Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
File:                     rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json)
Hash identifier:          rpG3qHpzXTGkpWCMknNn1mNvhLh+ekvnLffeyYuRYvU=
Subject key identifier:   52:59:9F:C3:FB:8C:8E:40:83:2A:B2:1B:D9:71:58:C8:60:84:8E:7A
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Certificate issuer:       /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
Manifest number:          01EE
Signing time:             Sun 19 Oct 2025 04:58:21 +0000
Manifest this update:     Sun 19 Oct 2025 04:58:20 +0000
Manifest next update:     Sun 26 Oct 2025 04:58:20 +0000
Files and hashes:         1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: SXChks5fevXdGzCfaqNktfkza3qz11eCRltHKpEEvig=)
                          2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: vSHKTbzD9NgaWK1i6zEOW6JvGbxTv8WMHXlFOUXaG78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
        Validity
            Not Before: Oct 19 04:58:20 2025 GMT
            Not After : Oct 26 04:58:20 2025 GMT
        Subject: CN=68f46fec-d34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:7e:c5:09:84:7e:8a:e8:1b:18:92:df:3f:
                    78:03:68:64:50:8a:a3:89:47:67:6b:13:9e:63:c3:
                    54:ae:ba:6a:36:a3:0e:fc:26:90:94:dd:34:f9:75:
                    c7:af:b2:cb:18:91:4d:38:4c:da:f9:18:c8:e2:ea:
                    5b:04:c8:c6:d3:e7:5c:b2:c0:62:15:25:e6:05:c3:
                    d1:b1:1a:b2:dd:90:64:ba:29:04:02:b5:cc:e8:86:
                    a4:43:f6:b0:3c:44:a3:82:30:5f:fc:fd:c5:24:99:
                    e9:74:e1:07:08:0a:15:89:0c:7e:0a:f6:41:05:0d:
                    44:d0:70:73:5e:08:a8:bf:4e:e1:73:02:f0:69:b1:
                    21:a3:3e:77:90:06:73:0d:a2:1a:04:e5:5e:1a:dc:
                    2d:db:8b:50:34:19:c9:05:0b:48:f6:8a:e0:5b:5c:
                    67:1b:20:44:ca:ae:7a:c5:9a:a2:ea:0b:16:33:34:
                    e4:d2:e8:b4:bc:de:9e:ca:c6:30:98:8a:71:f3:36:
                    55:a4:7e:43:40:2d:6a:f3:55:71:25:29:a9:7e:9a:
                    74:a3:d7:d9:5b:09:81:04:fa:93:13:c3:f3:17:b2:
                    c6:03:49:e7:ea:06:83:9c:8d:25:59:9f:4b:e8:b7:
                    4b:14:d5:01:5e:87:e1:f2:16:3e:4d:9e:9c:1b:57:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:9F:C3:FB:8C:8E:40:83:2A:B2:1B:D9:71:58:C8:60:84:8E:7A
            X509v3 Authority Key Identifier:
                keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:18:0e:6d:6a:9f:98:23:c0:c2:29:58:27:cf:a9:74:25:
         b8:be:98:cb:39:61:b5:90:a4:2c:d9:9e:3f:39:51:80:f9:d3:
         7d:3f:1e:98:21:8f:95:65:55:84:7e:1a:84:24:ff:00:cf:17:
         b0:9e:c4:77:80:ec:92:f7:e6:7a:0a:e4:14:46:c8:5f:e0:9a:
         77:40:05:9a:2d:de:35:ec:d7:e8:7c:ea:81:a7:5f:20:96:51:
         65:d5:23:af:c2:af:3c:a7:08:94:42:dc:f9:79:cc:82:90:ae:
         e6:09:6f:9c:fd:0c:b1:d5:cb:fc:41:f5:95:14:d3:d9:b2:f6:
         ac:b7:f7:77:50:48:ec:0c:ba:5e:e7:e0:31:70:ec:5c:e6:c1:
         79:ba:8f:4f:df:4e:d6:dd:eb:26:ea:a9:29:82:56:ce:bc:70:
         00:a7:9f:ea:14:95:64:77:9a:a1:36:fb:ee:cb:0d:af:22:ee:
         21:93:9e:95:42:71:6f:7a:65:f1:d8:bb:f5:f0:eb:a9:0f:89:
         16:32:4a:8a:d4:bc:4b:c3:14:54:41:88:3b:17:56:ac:2c:8a:
         ad:4b:77:0f:71:6e:51:e4:d5:20:0e:b0:d8:f6:5a:2c:78:62:
         70:3c:fd:fd:57:8c:32:df:62:0f:e6:aa:8d:ce:95:49:be:a6:
         0b:b2:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:01 2025 by rpki-client