Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          GD9sG3RtsZSy9aibCtOUVAoeHoLHcbpHfBFlC7gpp0Y=
Subject key identifier:   98:67:37:F7:70:6C:AB:27:2F:B2:F5:65:58:47:D4:D1:44:9C:B1:25
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       050C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          04EF
Signing time:             Mon 08 Sep 2025 23:52:57 +0000
Manifest this update:     Mon 08 Sep 2025 23:52:57 +0000
Manifest next update:     Mon 15 Sep 2025 23:52:57 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: b0BmHRROBYLHC3blNJkh975OCCg7c+laBjq0M8FlsCc=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Sep  8 23:52:57 2025 GMT
            Not After : Sep 15 23:52:57 2025 GMT
        Subject: CN=68bf6c59-42be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9b:b7:4f:f3:24:3c:30:04:c9:c5:3f:3f:fe:
                    e1:6e:38:de:a9:65:f4:69:80:4b:bf:5d:ce:0f:de:
                    f3:84:81:1b:cf:93:74:59:86:b1:c9:fe:71:0d:65:
                    69:03:9f:6f:39:ec:44:60:9d:16:1d:a6:40:a9:d4:
                    38:55:f5:fc:7b:37:f4:65:ec:10:cd:7e:93:a4:e7:
                    d1:b7:72:41:10:a9:5f:03:5d:de:78:f6:69:39:1d:
                    b8:5f:76:f9:94:9c:5b:6b:40:e7:8e:6e:bc:d8:ca:
                    df:bf:91:29:52:f9:8b:a3:a1:d8:d7:57:63:07:7a:
                    56:ad:37:0b:c0:77:b9:f6:f8:f5:48:a6:a0:50:cd:
                    03:68:c5:b8:ad:b3:42:28:5b:dd:2e:72:97:1f:14:
                    2f:e2:24:46:b0:c8:a2:a3:10:95:d1:37:54:75:01:
                    73:2e:03:4a:3f:0d:25:39:c1:09:f2:8b:ff:19:31:
                    f0:6e:86:52:58:58:36:aa:36:34:ee:98:08:82:41:
                    b9:6f:c3:77:28:4b:b4:35:5d:cb:a8:b9:b9:5b:99:
                    10:e4:40:b3:ce:0f:8d:5e:6c:30:a7:d7:80:6e:48:
                    73:00:3d:19:18:a5:1f:27:b6:8e:c8:d0:02:6c:37:
                    bd:c3:70:c7:a9:48:ea:e0:f7:be:46:bb:7b:e1:79:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:67:37:F7:70:6C:AB:27:2F:B2:F5:65:58:47:D4:D1:44:9C:B1:25
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:08:ee:ce:4f:49:19:54:4a:dd:55:85:62:99:83:70:72:
         db:5e:dc:db:ff:92:6d:d4:e2:50:cb:da:89:eb:25:84:09:21:
         3f:06:98:43:48:56:37:59:dd:50:45:c7:40:63:de:b0:46:f2:
         b6:68:17:e3:3e:16:98:c6:cc:45:6f:6a:ca:15:d9:a1:65:94:
         34:02:7b:8d:7d:b6:97:87:f0:fe:d6:ef:26:90:83:ba:ed:4f:
         3d:1f:fb:96:62:58:24:e7:f1:cc:46:be:ef:24:7f:2d:64:61:
         fd:26:0b:6f:ca:2a:d7:d2:38:3f:6e:8a:16:70:2c:24:5f:61:
         1c:b5:c4:a4:c6:fa:d6:c3:92:c1:2a:dc:ef:29:86:ed:21:b7:
         12:8a:13:95:aa:f7:bf:7e:89:11:1a:25:33:bd:1d:d3:f3:cb:
         7b:c9:0e:a6:38:ad:f6:d7:cb:16:6b:e6:a9:cc:16:e3:ab:fc:
         67:e7:84:86:f9:2d:11:9a:e2:3b:88:d5:8a:7c:b6:aa:c3:8e:
         e9:1b:c5:92:46:51:43:94:3e:e2:08:59:58:cc:01:38:27:8c:
         4c:9c:22:d2:97:2d:2a:93:b7:45:26:2e:87:e0:59:63:55:50:
         6b:3e:49:0b:c5:49:a4:60:ce:3b:35:d9:dc:76:db:78:92:57:
         fb:66:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:51:34 2025 by rpki-client