Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          MOQtSj8saF9mU22HX0tYtMzMZy6l8S9wyxFfy52ybo0=
Subject key identifier:   A0:02:6B:A6:08:C1:03:D3:82:BC:55:67:58:48:8B:A6:F6:86:11:04
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3ED8
Signing time:             Sat 31 May 2025 14:28:50 +0000
Manifest this update:     Sat 31 May 2025 14:28:49 +0000
Manifest next update:     Sat 07 Jun 2025 14:28:49 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: 3PKKfj8gKBEB20SRa+a+b6k8qsXJpMN1k0Q2waGFy50=)
                          2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=)
                          3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=)
                          4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: QIByum0Q8MqWfLpB0ykV4dVr25yJxf+XqNJq06uiuWw=)
                          5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=)
                          6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=)
                          7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=)
                          8: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=)
                          9: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=)
                          10: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=)
                          11: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=)
                          12: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=)
                          13: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=)
                          14: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7378 (0x1cd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: May 31 14:28:49 2025 GMT
            Not After : Jun  7 14:28:49 2025 GMT
        Subject: CN=683b1221-fd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:ef:6e:c0:c9:01:25:91:d6:cb:27:f8:25:
                    b0:3a:8d:aa:97:4a:18:15:35:67:e1:4b:71:cf:2c:
                    96:1e:3b:24:57:8b:a4:30:f3:e8:11:f5:6a:67:a7:
                    20:7f:c3:cb:72:dc:d1:62:dc:a5:3d:cf:b0:24:8d:
                    70:44:82:39:26:35:fc:0c:26:10:cc:84:81:20:c9:
                    00:36:4a:6d:12:3a:8c:57:b7:e7:85:28:3f:28:1b:
                    70:7b:31:ec:c2:da:5b:ba:8c:b1:98:19:2e:bc:7b:
                    94:8a:df:40:36:69:2f:42:fc:df:80:a8:5e:a2:74:
                    56:48:5b:37:ae:68:69:e8:e0:cf:6c:89:1c:ea:9e:
                    2d:d5:68:ca:8e:7b:99:3f:19:51:01:d6:53:ae:b0:
                    3e:80:ff:22:2a:9e:f1:af:df:6c:b2:5b:c7:bf:b1:
                    b2:4a:88:c4:55:81:77:cd:7e:e6:d3:29:25:b5:8d:
                    cd:7f:d6:47:8e:00:92:93:54:04:ba:57:f4:ff:75:
                    c4:15:94:d4:9f:d5:f3:f5:30:da:1d:82:53:af:83:
                    5e:ce:ad:96:cb:77:b3:2b:de:a3:ec:56:8f:a4:4a:
                    3c:d9:82:a5:a8:15:98:a3:9d:5f:04:1d:21:39:46:
                    47:3f:88:f5:5c:93:40:2c:f7:ba:b4:89:0b:32:5b:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:6B:A6:08:C1:03:D3:82:BC:55:67:58:48:8B:A6:F6:86:11:04
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:6a:a5:59:cd:58:89:d6:76:2e:ae:f7:56:4e:2c:da:15:
         7e:9b:d0:c3:9d:c1:0e:11:c8:aa:4f:03:7c:4a:cd:0e:4d:27:
         b6:24:a6:95:ec:35:ae:7c:9d:95:e6:89:07:ef:3e:c2:54:9a:
         8e:3b:05:aa:b7:fb:e2:56:c3:d5:48:06:94:58:2f:58:a2:51:
         72:b3:5a:99:87:35:73:c0:cd:dd:ec:fd:d0:54:28:2d:1b:49:
         27:71:2d:88:d8:79:b8:28:3d:60:7a:1b:9b:a8:ba:8d:cd:c4:
         c7:51:c9:1d:8c:93:65:9a:b1:5a:1f:0f:1a:a7:0f:52:fd:48:
         40:32:58:ea:ef:66:0c:4a:c6:a9:4a:1b:47:48:88:56:e3:9b:
         f0:e1:0e:ba:5b:5a:fd:fc:a4:70:5b:4d:96:35:bd:2d:1b:6e:
         93:b2:6d:77:a3:34:42:a1:2c:6f:b3:85:b5:8f:11:ce:8c:33:
         9c:4b:52:76:97:d7:08:81:36:1e:a0:1b:a2:3f:ec:c4:99:36:
         46:27:47:7e:12:5d:af:b3:eb:83:b0:32:1b:cd:1d:3b:c9:e7:
         06:b8:e6:db:65:74:89:0e:25:27:42:1c:17:7d:b1:44:59:ef:
         55:eb:5d:7d:6f:cf:a2:e1:f0:33:4d:05:ea:0d:33:4e:d9:e8:
         11:32:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:53:44 2025 by rpki-client