Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          LyiXCFN/JgQBSOKWQvYTWWz/FPgTQbVZo+ugQfuYIqg=
Subject key identifier:   F0:4A:BC:EC:BA:2E:82:FE:9F:3E:89:DD:04:50:D8:8B:40:3B:75:D1
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0BE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0BE1
Signing time:             Thu 12 Jun 2025 18:37:43 +0000
Manifest this update:     Thu 12 Jun 2025 18:37:43 +0000
Manifest next update:     Thu 19 Jun 2025 18:37:43 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: BpWlElZ5AEr0SaPy60EidifDfj5cclwpXAt6oJL4bTw=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3049 (0xbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Jun 12 18:37:43 2025 GMT
            Not After : Jun 19 18:37:43 2025 GMT
        Subject: CN=684b1e77-e5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:de:bb:a0:01:58:24:13:d0:f0:3f:27:d2:
                    a4:77:bc:96:5b:f5:87:d8:b4:61:7d:ab:d1:7e:fe:
                    e0:b8:46:1d:ff:68:44:5c:4b:65:73:3a:12:46:78:
                    e7:c2:00:05:1b:90:b8:2e:45:b4:a3:94:1a:4c:73:
                    63:54:00:b6:9b:24:07:a9:af:0b:43:da:60:ae:78:
                    15:fe:b3:7a:5b:c5:61:e6:48:f4:2e:c5:27:9c:57:
                    fd:8d:66:8f:23:89:48:b3:1b:bf:55:03:87:ea:43:
                    a9:22:7c:bb:36:72:64:61:b1:48:e8:e0:99:d3:59:
                    18:35:35:66:62:93:e3:25:34:61:90:87:79:02:ad:
                    4d:b1:0b:26:64:94:7c:fa:10:6b:08:1e:87:f8:18:
                    51:ed:93:10:e8:aa:db:d4:5e:26:d7:87:61:d1:06:
                    49:a7:0c:0f:90:7c:ce:ce:b6:2f:10:3a:3b:99:12:
                    0e:76:b1:86:ec:d1:4d:4f:4f:0d:51:bb:ed:c5:2a:
                    9b:34:4b:99:b1:79:b5:7a:a8:2c:52:05:48:b0:b5:
                    84:56:c3:b2:f6:e3:69:2e:77:cd:68:80:4e:0c:f4:
                    77:48:79:86:fa:6d:14:32:2a:94:91:c1:1c:a2:2f:
                    22:6d:b0:32:06:cb:2f:75:f5:5b:fb:ba:a2:d7:fc:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4A:BC:EC:BA:2E:82:FE:9F:3E:89:DD:04:50:D8:8B:40:3B:75:D1
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:21:87:07:c7:3f:52:12:09:74:b8:98:78:c2:1c:cf:8d:
         08:ab:83:82:00:ae:27:22:49:19:2a:16:05:c8:55:7f:de:87:
         da:b7:d1:fc:89:b3:a2:0e:51:b2:2b:79:24:ee:7f:81:ab:52:
         fd:15:cb:3f:f1:f0:23:b4:fb:e2:0a:12:68:b7:28:ab:79:c1:
         43:67:35:da:fc:bd:08:cb:31:15:d4:d5:6c:2a:e5:59:c7:94:
         39:ee:ff:66:75:0e:dc:ef:fd:1d:d0:bb:2a:72:5d:49:ce:82:
         56:77:7f:94:6a:24:16:e9:7f:89:8f:d4:98:79:99:aa:0d:3e:
         2b:61:03:02:b3:de:5c:61:4b:ee:91:13:a1:d5:3a:16:d4:4f:
         e9:41:23:ff:68:4c:21:e1:1a:80:61:22:4f:fd:db:9e:4b:d8:
         d7:c4:5f:3d:0e:c0:ac:fa:e7:8c:f4:7a:b6:73:fc:a6:aa:bf:
         66:23:11:ef:0f:bf:84:81:f7:6b:b9:44:ab:3c:5a:41:b0:81:
         db:6e:3e:f3:fd:12:44:20:4b:2a:53:e4:ab:68:e1:5a:65:b3:
         55:c6:1e:6b:8b:43:4e:a0:ed:6c:51:aa:a9:35:3d:11:43:01:
         37:37:68:c4:7f:27:ef:d6:26:60:e8:f1:38:b7:2d:58:9b:ad:
         b8:c2:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:42:20 2025 by rpki-client