Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          v/k8OUa4gWsAGywEbZ4pe9OaDG3PaROOwnuPCOfhFK4=
Subject key identifier:   61:91:D3:A2:75:D3:40:75:4F:78:89:F4:5B:7A:82:18:99:F4:E4:28
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          079C
Signing time:             Sat 28 Jun 2025 20:59:42 +0000
Manifest this update:     Sat 28 Jun 2025 20:59:42 +0000
Manifest next update:     Sat 05 Jul 2025 20:59:42 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: RufDBsRa3xQ6cfr4GXxKbCZ1T+txs1ZV4KYEkg+YRLw=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: bCzW+BaRUSMEs6ksafkZ0M05EIAyYKkAVk7wGw2XL8U=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: hlQlo3zj4oD4t9qHVL26IJYGsUxTLxyLxxcgSQsOSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Jun 28 20:59:42 2025 GMT
            Not After : Jul  5 20:59:42 2025 GMT
        Subject: CN=686057be-e175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:92:c0:39:d3:2a:e0:b3:30:10:0f:a3:ff:
                    e5:76:f7:44:2d:50:f8:c1:64:b4:24:17:12:c3:92:
                    47:a0:93:19:26:4b:ce:76:c7:f6:85:13:a7:2f:f5:
                    f5:0c:ab:ed:71:9d:f2:fe:db:f2:83:ed:0e:d9:73:
                    ad:bc:0f:a2:38:c6:4c:16:77:6d:50:62:e5:91:04:
                    e9:2d:24:f8:d6:31:42:b7:9b:4e:26:fe:ab:de:33:
                    05:d9:d6:20:5d:c0:87:52:83:a7:9c:d7:ba:aa:0a:
                    33:c3:cc:81:e0:5b:c1:e4:15:10:7b:f2:9b:e8:eb:
                    e5:30:cd:ad:de:70:c5:42:4d:69:ef:f6:70:ed:a5:
                    84:1d:e7:46:f3:5f:e6:aa:54:b9:0c:bb:42:57:a2:
                    5a:19:fc:25:dc:0e:46:9a:8f:7f:e5:5f:92:52:5e:
                    ad:c5:ae:bf:64:c3:23:f9:a4:73:1c:39:9f:85:70:
                    be:85:fb:4a:88:df:8d:92:60:df:b1:fe:48:58:33:
                    d3:b6:50:e1:ce:b0:c9:c4:36:aa:0a:e8:53:36:56:
                    89:d1:d6:f1:9b:1e:81:4b:8c:8f:97:ec:de:26:66:
                    a1:53:8d:ed:f4:d4:99:04:25:f1:ef:8e:7a:75:88:
                    89:91:bb:c4:e8:0a:8a:06:2d:61:03:4c:de:a1:15:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:91:D3:A2:75:D3:40:75:4F:78:89:F4:5B:7A:82:18:99:F4:E4:28
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:d6:ba:6c:a4:28:de:48:8a:61:65:0a:8c:19:f9:0e:6c:
         3e:88:34:2d:e3:c4:85:d1:a3:52:74:b0:ed:ff:16:28:c7:7e:
         04:e5:7b:b1:6c:8a:f9:36:3e:78:75:72:97:bf:89:9d:83:99:
         8a:04:be:66:65:fe:e1:be:62:52:83:e9:41:c8:b5:9c:97:13:
         e8:9e:16:4d:f1:40:77:71:a4:96:45:ee:0b:4c:42:85:20:37:
         ad:ca:62:48:3d:10:07:b4:42:bc:d8:fe:4c:ec:3a:29:5e:8e:
         d0:e6:21:8b:d3:ff:b5:25:f5:fc:a1:f1:0d:65:94:cf:0c:ed:
         c2:29:37:e5:0d:43:d3:14:cb:fd:6a:b4:7e:9f:b2:38:46:9a:
         6c:4f:74:3d:df:1c:e8:97:99:c6:10:fe:ef:72:dc:ee:b1:41:
         f8:88:34:3b:0c:f6:8e:34:f9:9c:34:d5:3c:02:c0:78:a1:b1:
         f7:8d:08:7a:43:57:cc:16:28:ff:68:59:99:1e:88:1f:a1:ae:
         6b:fb:df:8a:a6:90:d6:45:2a:b2:52:34:6f:07:82:d0:ec:c8:
         56:fe:ed:0c:a1:e0:d4:6c:7b:4b:a3:18:80:04:1b:0f:14:b1:
         eb:cd:5c:b0:bd:8d:3b:28:d6:fc:03:fa:7b:cc:a6:ea:60:53:
         4b:b9:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:21:22 2025 by rpki-client