Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
File:                     znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json)
Hash identifier:          KP3ueoWqERFVXTJYl+7nCuCU4fItMIDLqvQoRc77P0s=
Subject key identifier:   3F:EA:C2:5C:5D:C5:CC:25:0D:CA:AD:BF:BC:07:5F:33:59:1F:78:E9
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Certificate issuer:       /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
Manifest number:          0868
Signing time:             Sat 18 Oct 2025 21:52:59 +0000
Manifest this update:     Sat 18 Oct 2025 21:52:58 +0000
Manifest next update:     Sat 25 Oct 2025 21:52:58 +0000
Files and hashes:         1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: 7ZkuKJwl53eky6/H0PQfxe70TzZ2hAjmL5S4sa7bQvM=)
                          2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: V9wdh8jyKUELoyH3ltxRaciIlStsT6ht66mAyTIa1HI=)
                          3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Fa6SdUbTPUudXOpSSwXnBEDK9cTtldS1jBd7HoHcy+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
                          rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
        Validity
            Not Before: Oct 18 21:52:58 2025 GMT
            Not After : Oct 25 21:52:58 2025 GMT
        Subject: CN=68f40c3b-a478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:47:06:00:f7:93:d6:93:62:3c:1f:d0:d3:
                    5d:87:5d:12:85:d0:23:48:4b:2e:08:e6:ee:7a:09:
                    79:cc:00:33:01:0e:f1:9b:94:a3:4f:00:f6:01:59:
                    44:3d:8f:b7:03:ed:d0:67:f9:ae:39:83:e0:53:eb:
                    38:37:0c:cf:0a:bd:a8:2d:7a:62:ee:71:da:c0:12:
                    86:36:a0:5f:ea:f0:cf:c0:36:45:0c:1a:e6:a3:3b:
                    08:ce:4c:b7:14:12:89:53:e7:88:63:1c:35:4e:82:
                    37:3a:c9:58:f2:88:a0:f0:04:b7:19:28:ae:fd:51:
                    ac:9b:a0:b7:cc:7d:a1:e6:cb:65:e0:13:56:47:f4:
                    a5:9c:28:1e:e3:0b:fc:3a:cd:80:ab:84:d6:cb:ea:
                    6d:d1:de:b4:5d:d2:ee:d5:40:03:82:e5:7b:a3:41:
                    32:73:78:36:67:b5:18:e1:e0:08:2e:84:cd:c8:5f:
                    af:91:e1:b7:6d:0f:a9:05:29:ef:57:b9:79:3a:02:
                    c4:1e:e0:d0:8f:d6:f0:bf:c3:53:52:c8:75:98:ee:
                    34:14:21:4c:cf:54:a4:fe:56:81:b6:e8:00:06:aa:
                    d7:a0:e7:97:e4:02:08:60:b1:28:3c:99:5b:2c:18:
                    f4:7d:df:4f:10:26:58:ea:68:c5:d8:0e:28:36:55:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EA:C2:5C:5D:C5:CC:25:0D:CA:AD:BF:BC:07:5F:33:59:1F:78:E9
            X509v3 Authority Key Identifier:
                keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:04:c4:b7:eb:34:78:f4:5d:fe:43:ec:47:8c:8b:b6:4e:cf:
         75:13:3d:a3:3f:72:c7:32:cc:08:90:62:72:9c:2a:8e:c0:be:
         4a:5c:6b:b6:02:c3:25:35:3d:44:5e:d5:98:50:ac:3d:2d:6a:
         b2:b4:c3:1e:16:e6:9f:31:7d:91:02:a9:85:95:30:f4:0c:0a:
         ea:bb:44:58:bd:18:39:29:41:a0:0e:27:27:10:f6:46:27:0a:
         4d:62:50:59:31:14:25:17:38:84:98:79:13:fb:80:7d:b0:8b:
         9d:23:01:03:90:9c:d1:98:ff:5e:b3:4d:48:f0:0c:f3:42:27:
         4e:54:d6:46:c1:a4:88:6b:bb:ff:50:a9:c9:b7:50:7e:77:22:
         43:12:0b:06:d0:b8:d9:7f:91:bd:4c:1e:ca:37:8d:67:ff:f7:
         d0:be:4a:01:11:d3:f4:15:55:82:37:ab:02:50:1f:9a:d0:1d:
         42:4f:3e:92:9e:cc:41:be:78:49:07:89:ae:f6:73:a4:6a:31:
         f9:60:6a:2b:a9:9e:7d:fd:4c:5d:3e:d0:ae:77:4d:6f:b0:b6:
         f4:31:8c:24:c8:cf:88:04:9c:6c:4c:62:ba:98:8b:31:4f:32:
         e9:1a:5f:3a:88:09:16:a1:36:47:c0:77:da:85:36:18:d9:2c:
         21:4d:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:36 2025 by rpki-client