Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File:                     ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier:          FilLt2JYsEvkqvo6Bh6NJZzINi/ARuR1VKm1retUGzg=
Subject key identifier:   EA:BC:2F:6A:14:25:55:44:74:DA:0F:2C:B6:3D:9A:17:92:7F:49:79
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer:       /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number:          80
Signing time:             Sun 07 Sep 2025 07:10:59 +0000
Manifest this update:     Sun 07 Sep 2025 07:10:58 +0000
Manifest next update:     Sun 14 Sep 2025 07:10:58 +0000
Files and hashes:         1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: 6atjZWqy6CFyGh67vhYwX6ml1abX5nzPJdDRAv9i9UU=)
                          2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
                          rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
        Validity
            Not Before: Sep  7 07:10:58 2025 GMT
            Not After : Sep 14 07:10:58 2025 GMT
        Subject: CN=68bd3002-c228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:7f:8f:79:74:8f:c0:9e:24:c6:80:45:0a:
                    29:5b:20:f4:79:49:5a:41:9d:f3:aa:65:9d:ee:ee:
                    2f:54:cd:05:10:41:41:02:f5:c8:d3:39:af:2a:81:
                    40:9a:c2:91:f6:1b:64:8e:f2:ad:2d:8b:b2:71:cd:
                    89:b2:21:ea:3f:0d:85:46:73:f7:7f:d9:7a:4e:1a:
                    ec:46:b8:f2:0f:f4:73:65:02:a4:6c:c8:50:aa:d2:
                    5e:6a:7e:e1:e9:6e:3a:f6:70:d0:d4:ba:48:f2:0d:
                    49:23:81:c7:77:10:81:97:3c:c6:0a:16:d2:c1:c3:
                    9b:87:b3:03:ce:96:92:5d:f9:f9:69:3f:08:b4:48:
                    90:0d:86:57:74:1e:17:a7:b0:de:35:9f:27:ff:5f:
                    91:65:af:1b:7f:60:d3:eb:a5:84:dc:89:11:92:ba:
                    0b:a8:40:ad:38:b0:00:f3:3d:cf:b6:4e:30:49:5c:
                    20:a7:fc:93:3b:2e:7d:6d:0e:a7:82:18:61:60:b7:
                    85:9b:47:6e:f5:de:43:68:3c:53:92:fa:19:fe:83:
                    41:63:e7:92:ae:16:45:99:d8:5e:c3:42:9d:58:49:
                    65:d5:e9:84:3d:86:08:42:15:58:ca:88:84:a5:ea:
                    be:bf:aa:28:e1:1e:d4:a0:82:a9:d4:9c:ac:2b:5f:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:2F:6A:14:25:55:44:74:DA:0F:2C:B6:3D:9A:17:92:7F:49:79
            X509v3 Authority Key Identifier:
                keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:48:eb:61:e2:1e:c7:35:f4:76:1f:c4:88:79:0b:03:c0:76:
         2e:75:4d:40:ad:26:48:55:1d:c3:ab:d1:e7:65:a4:6d:91:1f:
         b4:c1:22:6c:27:d3:25:a2:66:48:ea:62:bf:2e:2f:ee:2b:7a:
         e1:62:49:b6:11:9d:4d:79:88:8d:86:a0:59:d3:1c:2d:99:07:
         e9:96:a1:d7:cd:67:73:2d:71:ef:ed:df:d4:0f:29:a1:de:7c:
         47:df:f3:6f:63:7d:a3:19:2b:4c:ea:43:5a:a1:f5:50:72:d8:
         35:a8:59:07:b9:7e:09:76:b1:79:7d:07:be:51:38:d4:8d:d8:
         8e:58:d2:bb:d9:40:08:40:72:24:cf:90:43:77:6d:f3:37:4e:
         3a:89:6b:0a:46:cf:17:dd:05:37:1a:d6:c8:b9:93:e0:ae:19:
         b8:73:86:a0:cf:38:5e:ac:39:53:d5:88:d3:90:03:31:de:dd:
         d8:ae:4f:1f:cc:59:3c:99:12:00:d0:76:c7:45:ce:97:9f:22:
         97:e3:a4:dc:a9:47:05:e4:15:2c:52:49:00:2f:3c:64:9f:7e:
         a7:4b:52:f7:7d:5d:0a:0d:bb:11:b7:bf:89:80:15:01:c3:03:
         2c:85:11:f1:23:c7:df:40:de:05:a9:5d:c9:cd:e4:8e:13:02:
         b2:91:94:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG
OTM4MTMyNzUwHhcNMjUwOTA3MDcxMDU4WhcNMjUwOTE0MDcxMDU4WjAYMRYwFAYD
VQQDEw02OGJkMzAwMi1jMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0sl/j3l0j8CeJMaARQopWyD0eUlaQZ3zqmWd7u4vVM0FEEFBAvXI0zmvKoFA
msKR9htkjvKtLYuycc2JsiHqPw2FRnP3f9l6ThrsRrjyD/RzZQKkbMhQqtJean7h
6W469nDQ1LpI8g1JI4HHdxCBlzzGChbSwcObh7MDzpaSXfn5aT8ItEiQDYZXdB4X
p7DeNZ8n/1+RZa8bf2DT66WE3IkRkroLqECtOLAA8z3Ptk4wSVwgp/yTOy59bQ6n
ghhhYLeFm0du9d5DaDxTkvoZ/oNBY+eSrhZFmdhew0KdWEll1emEPYYIQhVYyoiE
peq+v6oo4R7UoIKp1JysK1/vkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq8L2oU
JVVEdNoPLLY9mheSf0l5MB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC
RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na
YlNXOGZNZmxreVQ1T0JNblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADSOth4h7HNfR2H8SIeQsDwHYudU1ArSZIVR3Dq9HnZaRtkR+0wSJs
J9MlomZI6mK/Li/uK3rhYkm2EZ1NeYiNhqBZ0xwtmQfplqHXzWdzLXHv7d/UDymh
3nxH3/NvY32jGStM6kNaofVQctg1qFkHuX4JdrF5fQe+UTjUjdiOWNK72UAIQHIk
z5BDd23zN046iWsKRs8X3QU3GtbIuZPgrhm4c4agzzherDlT1YjTkAMx3t3Yrk8f
zFk8mRIA0HbHRc6XnyKX46TcqUcF5BUsUkkALzxkn36nS1L3fV0KDbsRt7+JgBUB
wwMshRHxI8ffQN4FqV3JzeSOEwKykZSG
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:46:14 2025 by rpki-client