Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          cEONaAbh1Ft/mxnAU6KsFGsZop0Get8ffkdJ5rKPZZQ=
Subject key identifier:   B5:A1:18:E8:9E:F5:D5:FD:C9:B5:08:53:B4:1A:60:CF:39:34:72:82
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       2816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          2808
Signing time:             Sat 18 Oct 2025 15:49:39 +0000
Manifest this update:     Sat 18 Oct 2025 15:49:38 +0000
Manifest next update:     Sat 25 Oct 2025 15:49:38 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: P8AY9xOSMVA6w1FHcxU3PYuD5/p+vGm9Yt+M3QDuxQ8=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10262 (0x2816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Oct 18 15:49:38 2025 GMT
            Not After : Oct 25 15:49:38 2025 GMT
        Subject: CN=68f3b713-be41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:2f:3f:4a:af:63:7c:9a:ec:36:b6:3c:a3:
                    ca:0c:1d:9b:a1:e0:ea:00:89:ef:cf:f7:86:12:e3:
                    5c:71:4f:a6:db:cc:67:59:3d:3f:9d:bf:f0:51:ba:
                    3b:f8:c1:11:b5:a8:e7:7d:56:54:26:6f:e0:56:b7:
                    e9:8e:5b:f1:14:81:00:c0:19:05:36:b2:51:fd:03:
                    98:a4:2d:6a:ab:17:41:21:36:e9:f5:55:c2:23:08:
                    cf:5f:45:12:53:0a:4f:cc:e6:90:a7:02:d7:e9:62:
                    b9:fa:4c:a1:71:c3:5c:0b:4c:10:3d:58:89:12:1c:
                    4a:1a:61:2f:b3:18:f9:14:20:bf:2e:29:12:cb:be:
                    e9:e8:96:21:7d:07:71:b5:56:ed:47:e2:6f:8e:e4:
                    05:e0:67:22:a4:99:82:dd:cd:57:14:10:ed:3b:c1:
                    5f:63:a2:f5:d4:a3:65:cd:32:a2:bc:35:f8:79:2d:
                    53:3b:64:a4:34:c7:15:5f:5f:c6:99:33:fe:f5:8d:
                    95:fa:b1:7f:e0:f0:7f:f1:46:7e:20:33:69:4c:ea:
                    cd:4a:c3:ba:aa:c6:b0:5d:91:3e:66:3f:0e:60:32:
                    54:ef:11:8d:ef:bc:c9:87:a4:3a:57:71:0b:11:82:
                    d9:17:67:57:d6:25:19:73:a2:6b:e1:af:6e:ae:20:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A1:18:E8:9E:F5:D5:FD:C9:B5:08:53:B4:1A:60:CF:39:34:72:82
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:6e:ea:18:11:9a:92:87:89:c6:a9:d1:37:2d:1f:41:04:
         4a:90:25:22:44:d2:70:9f:bd:e6:32:8d:dd:73:f5:c9:ce:98:
         ec:93:54:60:07:49:90:dc:c4:6e:3e:51:2e:b4:2a:70:6e:dc:
         2d:79:ee:47:0c:9a:2b:35:82:73:27:b9:ad:c4:e7:1c:5d:f1:
         03:d0:4e:89:9c:fc:d9:35:ac:cd:13:3e:ca:1d:78:c2:6c:e5:
         ee:03:17:51:14:4e:f1:7d:4b:ce:ee:31:f1:b7:d8:7f:d7:6c:
         94:65:9f:2f:a9:70:ad:a4:52:aa:4e:d3:15:d2:f3:ef:92:cc:
         6c:e3:df:bb:c9:74:ac:e0:8b:51:de:09:e2:8f:50:c4:74:b4:
         4f:53:04:73:3e:60:61:b2:ad:ed:5f:9d:7f:3c:f5:2a:ff:e0:
         dc:f3:f9:d5:ba:07:1b:a0:f2:23:da:0b:f0:e2:2e:7f:68:f0:
         a8:8e:29:f8:e2:62:fa:7f:a5:a4:dc:bf:85:c6:15:08:d7:25:
         f6:01:dd:bd:78:10:ff:39:2c:d9:8c:3e:79:fc:5e:11:21:4e:
         79:af:f9:3a:78:dc:6b:e5:d6:0d:49:e0:68:b0:51:93:41:97:
         e9:c9:8e:3b:15:75:b2:1b:69:a4:50:53:d0:af:15:e7:07:f4:
         69:cd:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:40 2025 by rpki-client