Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          HHKSqcp7etmxdqIqO4hRZG4bFcy7jAQQ0Ncu/Wx3Mic=
Subject key identifier:   CA:73:93:BD:6C:12:C1:AD:09:29:18:27:E3:70:53:7B:D4:40:09:C8
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0CBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0CB9
Signing time:             Sat 18 Oct 2025 18:53:19 +0000
Manifest this update:     Sat 18 Oct 2025 18:53:18 +0000
Manifest next update:     Sat 25 Oct 2025 18:53:18 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: mBMrlMRBcCIUtF4YI2Tf3NJxU2fbA1OQ6Ypv0iO+Qs0=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Oct 18 18:53:18 2025 GMT
            Not After : Oct 25 18:53:18 2025 GMT
        Subject: CN=68f3e21e-640b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:9f:b8:a4:6f:48:08:01:8c:91:b6:f0:7f:
                    00:9b:08:bf:08:ce:83:db:52:aa:02:8b:61:24:e1:
                    58:bf:95:a3:4b:14:e6:d1:69:c2:f2:2b:00:e3:3e:
                    7b:b8:13:e0:00:56:06:f4:c0:52:01:39:7b:e0:ac:
                    88:da:e7:8c:59:6e:ff:2a:67:68:53:42:c7:f1:f7:
                    8f:f3:9c:b4:16:2b:0b:dc:7f:d3:83:0e:b7:e2:17:
                    b6:28:14:89:f6:58:90:9e:cf:91:48:fb:16:d5:d9:
                    28:79:97:ca:a3:a0:19:e7:58:ce:67:21:16:f9:c3:
                    4e:f3:0c:cc:08:52:49:d1:4a:43:fd:5d:86:dc:ce:
                    71:ca:b6:33:ed:4b:e4:08:f0:aa:21:d3:9d:0e:03:
                    80:fa:31:a5:3a:37:91:5f:97:11:19:cf:c3:96:7f:
                    a0:e3:28:6b:82:15:e0:41:36:06:7f:70:3e:f5:3f:
                    bf:5a:4b:0b:20:01:58:5e:8a:ef:fb:f8:7c:4f:93:
                    91:dd:8b:bf:32:27:52:75:d8:47:09:1c:db:f5:95:
                    48:f8:12:97:38:64:06:f1:a4:1a:a3:5f:a3:c7:0e:
                    b6:1b:f7:7d:52:67:f5:49:77:1e:89:fe:01:a8:b2:
                    af:68:4f:24:94:32:58:e8:51:48:f6:82:12:e4:a3:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:93:BD:6C:12:C1:AD:09:29:18:27:E3:70:53:7B:D4:40:09:C8
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:62:4f:39:be:67:4e:40:06:74:0e:5c:2e:c4:2f:cb:d5:
         c7:d1:05:da:8f:b0:63:f3:98:c7:8f:01:5c:0d:43:6c:4a:68:
         92:db:38:26:57:c7:8e:4f:88:fe:f4:41:1e:aa:0a:32:76:13:
         30:8b:70:21:bf:ee:cc:52:ab:be:3b:96:0e:a6:f9:ed:53:a5:
         f6:76:67:59:d6:5b:15:94:c8:17:98:be:26:25:6b:f3:15:3f:
         27:96:67:4c:4a:dc:86:64:3b:cb:a9:c9:61:d2:62:ba:27:ee:
         b3:04:94:db:c5:f6:c7:3e:fd:8e:d5:ce:0d:9f:af:1b:ab:b3:
         30:98:4f:6d:83:9e:65:20:08:b3:0a:29:7f:dc:ce:17:16:a1:
         81:1f:2c:de:a9:15:fe:94:e6:4d:f1:78:29:e2:6a:73:b4:09:
         fc:cd:72:6e:ed:79:43:ef:02:9b:a0:d4:6c:2f:3e:43:12:b0:
         cf:ef:9d:c6:ed:e8:dd:55:52:92:90:0f:0c:1c:1d:ab:94:f4:
         55:ff:96:9e:31:af:45:05:27:34:89:52:7e:67:c0:98:49:c8:
         cd:2d:b0:9d:79:5f:6b:c6:e1:2b:d2:0a:9a:d6:47:f4:84:d0:
         59:76:5c:11:01:8c:06:84:40:8b:03:5f:48:31:fd:01:a2:8b:
         d6:cb:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:07 2025 by rpki-client