Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          AGm2wSEYJTxZjqR2CFuNt3QARr5rfSf4157xSIZCCcA=
Subject key identifier:   57:78:D2:AA:E7:03:FD:53:96:7C:C9:12:31:28:C6:99:E0:9A:1A:D7
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          038A
Signing time:             Wed 07 May 2025 00:41:01 +0000
Manifest this update:     Wed 07 May 2025 00:41:01 +0000
Manifest next update:     Wed 14 May 2025 00:41:01 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: cw3Lka0z0IAUcDopJ99x3S71NkOIspgdkggPbTiCkEE=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: Yw6khJ43zV0yhFLOubPvbZbVWU58is2F1BhtT8qiLaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
                          rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: May  7 00:41:01 2025 GMT
            Not After : May 14 00:41:01 2025 GMT
        Subject: CN=681aac1d-3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:f2:e6:89:b4:c2:92:52:83:57:c0:b0:34:
                    79:2f:55:5f:17:9f:c2:d8:06:e4:28:b8:e2:64:a2:
                    60:6f:36:d1:13:1e:2f:12:25:36:28:c8:e1:34:30:
                    69:f3:f9:dc:ff:00:63:e1:9c:34:ad:c6:1d:6d:bb:
                    3c:17:45:5d:99:42:8b:43:24:83:c6:a0:4d:a8:9f:
                    6e:36:26:96:3e:65:e3:78:4f:6c:50:fa:5d:f8:c1:
                    f3:26:b1:17:a6:f1:31:2b:c8:9a:1c:5a:2b:19:46:
                    e7:ee:03:69:ab:ea:f7:b1:da:cf:fe:28:15:f1:4f:
                    b0:80:70:c0:49:ca:b6:1b:43:b1:2a:8f:8e:c0:6f:
                    0d:70:a4:4f:37:25:3b:1f:b2:5b:e9:6c:4d:7e:f3:
                    1d:e4:b7:cb:e8:27:de:8e:12:84:3d:d3:f9:76:46:
                    82:62:6c:80:26:45:3a:c4:1a:ca:4f:fc:2a:b7:5c:
                    90:9d:39:c7:ca:c8:0d:12:f7:5f:3d:6e:16:69:84:
                    22:74:bb:81:ea:4e:20:80:cc:d3:81:33:ad:47:ce:
                    a8:15:ad:40:9b:98:ed:18:18:6c:01:a2:14:63:41:
                    dd:b4:17:a6:fb:32:e4:d2:31:1e:65:8c:69:e9:c6:
                    8b:e9:b5:44:e5:d5:57:82:ff:4b:1f:c4:03:38:94:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:D2:AA:E7:03:FD:53:96:7C:C9:12:31:28:C6:99:E0:9A:1A:D7
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:27:86:8e:62:76:23:81:6c:47:04:22:b9:ab:21:08:04:51:
         14:87:49:c0:b3:6e:58:4b:3d:e0:d6:2a:45:04:ea:aa:8c:28:
         33:d1:a1:76:80:d4:44:7e:e4:67:68:29:15:35:b2:93:7d:ab:
         93:b9:de:de:fe:1b:e5:5e:bd:4e:86:5c:5f:8e:7f:88:f5:1d:
         15:eb:08:d4:9f:bd:f8:9a:2f:d3:3a:01:93:a8:25:a8:4c:09:
         29:f8:e6:bd:b0:1e:3a:b3:64:f2:1f:a6:08:13:b3:1b:e9:7b:
         a6:2a:70:9c:b3:fc:f6:06:dd:b4:da:18:29:43:f5:ed:3c:4e:
         93:85:a9:4f:69:3c:be:9b:3c:c9:11:10:f1:58:79:17:2f:ec:
         bb:49:67:b4:d0:79:08:64:97:d0:60:54:2b:bc:1d:b1:38:8a:
         bc:6d:4b:10:4f:21:bc:c9:af:34:93:72:b8:36:e6:a9:a1:ac:
         49:c0:11:6a:24:6d:38:47:cb:99:59:4c:57:b8:57:9b:67:98:
         bd:30:08:27:85:58:9c:21:d4:94:bd:fa:72:e6:42:2c:24:4c:
         58:6b:ff:0b:87:f9:4f:12:4d:34:fd:d7:9e:19:02:cd:f8:1e:
         4a:70:15:1c:7a:fe:cd:dc:7b:0b:9d:04:af:e6:03:d7:10:2b:
         21:cd:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:32:42 2025 by rpki-client