Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          8Cv8d4R2C91UoGDeKqmLiqRPUXPCXSgYI4LrNv28IME=
Subject key identifier:   11:51:48:84:98:4B:F6:9B:58:E6:0A:6B:25:56:C5:DC:69:E0:62:ED
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          078C
Signing time:             Fri 22 Aug 2025 21:39:07 +0000
Manifest this update:     Fri 22 Aug 2025 21:39:06 +0000
Manifest next update:     Fri 29 Aug 2025 21:39:06 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: uijGKtIkFZ2uwaocwYEAS6gI1+5GxU0CzLoWvF7iVPQ=)
                          2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: e1Q5MYIIjz5LWcGb0fXsxIuQ9p6/453WvuoEPrSW9e4=)
                          3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: DbaBLma8zvPIwZ5Spppp0TVJfQzrx6U8bGBh6k5CtpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Aug 22 21:39:06 2025 GMT
            Not After : Aug 29 21:39:06 2025 GMT
        Subject: CN=68a8e37a-b38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:62:2c:3b:f6:72:8f:04:d6:4e:bd:cf:bf:
                    a2:b7:78:e2:6b:9c:74:c3:09:d4:8b:64:75:c1:dc:
                    ca:3e:02:8a:db:a3:c1:fb:b7:db:bd:eb:8f:ee:62:
                    ac:2c:37:2b:af:fd:77:c1:27:10:ad:16:23:e7:05:
                    ac:4c:f9:cb:9c:ba:0a:d6:96:38:31:5b:f5:34:4d:
                    bd:02:59:38:ec:d6:c2:e4:66:52:21:ce:d7:fc:64:
                    5b:33:f6:b7:29:7f:39:67:e0:c0:8e:51:5f:ad:e0:
                    2d:e9:99:96:bd:83:ff:3c:ea:d1:34:9e:92:de:0e:
                    82:53:a2:9c:ec:df:85:99:92:b5:22:ac:b1:4b:97:
                    e6:87:25:66:34:ee:79:87:ee:0b:cd:49:2e:6b:ba:
                    73:51:50:a2:ff:25:c3:14:99:d4:88:c3:d3:fe:7a:
                    6d:45:d9:6f:cc:07:08:04:67:3d:51:69:3d:9d:ea:
                    c9:f4:d7:2c:b1:1d:a8:21:34:59:96:0a:a3:55:fc:
                    33:37:6c:8e:38:d8:56:62:f9:6e:bf:e7:5a:2b:e4:
                    4f:61:ce:25:e6:d5:a7:d8:79:d9:70:5d:85:ad:9e:
                    9b:cc:5f:76:eb:40:19:e0:1d:0d:ab:20:8e:27:c5:
                    d9:63:b4:e6:7e:10:1c:9f:48:16:12:5e:f9:f9:f4:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:48:84:98:4B:F6:9B:58:E6:0A:6B:25:56:C5:DC:69:E0:62:ED
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:5e:6c:a5:ba:cd:63:cd:d6:4a:f0:82:24:80:c9:51:ac:
         75:64:54:6b:6c:37:e5:02:96:3c:3f:13:af:ad:d8:f8:84:f0:
         bb:29:63:2a:ff:60:44:c1:8b:eb:12:71:fe:ea:d5:5b:ea:4d:
         dd:22:63:6c:75:10:29:3a:09:b3:fc:1e:95:d5:91:75:bc:38:
         61:1a:9d:f5:b3:04:8a:79:62:03:c2:d0:34:ea:2c:f4:05:44:
         5e:d0:ab:f3:2c:68:e0:76:f2:64:6b:0e:2c:44:58:1d:22:1c:
         1e:0e:92:42:84:25:64:b4:7b:36:8a:ed:80:88:b9:ea:79:c9:
         40:61:41:24:a2:5f:16:90:31:55:58:70:01:c4:71:2c:b7:b5:
         88:df:90:ee:76:5b:b6:7c:62:fc:df:fd:8d:8d:dc:0c:83:d0:
         6b:f4:13:f3:42:bd:42:6c:5d:f3:d2:f2:1a:d4:64:e1:70:b3:
         9c:0e:f4:0d:d7:34:62:f0:3e:a4:1b:9f:3d:f8:38:e1:08:cd:
         96:59:a3:a5:81:28:39:f1:45:9f:a9:58:39:d5:8f:eb:17:c4:
         0a:bd:de:44:07:32:f4:4b:50:b5:89:93:20:71:81:93:94:be:
         8d:50:4f:0e:f4:25:30:0f:82:7e:d2:c5:78:29:23:1a:9a:5e:
         5b:e2:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:29 2025 by rpki-client