Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          WC3ZSOyEd31+eTXKF5Z91VDW2HxtsSSbBuAJO0ujm3g=
Subject key identifier:   B0:7D:9B:AE:1E:48:32:8B:60:87:FC:16:89:4F:34:A3:A2:FF:78:F9
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       35A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          3530
Signing time:             Wed 02 Jul 2025 14:30:59 +0000
Manifest this update:     Wed 02 Jul 2025 14:30:58 +0000
Manifest next update:     Wed 09 Jul 2025 14:30:58 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: iwXf/K1HyA8TVb2iMo6oNDEMdDN2FtxC3ygRi0votJo=)
                          2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: OpsjHp/vGysxlU1F4bwOY7eYj+17+oUTjlbccNSDCHo=)
                          3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13735 (0x35a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Jul  2 14:30:58 2025 GMT
            Not After : Jul  9 14:30:58 2025 GMT
        Subject: CN=686542a3-c2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:e1:86:ab:12:d9:b9:80:75:e0:d3:32:2b:
                    4e:ba:c1:d3:38:cb:d2:94:10:75:17:70:0d:9f:f5:
                    84:05:a0:a5:bf:12:bb:c3:11:37:30:32:92:5e:5f:
                    d3:6a:88:41:18:ef:12:a8:10:40:f0:44:99:1c:ab:
                    89:3c:b3:88:07:99:b7:89:d2:73:32:85:43:57:b1:
                    ca:bf:cf:93:b7:b5:20:5a:77:e8:b8:f6:c7:c4:41:
                    eb:75:3a:9d:30:a8:49:60:ea:07:4e:64:7e:cd:89:
                    fe:1b:f5:0a:5c:4f:db:fb:b8:c5:79:38:49:cb:79:
                    50:cc:ae:43:20:b8:90:c0:fe:24:62:95:e6:ab:d1:
                    48:bf:2d:8a:77:1d:fa:30:ab:b3:8b:16:7b:26:a0:
                    43:04:15:4f:7a:cd:f8:14:b4:c3:4c:3e:63:42:7f:
                    0a:be:cf:3e:d1:5b:9d:af:2d:21:5c:9f:75:a9:89:
                    a9:9f:34:51:88:1f:fd:4f:4f:6a:b4:cb:1c:f0:8c:
                    1c:e1:f6:4c:1f:e1:0f:1e:57:80:12:d6:b4:0e:b3:
                    7d:67:3a:47:89:d7:34:20:bf:34:ec:4f:4f:bd:66:
                    b8:d0:11:56:d4:7e:09:19:97:c1:8b:e8:6a:07:f9:
                    b9:cd:02:88:5f:56:44:d0:36:3d:09:92:1d:18:5c:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:9B:AE:1E:48:32:8B:60:87:FC:16:89:4F:34:A3:A2:FF:78:F9
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:72:35:58:2f:d4:5c:3b:93:9a:22:36:d0:2f:4e:0f:1f:
         3c:76:73:2b:b5:1d:64:02:73:d2:d3:75:3e:66:3b:c4:62:4e:
         c9:98:6d:b1:ce:90:eb:5c:9a:19:60:5d:32:3a:03:27:e1:9a:
         bb:93:dc:97:33:4f:81:01:32:4a:4e:e2:53:46:1a:2d:26:12:
         b7:91:02:a0:67:c9:40:0d:4c:b8:9e:63:a1:d5:6c:ee:21:74:
         03:0f:99:b0:fa:cd:8c:86:f3:29:5d:d9:36:9c:5d:96:f9:f5:
         d8:93:35:b3:99:16:c1:1d:73:7d:81:d7:dd:85:cb:98:02:fa:
         79:1b:61:37:1f:08:d8:5c:0d:5e:f2:32:61:28:2c:25:54:ec:
         30:9f:65:ed:f2:de:45:f4:20:f5:0b:71:85:20:25:47:93:ef:
         c0:c9:f9:b5:de:25:6c:dd:33:9b:51:0f:a3:6d:19:ca:8c:9b:
         b9:25:20:4d:9a:ca:e8:aa:fa:61:f1:bf:1c:85:51:ad:28:98:
         01:a8:ca:6a:7d:33:52:ea:08:e5:19:dc:40:8b:63:7c:94:f2:
         fb:41:d7:9e:e7:6c:2e:d9:b7:31:f7:f1:8b:61:71:85:10:ef:
         10:bd:39:6d:dc:f1:45:2a:83:89:48:f8:17:06:97:02:99:56:
         31:24:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:08 2025 by rpki-client