Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          5YC3sgY+y1z8b+4SjlyifSjVejNK2PoCYpl/xqXu7Wk=
Subject key identifier:   19:03:DA:96:0A:1C:D4:71:3D:AA:3E:A3:F2:E2:83:6D:D1:3F:E2:25
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       07DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          07D7
Signing time:             Sat 18 Oct 2025 22:27:49 +0000
Manifest this update:     Sat 18 Oct 2025 22:27:49 +0000
Manifest next update:     Sat 25 Oct 2025 22:27:49 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: 5Ays9PPX/hslpRxzGB/CpnF/KR44vTTownP7ci/NzL0=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: eWRDLsuHoJc/nz9fA7Tw+nXYU13UB2p69Sw5UsXcXsQ=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: qfHny3neEqciJUugDLFWYSVPfWoplVFPNaZG5R/1xwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Oct 18 22:27:49 2025 GMT
            Not After : Oct 25 22:27:49 2025 GMT
        Subject: CN=68f41465-7e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:cc:4d:97:83:92:53:95:5e:5b:c0:e4:74:
                    67:df:be:4a:e2:6c:3b:63:0d:1f:13:75:67:77:b1:
                    17:e6:d1:a6:bf:31:09:fe:48:45:07:63:d5:6a:24:
                    b3:7c:65:f6:bb:dc:e3:64:b9:0f:c8:b9:3a:6e:ae:
                    be:51:a7:94:f4:c8:97:bd:57:b8:1c:ab:4a:ea:80:
                    9c:90:30:53:d9:af:a2:13:07:78:b8:0c:e2:69:c5:
                    b1:d7:f4:c6:88:fb:12:28:ce:41:e4:a8:15:c8:96:
                    61:6b:97:98:c4:ee:f3:a5:7a:14:b5:f0:c9:63:ce:
                    dc:0f:56:70:04:c5:73:e8:97:63:8e:8e:91:db:c3:
                    3f:99:59:45:d9:e9:9c:84:75:9c:98:c3:5c:78:71:
                    bb:27:20:bb:b6:13:ad:6d:80:be:f4:44:db:55:cd:
                    18:47:9e:89:19:05:6d:72:c3:bd:99:81:4f:4d:46:
                    db:46:81:04:16:87:0d:6c:1f:cc:77:47:53:64:79:
                    8d:38:22:ad:11:62:7f:db:f4:f0:ad:83:74:5f:c4:
                    cf:4b:44:bb:53:8e:10:b0:b8:3f:94:64:dc:b5:4c:
                    0d:82:f9:c8:0a:e2:e4:ad:4a:80:fe:c4:dd:42:57:
                    53:79:7f:3a:45:ab:5f:29:9b:ea:42:de:ab:a1:d7:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:DA:96:0A:1C:D4:71:3D:AA:3E:A3:F2:E2:83:6D:D1:3F:E2:25
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:18:c9:77:a6:04:bb:ae:13:65:ae:90:2e:45:a1:f9:42:
         25:6d:ab:20:bd:cf:4e:6f:5f:ed:5b:42:e0:f3:42:45:df:a4:
         6c:49:b3:fe:6f:e3:63:57:20:17:04:79:78:3f:b0:d7:0b:52:
         bd:db:fc:1a:07:f3:48:14:1f:59:76:86:94:ac:c8:9d:41:39:
         9c:58:d3:b7:fc:07:0e:65:47:2d:bc:aa:37:77:6e:a5:12:7a:
         6d:34:32:b9:e7:2a:ae:7b:64:04:cc:0f:20:6f:aa:67:5f:eb:
         e4:f2:39:b9:50:75:58:4c:d4:9e:ba:e3:b2:35:67:87:26:01:
         14:77:91:0b:00:5d:80:89:3e:ba:a4:89:64:6f:73:2a:d8:23:
         b4:ee:27:e4:1d:ed:6b:ed:72:85:51:37:59:01:11:a1:63:f8:
         75:b7:38:be:b0:ba:86:99:36:d8:b1:05:aa:73:4e:a9:e6:b8:
         9e:00:4f:cb:98:bc:05:4b:d2:a3:11:43:58:37:3b:6e:2f:4c:
         d1:8f:66:79:62:40:13:d6:f1:32:b0:c9:82:12:94:31:a4:4f:
         e2:08:13:ae:99:3e:5f:36:48:6e:b0:a2:8d:71:17:78:77:de:
         1b:db:2f:d7:0a:77:6c:9b:eb:28:83:93:72:61:1d:ab:6e:50:
         c1:08:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:52 2025 by rpki-client