Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
File:                     ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json)
Hash identifier:          E7ASEYd6eSJSNi1AWPsdIbc2KvJdzQwy7hbwE/u0g2o=
Subject key identifier:   F6:F2:08:C3:F6:8C:DD:BB:7E:19:AC:06:16:06:41:94:D9:A0:7D:3C
Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64
Certificate issuer:       /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
Manifest number:          7B
Signing time:             Wed 11 Jun 2025 06:09:28 +0000
Manifest this update:     Wed 11 Jun 2025 06:09:28 +0000
Manifest next update:     Wed 18 Jun 2025 06:09:28 +0000
Files and hashes:         1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: s0+HdXnVa9HfKW0HLyPEZI2iVnYhGx4tig6l2OyW7O0=)
                          2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 06:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64
        Validity
            Not Before: Jun 11 06:09:28 2025 GMT
            Not After : Jun 18 06:09:28 2025 GMT
        Subject: CN=68491d98-2c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:59:f8:82:9c:71:1b:07:e1:e4:61:80:68:
                    10:7a:ea:8e:6f:48:1d:2a:e3:4f:a8:81:65:a0:aa:
                    9d:b2:0b:a4:7a:e5:d1:e8:13:6c:78:9b:eb:96:a7:
                    4b:07:23:c4:80:a8:31:e9:69:84:70:e1:b6:ed:bf:
                    a6:92:a6:b1:e3:2f:8f:b5:22:7c:7e:10:06:1e:fa:
                    6f:d6:7d:57:58:99:87:d3:8a:a5:1e:12:8d:13:30:
                    c3:55:37:a7:92:e3:c5:b3:8e:46:5a:33:1b:ef:45:
                    1a:66:58:c2:95:ce:1b:83:b0:06:d8:e8:53:46:fc:
                    19:e5:4a:18:34:a7:f1:38:79:99:46:4e:b8:9d:49:
                    fd:26:38:d2:82:c8:de:6f:62:89:58:9c:98:1e:a2:
                    fb:37:60:c6:7d:53:0a:ae:78:39:7b:98:15:20:19:
                    ea:4d:04:e6:c4:42:9f:90:5c:a6:a8:46:89:62:a3:
                    23:d8:4b:15:d5:3d:91:1d:82:8e:60:b6:52:5f:80:
                    04:de:32:bc:46:b3:74:cd:5d:31:87:3e:2b:7d:e2:
                    41:35:bd:cb:9c:8d:85:03:58:27:7b:e2:6d:a6:86:
                    2e:20:df:d0:0a:95:2f:3f:28:63:d3:eb:2a:20:f0:
                    5a:b2:3f:68:08:9d:0c:23:c1:32:a9:c7:02:b0:f1:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:08:C3:F6:8C:DD:BB:7E:19:AC:06:16:06:41:94:D9:A0:7D:3C
            X509v3 Authority Key Identifier:
                keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:6c:1a:b1:27:4d:86:7b:73:92:12:f5:4c:cf:32:13:2d:
         61:02:da:27:48:7f:ea:70:fe:43:b6:d2:a5:83:e4:91:1a:6a:
         a5:5b:e4:bc:ce:62:1c:97:f8:d4:ec:74:bf:d7:4d:65:b9:5e:
         01:07:f5:c6:7b:01:c2:16:a8:29:d4:bd:d9:e6:34:b6:f5:73:
         93:67:27:73:2a:14:73:51:a8:60:0d:f1:79:55:c1:23:11:e9:
         7e:78:25:3b:3f:21:64:4c:0f:70:f7:a7:73:b9:ee:67:54:9a:
         af:38:2c:a6:b1:41:59:50:b2:af:bc:ca:69:27:f4:dd:cc:ae:
         f4:4e:41:60:0b:1b:fc:79:d8:59:7e:7d:c7:3c:ac:ce:f7:4b:
         24:62:16:fa:a5:eb:45:e2:25:f3:6d:65:f0:16:17:ed:6e:ae:
         b1:a5:11:63:85:c6:00:51:db:fc:8e:9b:6d:4e:ed:f8:11:49:
         ae:3a:89:63:a9:ca:f8:05:30:35:b0:68:8c:46:5b:08:ac:8c:
         63:d2:ab:b6:e8:d2:39:af:3d:fe:e1:8f:55:0a:18:a0:a0:8e:
         94:b7:d9:73:4f:b3:b6:a0:03:da:ae:9a:42:6a:28:9a:31:c2:
         1f:b6:97:70:8b:2f:87:2b:67:6c:2a:39:9e:5a:e1:1a:ee:2f:
         91:c2:25:69
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
REQyMzExMC8GA1UEBRMoNjY4NDUzRkY1NjkxODFGRTFBRUFBMDYzN0U0ODI3NzQy
MDExMkM2NDAeFw0yNTA2MTEwNjA5MjhaFw0yNTA2MTgwNjA5MjhaMBgxFjAUBgNV
BAMTDTY4NDkxZDk4LTJjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBuVn4gpxxGwfh5GGAaBB66o5vSB0q40+ogWWgqp2yC6R65dHoE2x4m+uWp0sH
I8SAqDHpaYRw4bbtv6aSprHjL4+1Inx+EAYe+m/WfVdYmYfTiqUeEo0TMMNVN6eS
48WzjkZaMxvvRRpmWMKVzhuDsAbY6FNG/BnlShg0p/E4eZlGTridSf0mONKCyN5v
YolYnJgeovs3YMZ9UwqueDl7mBUgGepNBObEQp+QXKaoRolioyPYSxXVPZEdgo5g
tlJfgATeMrxGs3TNXTGHPit94kE1vcucjYUDWCd74m2mhi4g39AKlS8/KGPT6yog
8FqyP2gInQwjwTKpxwKw8RXJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9vIIw/aM
3bt+GawGFgZBlNmgfTwwHwYDVR0jBBgwFoAUZoRT/1aRgf4a6qBjfkgndCARLGQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERDIzL0VBNzUwQkVDOTEw
QzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxH
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWm9SVF8xYVJnZjRhNnFCamZrZ25kQ0FSTEdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
RDIzL0VBNzUwQkVDOTEwQzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0
YTZxQmpma2duZENBUkxHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIHNbBqxJ02Ge3OSEvVMzzITLWEC2idIf+pw/kO20qWD5JEaaqVb5LzO
YhyX+NTsdL/XTWW5XgEH9cZ7AcIWqCnUvdnmNLb1c5NnJ3MqFHNRqGAN8XlVwSMR
6X54JTs/IWRMD3D3p3O57mdUmq84LKaxQVlQsq+8ymkn9N3MrvROQWALG/x52Fl+
fcc8rM73SyRiFvql60XiJfNtZfAWF+1urrGlEWOFxgBR2/yOm21O7fgRSa46iWOp
yvgFMDWwaIxGWwisjGPSq7bo0jmvPf7hj1UKGKCgjpS32XNPs7agA9qumkJqKJox
wh+2l3CLL4crZ2wqOZ5a4RruL5HCJWk=
-----END CERTIFICATE-----
Generated at Wed Jun 11 14:15:04 2025 by rpki-client