Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          SfFqeheAF6Eb5coOr+1tRd8zuWidNxn5W9NK8UvIr2s=
Subject key identifier:   A5:7E:3B:B8:37:C7:7E:D1:08:A7:08:19:37:05:9F:50:B7:57:09:13
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       07D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          07B9
Signing time:             Sat 18 Oct 2025 22:38:38 +0000
Manifest this update:     Sat 18 Oct 2025 22:38:37 +0000
Manifest next update:     Sat 25 Oct 2025 22:38:37 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: pFOGqne0//mmf6gSo73CUSe5Rdj4CKcXFmN36dpxvKg=)
                          2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: 2hifAdeE8mQFU3ltmyQ47TeuxjT7Ow0BtDeX7YdYQwc=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: l3tkrogo0VTxG1PVP/z14nG/NFFYWC8iV/QnSfCptRk=)
                          4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: g57FwhkXQlNtbgCZ9eTxeYlEqsu00SG/NfOG9n/2VFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Oct 18 22:38:37 2025 GMT
            Not After : Oct 25 22:38:37 2025 GMT
        Subject: CN=68f416ed-42c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:8d:25:df:0d:79:ff:00:46:89:29:1e:d8:
                    7f:42:b3:30:04:9f:69:d9:ff:36:b3:2b:ee:21:77:
                    ae:d8:79:d8:09:0c:39:75:b6:1f:e1:9a:b8:9f:e7:
                    64:31:a8:41:36:51:eb:de:61:d6:62:32:d1:4e:7b:
                    0b:32:3d:af:13:ea:94:11:12:4a:bc:73:b1:8b:ef:
                    ab:81:a0:e4:67:e4:bb:e0:c8:0f:ad:ad:62:1b:bc:
                    e4:b6:c2:f8:59:11:79:5f:2e:15:4c:21:13:75:c0:
                    96:51:24:8d:38:de:e6:54:9a:c7:d8:7e:ae:63:c5:
                    39:c2:e0:9c:c4:67:ad:19:b4:72:20:ec:8c:60:18:
                    50:7e:74:4e:54:6c:bc:c0:7c:09:7d:6d:74:82:33:
                    7d:be:7b:02:32:44:aa:f9:2c:ed:cf:23:ae:81:31:
                    b4:e0:6b:f7:69:1d:ff:94:08:a3:a2:a4:16:e2:16:
                    96:bf:bc:b9:5d:a4:6a:4a:47:bc:c4:08:5d:d8:fc:
                    74:5c:a8:05:92:30:da:6c:64:d1:05:13:6f:e3:0c:
                    ba:f0:d4:af:7f:f7:06:40:69:69:95:59:68:5b:ca:
                    65:7c:0b:29:6a:33:4a:24:78:65:1f:25:5f:8b:85:
                    77:a1:a8:43:d5:4c:14:3f:74:cc:d4:76:c6:5d:ef:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:3B:B8:37:C7:7E:D1:08:A7:08:19:37:05:9F:50:B7:57:09:13
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:8a:78:a4:53:0f:11:ca:f2:5c:63:b8:41:c6:09:dd:eb:
         cb:4a:45:b3:73:3a:d8:fe:33:c6:29:56:e9:b4:74:03:cd:9e:
         dd:32:41:a9:e0:32:85:1d:1b:c5:d7:17:93:f5:e0:0e:12:3b:
         1f:42:ab:a4:11:c5:b1:6d:95:93:ad:36:e0:54:16:6f:83:52:
         f6:80:fe:16:72:d7:c3:97:d6:ce:f1:31:2a:1c:e7:3e:ff:f8:
         fb:a8:e9:49:8d:3f:1f:70:09:16:4a:4f:f6:55:81:16:8c:a9:
         ac:42:8f:55:b4:2c:b4:94:e2:18:2e:92:3e:38:71:d9:ac:a8:
         36:24:2b:1f:14:fa:8c:4b:c2:a9:bb:78:75:ac:08:8a:7f:84:
         5f:de:bb:a4:98:3d:95:fc:74:9e:43:2b:f5:61:aa:cd:c0:d7:
         ec:92:f0:fc:b0:af:7f:19:bc:ef:45:1d:d1:a1:49:0a:a8:7c:
         6b:83:78:5e:30:c1:f0:93:2d:3e:01:56:ac:10:3e:3f:b9:83:
         58:ee:75:10:5e:f7:27:40:e1:eb:86:ef:87:aa:e0:f0:f1:78:
         aa:7a:80:75:8e:55:61:2d:67:88:78:e1:99:17:cd:04:55:2e:
         ac:2f:2b:00:bb:46:6c:48:6d:f1:15:bd:fd:03:72:35:2a:99:
         fa:0d:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:54 2025 by rpki-client