Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          pPsWo9iOlf9dTR0gvMzUgdDBFIx4lpoIiisfTDoon+g=
Subject key identifier:   C4:C0:91:F4:CE:F7:F9:59:C8:02:E3:AA:21:C8:A5:C6:2E:61:93:4D
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          0395
Signing time:             Sat 31 May 2025 00:59:42 +0000
Manifest this update:     Sat 31 May 2025 00:59:42 +0000
Manifest next update:     Sat 07 Jun 2025 00:59:42 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: 3TueFjEzVh1rUGDCRZUy6GQc1pMg1EeszHdWfdom8aA=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: Yw6khJ43zV0yhFLOubPvbZbVWU58is2F1BhtT8qiLaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
                          rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: May 31 00:59:42 2025 GMT
            Not After : Jun  7 00:59:42 2025 GMT
        Subject: CN=683a547e-c9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:7f:cf:ad:9d:a2:08:de:c0:a8:7c:4f:f9:
                    3b:16:a0:7e:72:a4:5f:a4:7e:ca:b2:e3:cc:3c:f5:
                    68:42:aa:d8:6a:26:10:24:e0:bb:c9:63:d7:dc:02:
                    d5:ed:9a:cc:86:21:da:ba:1f:48:70:3a:54:7a:97:
                    a6:52:a1:9f:76:c4:f6:f4:5a:75:89:33:7f:2a:a6:
                    d9:a8:ce:9b:63:f8:bd:47:63:12:36:8f:47:c8:9b:
                    65:33:57:68:22:86:f4:fb:3b:54:0b:5e:15:4c:eb:
                    25:64:0f:38:a8:6e:e2:8e:d9:e1:40:00:5a:d5:62:
                    79:9e:e7:aa:ba:80:b3:46:a0:fe:27:6d:3e:b6:d1:
                    65:16:06:ae:bf:e7:7b:b7:4c:26:44:25:24:48:47:
                    75:6f:4c:22:4a:2e:d6:92:aa:96:d9:44:6f:a9:b9:
                    b5:0a:26:68:b2:95:64:78:a3:99:5d:47:6e:e9:81:
                    6d:fb:f0:71:e5:1e:36:5d:3d:08:29:1d:45:b2:b2:
                    99:81:86:5f:c3:7b:4d:69:6c:b6:22:6c:f3:e1:8c:
                    73:1d:55:c8:9a:b4:28:09:18:73:a5:52:55:a3:43:
                    94:54:3d:e0:3a:20:1c:31:19:33:98:70:6b:08:38:
                    a8:1c:f4:72:c1:f5:73:da:73:46:cc:0c:2d:42:53:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C0:91:F4:CE:F7:F9:59:C8:02:E3:AA:21:C8:A5:C6:2E:61:93:4D
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:e4:a8:95:ec:a9:7a:46:8d:cd:29:9a:f8:b8:d2:5f:76:
         27:e1:5b:89:7f:cd:23:48:25:c8:06:49:c6:bb:7c:83:d0:73:
         d2:5c:93:25:e4:0b:96:e6:62:37:af:cf:21:84:8f:08:d5:7c:
         09:f1:c1:05:db:40:bb:15:6b:08:be:c9:03:47:ef:bf:62:d6:
         ad:76:0d:af:c9:c9:d8:b1:af:f1:85:6a:21:23:4a:6d:c4:45:
         6b:c6:2e:ed:d9:cb:11:9b:63:d2:e1:99:ef:1c:c8:84:75:13:
         be:99:a2:7e:50:13:f9:84:d4:01:97:22:72:d8:e7:53:e0:7a:
         d6:65:ad:b9:39:7a:20:57:50:bb:a7:14:4d:7e:5b:83:3f:ed:
         35:6e:80:43:e2:a7:0c:fd:71:e4:c6:9a:ac:cd:f2:6f:3f:17:
         ba:12:f8:83:ed:c3:fd:3d:09:81:d4:b4:93:05:91:01:5b:77:
         61:4c:13:27:9a:3a:dc:b2:04:99:0f:af:8f:11:f0:25:7b:21:
         7d:1a:ad:0e:f9:fd:fa:14:45:0a:f0:27:78:6d:11:89:97:a1:
         fa:ce:ef:4f:05:8e:51:01:b3:d6:5d:2c:15:63:da:9c:39:f3:
         eb:99:f7:0f:f6:9e:b3:a7:81:87:bd:7b:66:af:5b:2c:13:40:
         af:5a:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:28:45 2025 by rpki-client