Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
File:                     zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json)
Hash identifier:          tmA0PQLtOaD/iyk61g9WcjLsRhuZ7CNXfmrMQIpOXJY=
Subject key identifier:   82:C0:97:8D:C5:4B:F6:09:8F:EF:7B:74:3C:79:31:34:9C:EC:8A:93
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Certificate issuer:       /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
Manifest number:          0437
Signing time:             Sat 28 Jun 2025 23:56:22 +0000
Manifest this update:     Sat 28 Jun 2025 23:56:22 +0000
Manifest next update:     Sat 05 Jul 2025 23:56:22 +0000
Files and hashes:         1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: j7nl/65byFoX3Wr5y4mdwgzskrKX/dkdfK5R/ZlK2aQ=)
                          2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 23:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
        Validity
            Not Before: Jun 28 23:56:22 2025 GMT
            Not After : Jul  5 23:56:22 2025 GMT
        Subject: CN=68608126-ba8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:ef:d6:64:81:45:a0:02:b2:85:60:8d:47:
                    9c:4d:1f:97:4b:58:3d:e8:8c:d5:78:f6:bc:db:dd:
                    93:6a:ba:6b:d8:b2:f1:73:21:5b:6b:6f:03:d9:6d:
                    98:f0:d7:a2:fa:bc:75:5b:e5:4c:20:a5:3a:8d:30:
                    0d:9f:ef:04:b5:c8:74:8f:a6:f7:c4:f5:af:11:58:
                    08:cf:35:0c:17:98:95:3d:f0:37:76:5f:61:57:7d:
                    ff:82:64:b1:4b:88:14:9d:52:ee:f8:4b:c3:99:ac:
                    ee:43:3f:0f:ce:27:3e:23:e3:cb:cf:51:ee:62:30:
                    9b:0e:08:6f:67:c4:4e:8f:fc:74:70:db:44:f4:32:
                    aa:0a:c4:c8:bb:de:0f:ac:57:95:2f:f9:ed:c3:36:
                    88:9a:88:ef:c8:1d:ff:d3:89:ce:b3:e7:91:c2:4a:
                    4d:c7:59:dd:71:45:c7:b1:9b:22:d1:f0:94:7b:69:
                    29:3f:5a:4a:00:64:e7:fc:8f:77:ae:67:6c:81:89:
                    f1:37:45:1f:5f:8a:6a:94:66:14:d6:4b:a6:5f:40:
                    8c:0f:cd:62:ad:ba:fe:b1:76:0e:a7:de:a9:7c:39:
                    2e:84:21:36:a9:2f:b6:58:7f:b1:01:84:49:0c:6e:
                    f4:23:64:2f:3b:bd:83:58:29:60:a8:cf:d0:2e:b2:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C0:97:8D:C5:4B:F6:09:8F:EF:7B:74:3C:79:31:34:9C:EC:8A:93
            X509v3 Authority Key Identifier:
                keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:94:94:32:9c:7d:bc:94:c0:67:33:7c:39:a3:a6:c2:c9:
         c7:78:bb:4f:7d:c4:5f:c8:d0:f5:a6:36:61:f6:ac:d6:bc:b0:
         32:cb:49:66:bf:cb:74:5e:55:25:90:7f:67:d0:17:2b:a6:46:
         8c:9c:02:aa:ce:90:1d:fc:30:cf:54:3d:00:70:ba:bb:62:00:
         dc:24:dd:48:23:65:86:ae:61:cf:4a:75:cb:b9:1d:24:50:ac:
         a6:73:3c:18:54:0f:55:f2:c6:8d:52:cd:6e:49:21:8d:47:98:
         fa:ea:06:53:5b:63:95:c1:89:5d:87:05:b6:72:a7:2d:a6:6f:
         bb:0b:3d:df:9f:e3:2e:69:9f:7d:70:79:d9:55:64:70:ca:f1:
         dd:93:fb:e8:23:97:56:9c:56:13:7a:1c:8f:59:7a:dc:f0:27:
         a9:81:b2:83:a7:3e:24:5b:54:7a:d8:ad:6c:c6:17:b2:ea:b1:
         23:2b:ec:bf:6e:54:cc:19:3d:4d:e9:8b:0d:3c:49:ef:e9:16:
         38:47:74:c4:3a:cd:2f:f6:fa:27:12:d6:1b:54:11:65:ca:84:
         07:db:45:1b:23:80:a6:61:b9:ef:fc:28:cd:eb:52:80:dc:99:
         2b:eb:03:a4:c8:08:a0:1d:b1:b4:86:a2:6c:34:95:92:37:34:
         89:70:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:51:29 2025 by rpki-client