Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File:                     VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier:          dcjcVCqsTBhk8paDvHF0cWFLVtGJ7GUn6Pf2/Zkb2jQ=
Subject key identifier:   37:90:7D:8F:53:BA:47:BE:82:0E:83:A8:4B:83:85:34:07:96:2C:B0
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number:          0968
Signing time:             Mon 30 Jun 2025 20:19:36 +0000
Manifest this update:     Mon 30 Jun 2025 20:19:36 +0000
Manifest next update:     Mon 07 Jul 2025 20:19:35 +0000
Files and hashes:         1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: pJXYeQ9PCgwNJHoEhEx7jWweigfwRkasNl0hky+6akA=)
                          2: 8247E286967711EA81018623C4F9AE02.roa (hash: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Jun 30 20:19:36 2025 GMT
            Not After : Jul  7 20:19:35 2025 GMT
        Subject: CN=6862f158-0e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:36:53:33:f9:c3:fd:a5:4c:3e:e9:8c:c6:
                    ed:67:5b:1b:ee:05:a6:9b:3b:b3:9f:25:d4:1f:ed:
                    8a:49:26:38:a9:f6:a0:b9:8a:3e:dd:e3:27:af:1c:
                    26:71:81:01:a9:09:bc:80:cc:59:ca:81:72:6f:5c:
                    b1:85:30:9e:e1:8b:c2:2a:07:45:3b:d2:25:85:f1:
                    5e:bb:90:86:aa:bf:c8:f1:d1:f0:c9:6f:24:06:44:
                    de:d6:d3:79:75:e1:af:93:da:46:77:19:a0:bd:5a:
                    a5:1d:33:f9:62:ab:64:94:7e:e4:19:ea:a6:a0:a8:
                    ca:e5:d3:12:8b:ca:51:d1:3e:ea:8c:ee:de:dc:41:
                    a8:37:31:cf:aa:eb:a1:ba:51:c3:87:81:1c:f2:84:
                    27:d6:5d:83:c9:f8:ad:6e:10:9e:f9:6a:cb:5d:c9:
                    83:e2:5f:15:d5:25:dc:57:e8:88:02:48:5c:b0:70:
                    7e:94:c4:22:8e:49:db:a2:2d:fb:3c:0a:95:c1:dc:
                    a9:a2:fd:8a:db:19:c3:c5:95:31:fb:0c:54:fc:01:
                    b5:be:86:bb:3e:39:7c:f4:56:22:d2:a5:2b:a9:62:
                    6f:4c:d7:ef:64:6e:f3:f0:a3:09:55:7c:31:6f:de:
                    88:29:1e:e9:62:80:cb:ac:be:7e:98:c1:d5:3e:1c:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:7D:8F:53:BA:47:BE:82:0E:83:A8:4B:83:85:34:07:96:2C:B0
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c9:65:9e:02:4c:13:ac:a9:46:12:42:58:90:82:4e:50:16:
         65:5a:eb:83:8f:5b:12:1f:02:41:e0:5a:6a:50:80:63:8d:88:
         c6:dc:1a:23:81:29:40:8d:62:d7:34:a0:9f:e7:24:63:93:c8:
         b6:18:c5:e9:5a:ba:06:64:95:fe:c3:4b:f6:84:69:fc:db:d2:
         f6:47:69:58:8b:e4:15:e2:78:22:38:5d:e1:77:16:ca:70:35:
         05:83:6f:e8:d2:dc:69:e2:41:d4:68:14:5c:ec:0a:bc:65:fe:
         a8:11:f6:2e:a9:f9:5f:7f:4c:3e:94:32:c6:fe:c3:65:06:06:
         c2:40:91:41:1e:14:ca:db:26:87:39:13:13:4b:33:48:e0:ce:
         69:52:63:b5:a7:05:a2:a6:dd:fa:38:ac:46:60:b8:b8:94:8c:
         86:9c:7e:29:01:7a:d9:ba:50:39:84:b2:33:e1:91:dc:44:e5:
         c4:b4:e6:b7:4b:91:a0:cc:ea:fb:db:fa:3b:7f:21:68:34:2a:
         5f:ab:02:20:de:5f:71:50:78:20:84:b9:64:f4:c8:3b:7e:fe:
         b9:32:2b:a5:4c:50:07:ae:6d:35:78:fd:e0:6e:e1:51:4f:bd:
         1c:37:8b:29:24:ea:35:5e:c9:79:41:35:d9:22:3c:45:c9:6b:
         d8:22:b1:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1
NkJDMEZGMzcwHhcNMjUwNjMwMjAxOTM2WhcNMjUwNzA3MjAxOTM1WjAYMRYwFAYD
VQQDEw02ODYyZjE1OC0wZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgA2UzP5w/2lTD7pjMbtZ1sb7gWmmzuznyXUH+2KSSY4qfaguYo+3eMnrxwm
cYEBqQm8gMxZyoFyb1yxhTCe4YvCKgdFO9IlhfFeu5CGqr/I8dHwyW8kBkTe1tN5
deGvk9pGdxmgvVqlHTP5YqtklH7kGeqmoKjK5dMSi8pR0T7qjO7e3EGoNzHPquuh
ulHDh4Ec8oQn1l2DyfitbhCe+WrLXcmD4l8V1SXcV+iIAkhcsHB+lMQijknboi37
PAqVwdypov2K2xnDxZUx+wxU/AG1voa7Pjl89FYi0qUrqWJvTNfvZG7z8KMJVXwx
b96IKR7pYoDLrL5+mMHVPhxOBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeQfY9T
uke+gg6DqEuDhTQHliywMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2
NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkVBRi9ERDYwRDRBNDk2NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpu
NlFZcDJGWXVIYmxXdkFfemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeyWWeAkwTrKlGEkJYkIJOUBZlWuuDj1sSHwJB4FpqUIBjjYjG3Boj
gSlAjWLXNKCf5yRjk8i2GMXpWroGZJX+w0v2hGn829L2R2lYi+QV4ngiOF3hdxbK
cDUFg2/o0txp4kHUaBRc7Aq8Zf6oEfYuqflff0w+lDLG/sNlBgbCQJFBHhTK2yaH
ORMTSzNI4M5pUmO1pwWipt36OKxGYLi4lIyGnH4pAXrZulA5hLIz4ZHcROXEtOa3
S5GgzOr72/o7fyFoNCpfqwIg3l9xUHgghLlk9Mg7fv65MiulTFAHrm01eP3gbuFR
T70cN4spJOo1Xsl5QTXZIjxFyWvYIrED
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:31:04 2025 by rpki-client