Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File:                     ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier:          ZXy4wZ5KXZUIRN4x0ooBBc8ir5dBOvWfJbG+XhhmgvA=
Subject key identifier:   B4:F4:6A:93:C3:B6:B6:BE:71:9E:82:7F:71:9A:DE:2F:7D:BA:61:5B
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       0594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number:          0588
Signing time:             Sun 08 Jun 2025 22:55:17 +0000
Manifest this update:     Sun 08 Jun 2025 22:55:17 +0000
Manifest next update:     Sun 15 Jun 2025 22:55:17 +0000
Files and hashes:         1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: 0AVRPoyjrxmPMw8cD3tADppdKHmIQVuNFSISCaWkVfU=)
                          2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Jun  8 22:55:17 2025 GMT
            Not After : Jun 15 22:55:17 2025 GMT
        Subject: CN=684614d5-a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:99:b8:33:65:2b:ab:23:54:ae:b1:23:d6:
                    44:1c:b6:38:12:8e:0e:c4:dc:e9:78:01:42:e3:3e:
                    84:26:7f:d4:e8:9c:67:ed:d2:d3:29:d4:bc:34:49:
                    8d:02:5d:0f:01:b0:ec:d1:e7:96:2c:b0:be:ae:ff:
                    ae:dd:0c:93:21:30:f4:ed:bb:9f:3a:14:4d:9e:0d:
                    60:21:d3:ce:20:13:62:28:29:e7:ec:57:14:be:4e:
                    14:5d:3f:2a:6c:0c:db:cc:73:ae:65:50:53:53:e6:
                    d1:ac:ed:a4:94:49:98:39:f4:75:ea:98:88:f8:a3:
                    c9:db:80:e0:6d:92:48:c4:8f:1e:8d:c6:5f:71:21:
                    6c:06:f7:2a:83:75:d4:db:3e:0f:00:b6:d7:5f:d3:
                    a6:43:55:c5:9e:d2:cb:17:15:85:45:24:ab:2d:c4:
                    c7:af:26:8e:a6:ce:75:7f:f4:06:fd:48:f4:fc:ae:
                    86:f3:36:16:35:8d:57:59:7b:1d:64:a6:b6:e1:85:
                    ce:39:20:b4:71:b1:6a:23:51:08:7e:81:b2:b1:30:
                    88:ca:b5:4a:30:5f:82:30:a9:57:e1:3a:a7:5a:0d:
                    74:33:dd:60:6b:5c:9b:a1:36:48:5a:b2:6d:21:1a:
                    68:69:40:0d:db:07:9b:dd:d5:66:b0:c5:ad:4c:c2:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:6A:93:C3:B6:B6:BE:71:9E:82:7F:71:9A:DE:2F:7D:BA:61:5B
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:54:97:47:3b:de:62:b4:f9:f4:01:81:ee:71:92:60:f0:
         b9:32:85:7e:b3:13:ab:1b:c7:d3:dd:06:82:f3:0c:ee:46:a9:
         1e:db:4a:bb:92:89:14:f7:45:fd:e8:e7:e4:fb:43:92:b2:87:
         7b:39:e3:56:c0:f0:55:4a:b3:f4:09:64:4b:9b:1f:39:95:dd:
         64:59:44:3d:aa:12:c7:a3:83:ca:a1:f3:56:d2:9c:0f:fc:4d:
         04:b5:d8:18:08:ac:6d:b3:33:68:0f:83:c9:91:f7:a3:68:50:
         0a:ac:f2:8b:8c:e1:b0:1e:d3:fa:74:19:d6:d3:6a:f1:d8:b2:
         07:7e:3a:96:f0:d4:6d:8f:c3:73:ee:a6:da:c1:af:72:7b:da:
         ed:2b:3e:5e:d4:22:7b:bc:79:37:33:09:85:cc:c8:59:d3:78:
         2a:86:fc:67:17:b4:83:24:2d:b5:93:8e:ce:1a:98:25:75:b0:
         97:ef:f8:c1:b3:ed:73:94:8a:38:ee:4e:50:3b:15:1e:9b:cc:
         28:ac:ed:fd:d9:7e:3e:95:71:3b:e2:8d:40:85:76:64:5a:74:
         e9:5c:51:c3:ee:8c:27:48:77:0c:1f:95:25:d7:1a:8a:a6:69:
         80:47:63:2b:d3:cf:f7:2a:1e:38:4b:51:62:04:e4:4f:24:99:
         6d:29:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:54:24 2025 by rpki-client