Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          zZGs61wZn4rvJ8GLCepg6sDG8msnZmpBwzXMnkTyF/c=
Subject key identifier:   83:77:2A:AF:70:7E:EF:99:CD:5E:E4:BF:74:90:0D:BC:E2:4B:04:2B
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1D25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3F27
Signing time:             Mon 20 Oct 2025 14:30:46 +0000
Manifest this update:     Mon 20 Oct 2025 14:30:46 +0000
Manifest next update:     Mon 27 Oct 2025 14:30:46 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: DX/vx7eRgh+P25YVpzYHl703j2g5DwiPoewOIg282Zs=)
                          2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=)
                          3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=)
                          4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: lWY3HuGd5fIJF8Oe8hPwzrYQ3DgR98qCqY9Pi+cBvM8=)
                          5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=)
                          6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=)
                          7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=)
                          8: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: JZoWxsRbV7qWkDrZjMBEtqXRAY211vcz/IuFZQVqVOA=)
                          9: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=)
                          10: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=)
                          11: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=)
                          12: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 3GbbC1+2jl0vL9FRkvPdOxEiS1lz+xyVoZFUlqkOUwg=)
                          13: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=)
                          14: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=)
                          15: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=)
                          16: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7461 (0x1d25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 14:30:46 2025 GMT
            Not After : Oct 27 14:30:46 2025 GMT
        Subject: CN=68f64796-fa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:b9:87:9a:43:fc:f1:be:b5:ee:2d:3c:8f:
                    1c:58:72:f9:25:d2:f0:d0:47:8e:a3:eb:b8:70:96:
                    eb:1d:e5:fa:b6:9a:87:67:34:d9:2a:ee:12:4e:c1:
                    fb:a0:bf:97:ea:45:7b:8c:b9:c9:ee:bf:ab:b8:d9:
                    ae:e0:24:17:6f:c9:79:db:11:0d:41:21:f2:eb:97:
                    20:02:2b:e6:90:5b:da:09:60:06:d2:72:54:15:89:
                    8f:81:53:cb:18:7e:7c:98:ca:ea:00:2f:7c:10:1c:
                    20:05:21:a6:20:8a:13:01:9e:fb:cf:34:c8:65:1b:
                    1e:42:5e:4c:a2:29:72:0e:5c:1d:de:19:80:90:fd:
                    15:4d:91:5b:05:87:33:ba:96:8b:41:f0:d8:56:f6:
                    48:90:a1:dc:17:eb:79:c7:e5:3f:38:8a:6f:93:12:
                    19:e6:23:68:0b:fa:23:1e:67:6e:69:78:e8:1e:c5:
                    0f:22:e9:77:9c:2f:15:3f:4a:ab:34:29:38:1f:5e:
                    b9:5b:9f:d7:72:b3:df:39:c4:18:6f:8a:ef:ec:a3:
                    b9:b3:ea:0d:a7:55:c1:ef:bc:2e:99:a7:2a:77:56:
                    f5:58:07:c6:f2:e4:bf:75:8c:00:83:37:62:90:33:
                    f6:38:17:59:06:e8:3e:12:95:09:c0:06:ad:6c:6a:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:2A:AF:70:7E:EF:99:CD:5E:E4:BF:74:90:0D:BC:E2:4B:04:2B
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:90:72:e9:e4:ee:90:f3:fb:7d:f6:e0:5d:9b:11:d1:66:
         03:54:44:1d:f1:b8:a9:ff:61:90:4f:a1:17:f3:a4:48:f6:7e:
         b2:d9:e7:0d:75:b0:6d:c1:51:1d:f7:6a:e9:df:75:7e:11:4b:
         c1:6f:96:ff:00:6a:40:77:97:ea:be:bf:5e:6b:f6:a4:b9:61:
         c5:cd:84:62:57:15:70:99:72:f7:4b:89:fd:79:c0:b8:27:9b:
         bf:52:9a:49:dc:aa:df:5f:10:e6:d9:3b:9e:36:6e:fd:88:2e:
         19:d0:76:85:9f:fb:a0:40:1d:58:bd:7f:96:fa:15:42:ea:4f:
         83:4c:62:72:14:80:d6:f5:0d:63:78:4e:f5:5a:21:14:f3:c9:
         11:90:ff:66:d0:c8:c4:c9:59:d4:24:5c:c7:b4:82:41:7d:66:
         da:cc:ce:4b:e5:a9:16:85:f1:b5:48:6a:08:f2:c4:2d:8b:82:
         e3:8e:bf:62:e8:b2:9a:f4:f1:84:a7:1b:06:4e:55:27:61:82:
         16:22:6e:89:41:1e:9f:1c:f1:76:b5:48:38:3b:bb:56:c8:b4:
         50:e2:e3:a1:33:d7:e8:ab:63:4c:df:98:bb:62:c7:f2:19:9a:
         75:f2:8a:b6:8b:c5:7b:e8:9e:0f:ca:33:52:a2:b4:87:08:ba:
         04:84:dc:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjUxMDIwMTQzMDQ2WhcNMjUxMDI3MTQzMDQ2WjAYMRYwFAYD
VQQDEw02OGY2NDc5Ni1mYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMS5h5pD/PG+te4tPI8cWHL5JdLw0EeOo+u4cJbrHeX6tpqHZzTZKu4STsH7
oL+X6kV7jLnJ7r+ruNmu4CQXb8l52xENQSHy65cgAivmkFvaCWAG0nJUFYmPgVPL
GH58mMrqAC98EBwgBSGmIIoTAZ77zzTIZRseQl5MoilyDlwd3hmAkP0VTZFbBYcz
upaLQfDYVvZIkKHcF+t5x+U/OIpvkxIZ5iNoC/ojHmduaXjoHsUPIul3nC8VP0qr
NCk4H165W5/XcrPfOcQYb4rv7KO5s+oNp1XB77wumacqd1b1WAfG8uS/dYwAgzdi
kDP2OBdZBug+EpUJwAatbGp7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN3Kq9w
fu+ZzV7kv3SQDbziSwQrMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0
dlRINkFXb3RXMXVHcWJQOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR+5By6eTukPP7ffbgXZsR0WYDVEQd8bip/2GQT6EX86RI9n6y2ecN
dbBtwVEd92rp33V+EUvBb5b/AGpAd5fqvr9ea/akuWHFzYRiVxVwmXL3S4n9ecC4
J5u/UppJ3KrfXxDm2TueNm79iC4Z0HaFn/ugQB1YvX+W+hVC6k+DTGJyFIDW9Q1j
eE71WiEU88kRkP9m0MjEyVnUJFzHtIJBfWbazM5L5akWhfG1SGoI8sQti4Ljjr9i
6LKa9PGEpxsGTlUnYYIWIm6JQR6fHPF2tUg4O7tWyLRQ4uOhM9foq2NM35i7Ysfy
GZp18oq2i8V76J4PyjNSorSHCLoEhNyp
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:42 2025 by rpki-client