Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          rYvJcm3BNyRLcOpc+rJ0k1k6p9vOlCiBT1GoSbBaG24=
Subject key identifier:   DE:A5:B5:33:75:32:99:6A:5F:0E:21:92:7A:89:86:9D:A4:AE:95:AA
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          B5
Signing time:             Sat 23 Aug 2025 06:26:13 +0000
Manifest this update:     Sat 23 Aug 2025 06:26:12 +0000
Manifest next update:     Sat 30 Aug 2025 06:26:12 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: +DTzsdJPOYLc59BQpHQag4R+1xGANvuaVi8Of9ACj7A=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Aug 23 06:26:12 2025 GMT
            Not After : Aug 30 06:26:12 2025 GMT
        Subject: CN=68a95f04-9f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:ef:be:19:34:4a:7a:1c:33:f4:9c:e4:9f:
                    c3:f6:13:fb:02:6b:37:ea:66:fd:f1:d8:02:aa:1d:
                    04:dc:59:df:c1:c5:d3:ca:54:ed:f5:68:96:0c:52:
                    d6:5f:f7:93:f7:3a:8f:29:e7:a4:79:94:2b:78:ad:
                    73:d8:89:21:31:f5:81:cc:ed:e7:57:90:cb:f1:15:
                    23:5b:35:ee:be:87:31:28:bf:70:1b:bf:ff:35:cf:
                    a5:f6:d0:c4:d6:ea:e0:09:4e:08:33:a1:70:09:22:
                    12:7f:da:a4:54:1f:e3:ab:08:13:0c:05:41:aa:47:
                    94:6a:9c:26:1a:f3:77:7c:2a:18:61:a8:35:b9:0c:
                    2a:ef:85:40:c2:7f:1c:bd:8c:80:bf:3d:3e:5f:24:
                    9d:88:09:6d:94:c4:fb:89:76:f9:2a:de:fa:f4:69:
                    44:d9:f2:18:94:23:61:d3:32:40:ef:30:68:c6:c5:
                    af:7b:67:91:13:95:9a:18:bf:75:a1:8b:74:7d:cb:
                    0f:9f:12:fc:ff:fb:69:91:76:53:97:b5:0a:5f:73:
                    9b:2d:e0:74:d5:26:d7:96:e7:4d:b2:0c:d6:67:ee:
                    b4:c5:da:3d:e0:91:e7:6e:8a:74:38:ad:12:31:4f:
                    f3:ed:ae:50:61:da:f8:3e:13:dd:a4:c4:ea:cf:58:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:B5:33:75:32:99:6A:5F:0E:21:92:7A:89:86:9D:A4:AE:95:AA
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:34:4e:6c:50:d9:05:38:24:30:62:1f:94:fd:f1:8b:d8:b0:
         d3:43:c1:66:1f:12:77:74:91:f8:fd:1d:9b:e4:1f:1c:e8:f7:
         4f:6a:9c:40:9b:0e:6d:08:af:2c:d9:20:33:46:40:69:e9:65:
         77:94:da:b7:7d:c3:f3:5a:5d:11:d8:64:bc:09:92:4d:e2:cc:
         08:5f:71:fd:de:40:19:82:17:95:0f:eb:a4:88:03:8c:6a:02:
         8d:c6:0a:cd:6a:18:48:3d:ba:ca:8b:fa:b6:0b:0c:2a:f7:f0:
         f1:38:fe:56:04:10:f2:c6:f9:2a:26:e0:bb:90:7f:8f:f5:0b:
         71:ee:ef:79:2e:38:e0:eb:3a:be:fb:0e:34:36:07:88:a6:72:
         70:09:34:d2:4d:cf:99:9b:b9:1d:c4:6a:86:bf:49:f4:0c:4f:
         35:9a:dd:22:c8:84:0a:c9:fa:0c:69:03:c3:7c:9c:61:d3:f8:
         b3:cd:de:33:b6:b3:d9:47:11:9d:01:26:b4:c9:da:cc:09:b3:
         3e:0d:9b:36:59:77:e5:b8:2b:ba:53:e7:de:fb:fa:38:67:05:
         1f:4f:e0:d6:19:0f:23:22:2f:bb:17:98:ac:e2:90:c8:36:2c:
         d2:c5:7e:7d:2c:50:1d:15:a1:4f:e7:63:b2:3d:71:a0:5c:f9:
         08:2d:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:07 2025 by rpki-client