Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File:                     ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier:          V2dNq97MLiBTE+tM0T3+mnJeEIcEIO9/sB+/Hi6N+A8=
Subject key identifier:   F7:44:88:34:B0:8B:F4:F1:58:67:58:0E:AA:38:F5:E2:31:79:2B:C6
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer:       /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial:       05F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number:          05ED
Signing time:             Mon 30 Jun 2025 23:16:28 +0000
Manifest this update:     Mon 30 Jun 2025 23:16:27 +0000
Manifest next update:     Mon 07 Jul 2025 23:16:27 +0000
Files and hashes:         1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: qfrgZgT+Fd1UrZ21hQ6PpH6IZjadzLga++f/f357/g8=)
                          2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
                          rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
        Validity
            Not Before: Jun 30 23:16:27 2025 GMT
            Not After : Jul  7 23:16:27 2025 GMT
        Subject: CN=68631acc-8f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:86:c0:3b:89:17:fe:d0:f4:da:a7:be:46:
                    6e:87:72:84:6b:3e:62:59:d6:12:e2:df:e0:ef:c8:
                    6a:77:34:93:5f:f3:e9:0a:27:83:2a:45:23:53:4e:
                    9b:a3:c9:42:b4:dc:56:f1:a4:74:a1:47:c8:e5:9b:
                    08:e0:7f:ef:bf:df:97:f0:3e:c0:23:d3:b2:78:11:
                    4b:e5:11:b2:6f:0e:5c:43:3d:63:07:3d:f2:fc:bd:
                    bd:bf:d7:a0:3c:33:49:c5:ea:f1:2d:cc:d0:8e:32:
                    a0:61:11:f4:c0:25:95:bc:5c:d1:1e:6a:c1:9d:69:
                    d7:32:dc:60:10:11:2f:c1:b4:a5:00:16:0d:2e:f4:
                    43:b1:06:9c:80:55:63:a2:bc:cb:ce:fe:bd:0e:a7:
                    b1:37:f2:84:e2:54:5c:c0:bd:0d:f6:71:ce:8f:a9:
                    c5:a3:c9:95:bb:8e:6d:34:58:00:5b:7b:0e:b9:8b:
                    d2:d4:ef:ec:e6:5e:7e:04:4d:20:d4:f0:b8:48:50:
                    e8:94:3e:55:60:dc:ca:eb:d6:0d:2e:c1:a1:25:a1:
                    d2:2d:4c:70:b8:d8:17:26:88:09:b2:f5:13:d5:17:
                    f6:d5:31:a7:67:28:ba:6c:7d:1b:36:52:2c:45:ff:
                    48:c2:bf:58:51:69:eb:72:28:5c:7d:9b:ac:84:49:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:44:88:34:B0:8B:F4:F1:58:67:58:0E:AA:38:F5:E2:31:79:2B:C6
            X509v3 Authority Key Identifier:
                keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c6:d4:72:ef:b4:b6:1e:4f:7a:2c:a6:b1:94:a9:d7:b7:ed:
         2a:da:4c:19:da:6a:d0:7f:7a:d9:c4:70:5f:97:02:8b:fa:74:
         7d:fd:6f:d4:f4:68:c1:91:27:0e:79:12:bb:44:c6:06:90:64:
         0a:c5:41:cc:c6:8c:a6:24:b7:43:cb:82:9f:62:9a:55:07:01:
         0c:62:ed:89:52:c4:19:8d:db:58:c7:64:0d:7c:3f:d3:ca:f4:
         89:75:1d:aa:33:75:6f:a5:34:9c:1f:f5:4f:7f:f0:a9:7d:15:
         12:4a:ec:26:5a:19:a8:5b:f3:32:5d:09:26:40:19:a3:20:45:
         2b:1a:ea:ef:49:40:eb:2d:d9:71:86:b1:1d:0c:df:01:a8:dd:
         59:83:a6:20:0b:c0:68:94:db:5d:db:17:a5:ca:e4:cc:09:a5:
         af:4a:49:a1:51:3e:18:36:00:e7:b7:55:68:62:07:d0:15:a9:
         e9:f7:94:3a:26:5d:e7:39:05:97:27:08:62:f0:db:22:58:ba:
         64:04:19:f0:58:26:86:8c:a8:d1:17:03:c6:64:59:d7:6c:09:
         9c:5b:be:59:da:e3:1f:f9:ac:0e:c0:0d:68:68:13:cc:de:d3:
         df:fc:fb:d7:33:e5:9e:2d:1f:cd:6c:49:20:82:17:88:1a:d2:
         95:ef:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:11:49 2025 by rpki-client