Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          f36bgFxbpCAln5JXsjttivt58tcjUt79AS5jqnNsqME=
Subject key identifier:   78:C0:F7:56:78:C4:6E:0F:FC:58:98:35:FF:E7:1C:7C:64:55:55:0E
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1CE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3EE9
Signing time:             Wed 02 Jul 2025 14:29:15 +0000
Manifest this update:     Wed 02 Jul 2025 14:29:15 +0000
Manifest next update:     Wed 09 Jul 2025 14:29:15 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: W+jdBA2lMjma9Os8+GbbduOooOVyBssPsf4KvmI57Iw=)
                          2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=)
                          3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=)
                          4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: QIByum0Q8MqWfLpB0ykV4dVr25yJxf+XqNJq06uiuWw=)
                          5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=)
                          6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=)
                          7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=)
                          8: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: JZoWxsRbV7qWkDrZjMBEtqXRAY211vcz/IuFZQVqVOA=)
                          9: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=)
                          10: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=)
                          11: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=)
                          12: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=)
                          13: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=)
                          14: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=)
                          15: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7396 (0x1ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Jul  2 14:29:15 2025 GMT
            Not After : Jul  9 14:29:15 2025 GMT
        Subject: CN=6865423b-82bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:51:a6:3a:09:a1:b3:3e:3c:bc:ef:cb:58:
                    1e:17:5a:61:43:db:08:d4:7c:2c:6a:43:3d:f6:09:
                    d6:ef:fc:8f:ed:40:55:22:d2:e4:7c:fe:1c:37:46:
                    79:7d:d0:bc:63:87:1c:ab:6f:d3:e4:e1:9b:de:68:
                    d2:15:2f:96:06:ef:bc:5d:83:e0:9b:d4:3f:7a:6a:
                    42:5c:89:8e:35:55:3a:36:54:47:9a:d1:9b:7f:f3:
                    65:fc:a5:e4:f5:8f:4c:ac:34:51:1e:28:a5:9a:ee:
                    c4:d7:7f:3c:6d:24:26:d9:bb:cf:67:55:de:9c:46:
                    32:63:51:76:ce:c3:d1:34:46:47:46:34:59:bb:67:
                    3b:86:a0:b2:3e:71:40:87:70:3e:f0:04:70:70:1d:
                    fc:dc:25:55:32:f7:ce:17:8d:18:eb:6b:95:22:04:
                    ec:32:0d:41:d0:ab:52:0b:00:be:54:68:73:6d:b5:
                    dd:24:ab:b9:87:83:fd:d4:d7:3b:92:f0:64:0c:5a:
                    2b:ba:2c:a6:a5:0c:e6:89:90:ec:05:22:23:fc:f7:
                    12:70:26:72:bb:eb:6f:1c:5c:1c:16:23:e0:73:2d:
                    ba:ac:fd:c3:87:da:8f:c3:7f:c4:fd:18:89:98:61:
                    ff:ed:36:52:a5:c8:da:09:2b:39:99:a0:3c:89:9b:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:F7:56:78:C4:6E:0F:FC:58:98:35:FF:E7:1C:7C:64:55:55:0E
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:65:12:03:6d:98:72:47:de:47:ef:98:db:97:23:ec:ec:
         b0:96:76:4b:29:89:e1:29:99:77:8d:53:04:63:cd:54:93:5e:
         5d:bb:6a:34:96:4d:8e:5f:5f:6f:8a:8d:c5:40:9a:eb:84:ae:
         1d:cc:5c:aa:22:67:3c:7e:fd:21:16:49:21:d3:61:c4:fe:2a:
         03:0b:5e:0b:e7:20:83:cf:a4:ea:89:1d:c6:79:90:28:04:36:
         89:b0:8d:d7:18:d5:0a:78:71:b1:b3:75:79:fb:0c:ca:04:3f:
         21:07:6e:6c:31:eb:59:5d:2b:9d:a0:08:83:4d:d0:7f:9d:9b:
         83:f6:0c:b1:f5:ff:22:d3:88:bb:87:d0:d2:6c:fe:fe:1b:21:
         7d:47:8a:6f:75:3f:3d:2e:d2:14:1a:be:c9:48:4d:24:c0:f3:
         e5:11:58:19:32:31:d0:06:f5:39:a4:09:a1:4a:74:b1:3b:9f:
         8b:cb:27:76:c6:a7:b5:6d:bb:9a:00:5a:26:4f:25:c0:1c:a2:
         e5:03:c3:bd:76:3b:dc:5d:ed:88:e7:92:3b:f9:87:7b:a6:0c:
         00:b5:70:c5:06:80:0b:ad:c8:a1:5e:fd:b7:7c:12:a5:0c:68:
         06:fe:25:a0:02:70:78:b0:8f:ea:42:05:5d:50:ac:aa:28:13:
         76:f3:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:19:52 2025 by rpki-client