04:d9:fc:84:e7:68:
         b1:d6:9a:ed:f0:88:84:19:29:56:42:bc:b5:6c:ef:42:9d:cc:
         10:a7:33:b9:f6:fa:d2:6d:f6:81:ac:a5:4f:2f:85:3d:98:55:
         d2:1d:15:96:49:f9:65:a9:2a:c3:44:52:23:12:bd:58:c9:a8:
         bc:89:cd:3f:00:3c:f1:83:b1:bb:4b:cc:6a:e5:91:8a:fc:43:
         7f:95:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:20:08 2025 by rpki-client