Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
File:                     zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json)
Hash identifier:          2bezIXqnyayErR8/R/DynoMfkfCVT568xdEyaEQrFyU=
Subject key identifier:   15:33:0C:C5:EB:0A:BB:A0:78:73:87:75:36:D1:DC:16:83:D1:F0:02
Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
Certificate issuer:       /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Certificate serial:       0642
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
Manifest number:          0639
Signing time:             Thu 12 Jun 2025 22:18:47 +0000
Manifest this update:     Thu 12 Jun 2025 22:18:46 +0000
Manifest next update:     Thu 19 Jun 2025 22:18:46 +0000
Files and hashes:         1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: sdd+JQfdaHmrOh7QThvV9H65rdsgZxBdbrhxkQxKgIE=)
                          2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=)
                          3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
                          rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
        Validity
            Not Before: Jun 12 22:18:46 2025 GMT
            Not After : Jun 19 22:18:46 2025 GMT
        Subject: CN=684b5246-905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:36:1a:7c:78:69:f2:0d:34:89:ca:96:22:
                    49:9d:c3:6e:cc:77:a8:ab:75:99:10:4d:5d:32:c8:
                    79:49:36:49:29:45:e5:d9:0f:05:89:30:a4:96:1b:
                    9c:ed:73:aa:92:bd:97:87:74:7e:8f:f0:2d:83:71:
                    e6:5e:73:95:b2:39:94:42:96:72:d2:dc:29:86:5b:
                    ff:fd:ca:16:df:8a:28:c8:0a:e7:d1:d7:dc:c1:76:
                    93:a5:83:ab:68:37:0c:6d:fb:6a:90:a1:15:da:03:
                    8d:78:89:34:44:54:23:26:f9:2a:bf:f4:0c:f5:38:
                    f5:98:a5:36:75:e5:b8:1d:0a:ab:6b:aa:fc:c2:3f:
                    8c:19:4e:de:62:4d:24:fa:7c:53:cf:80:34:51:d2:
                    32:51:7b:92:e5:63:47:e9:bd:84:54:58:4c:a6:57:
                    69:39:0b:2f:25:60:b1:6b:44:56:47:e5:2d:60:b0:
                    dc:15:36:b6:c3:05:79:2a:98:73:10:c5:41:3c:c7:
                    03:d4:0e:24:04:9b:87:81:9d:78:b8:17:44:f3:48:
                    ca:23:61:ea:b7:25:08:95:fc:b5:e7:41:c6:f4:1e:
                    62:3f:0c:ee:df:ad:ce:93:dd:26:f0:52:a9:ec:eb:
                    33:39:ec:d7:a4:7c:ea:53:d2:aa:91:ab:a1:b7:fa:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:33:0C:C5:EB:0A:BB:A0:78:73:87:75:36:D1:DC:16:83:D1:F0:02
            X509v3 Authority Key Identifier:
                keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:2f:29:90:cb:55:fd:a5:de:a2:a3:a7:ab:e7:18:05:e4:
         bb:f8:03:1b:08:45:f8:05:c7:8c:44:db:5d:01:ad:8b:e1:07:
         f1:a2:df:e8:d6:ae:ff:50:a7:29:62:82:34:62:55:75:c2:fa:
         e4:d5:5c:aa:d4:ed:cf:56:c5:6e:a8:7a:3e:dd:62:90:17:d0:
         4c:fa:a1:36:b4:02:63:d3:07:c7:71:cb:2f:98:83:54:95:f1:
         ee:12:3c:75:b2:e3:a1:aa:01:23:15:04:73:92:4b:7b:1d:b1:
         f2:fc:cd:92:da:e7:e7:c8:b8:5e:bb:68:c0:9e:8c:23:7e:32:
         e3:68:ae:44:97:91:3d:2b:fa:7e:3f:be:c6:91:77:e8:99:17:
         46:39:2b:21:72:95:4f:82:0f:fc:d2:02:0f:f4:79:40:31:bc:
         90:9b:89:fb:a0:72:0a:27:0f:58:28:89:7d:cd:f4:08:41:4c:
         1e:be:06:9d:22:b3:f0:54:31:f0:1a:53:27:5f:c3:f2:5d:bc:
         c4:4e:62:c7:fe:cc:da:88:7d:68:98:68:b7:86:47:3d:2e:87:
         37:3e:3e:5c:f6:3e:e8:11:2f:cb:85:f7:a6:df:6d:02:56:a7:
         ea:77:51:8d:84:a0:de:27:62:f6:82:ba:58:9e:5a:67:9f:cb:
         98:40:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:29:32 2025 by rpki-client