Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
File:                     ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json)
Hash identifier:          RBIo60q115sqnQB8R3tc2UBXLuYEsR1BYcR9JD5Y4/A=
Subject key identifier:   51:7A:7E:9F:CF:BF:BA:87:37:9F:87:0E:FA:0F:8B:E5:D1:FB:4B:D4
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Certificate issuer:       /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial:       0A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
Manifest number:          0A03
Signing time:             Wed 22 Oct 2025 20:30:17 +0000
Manifest this update:     Wed 22 Oct 2025 20:30:17 +0000
Manifest next update:     Wed 29 Oct 2025 20:30:17 +0000
Files and hashes:         1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: yPNrGneyRUpyOq/lUps3YXcpJAfat8lOZZNh1milQsw=)
                          2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=)
                          3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl
                          rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 20:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
        Validity
            Not Before: Oct 22 20:30:17 2025 GMT
            Not After : Oct 29 20:30:17 2025 GMT
        Subject: CN=68f93ed9-9d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:61:6a:3a:80:b9:a9:81:27:12:cc:08:51:
                    de:f3:df:39:b1:f5:a2:40:cf:2f:66:c2:88:ff:51:
                    13:f8:ce:67:94:09:b3:af:14:bb:8f:1e:6b:e9:f5:
                    a3:8e:43:68:0c:b2:2c:2f:8d:51:11:95:d4:aa:d8:
                    2a:22:39:76:19:f1:a2:8d:f0:03:76:88:6c:e8:cd:
                    2a:5d:93:f9:86:38:1f:fb:e1:65:0b:45:28:e1:3f:
                    b0:ef:d7:56:74:5c:94:2b:38:85:e5:45:45:5d:32:
                    07:21:db:a4:49:15:92:59:05:ad:87:df:60:46:3a:
                    e0:4a:e1:71:98:d5:c9:25:ae:ca:ca:e1:65:99:c7:
                    cf:23:af:21:4a:74:8a:f4:db:bb:f8:a1:8d:6c:fe:
                    8b:bb:22:7f:8d:dc:80:18:58:b3:bb:28:ed:c2:ca:
                    50:ed:14:e7:b3:9a:e3:90:09:24:52:02:66:33:c4:
                    48:b7:c2:b2:20:1f:30:fa:4a:fe:9e:63:42:78:2d:
                    a2:64:7d:bb:6a:b4:e9:ff:1b:1c:e2:3a:67:fc:70:
                    0f:02:e9:d3:c7:03:e5:2b:f5:29:8c:af:af:d6:85:
                    91:40:5a:2c:b4:63:0e:02:ed:52:02:d3:60:3e:d3:
                    d5:53:18:b2:36:3c:ce:06:63:32:58:81:b5:c7:e0:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:7E:9F:CF:BF:BA:87:37:9F:87:0E:FA:0F:8B:E5:D1:FB:4B:D4
            X509v3 Authority Key Identifier:
                keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:85:75:40:c7:0a:c7:26:3f:dd:90:ff:f4:d1:bf:a4:c2:b6:
         6f:ae:e6:46:f2:bd:6c:8e:77:71:e0:7d:25:6c:96:4b:79:77:
         44:96:74:80:b6:9b:32:0b:28:b1:94:a5:5b:e9:66:15:39:f4:
         ea:54:ba:b1:9e:1d:0b:19:8a:3d:e3:9e:36:30:c7:46:23:27:
         22:69:cd:5c:b5:11:f8:12:63:8f:23:62:80:97:7c:23:c4:d6:
         eb:c5:ad:d3:61:07:ce:f0:30:7e:fc:16:44:c2:93:25:6e:da:
         bb:a4:e2:c0:40:71:a4:25:19:4a:24:fe:2d:f2:1a:c2:77:21:
         96:21:14:f5:62:d8:c3:cf:d0:fb:b1:a1:21:60:3f:73:d8:35:
         95:50:53:3d:25:38:ad:a0:e3:4a:49:be:fc:72:49:d0:39:cc:
         24:54:df:6a:6d:8c:8f:55:f7:d8:75:0c:75:ed:af:6c:99:6e:
         a3:7a:a6:fd:d2:79:a9:8e:85:3d:5f:05:8c:b0:f7:97:e4:3d:
         00:57:46:38:3d:6f:5c:32:bc:46:0c:43:c3:ea:d3:2b:37:b6:
         2d:b4:81:31:9e:4e:6e:81:d7:3e:27:72:3c:a6:eb:b6:47:3e:
         0b:64:f0:4d:a4:c1:5e:19:d0:4c:e8:5b:62:c3:d9:ee:c5:ea:
         6e:d6:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:54:55 2025 by rpki-client