Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          /3BrXbRUU6u65oasRfvL3oy/qZSxDmF38nnXujzk/+A=
Subject key identifier:   AB:30:BD:93:E1:E2:00:AA:1B:74:BD:13:E6:F8:6F:F5:08:26:13:38
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       07AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          079A
Signing time:             Fri 22 Aug 2025 21:33:36 +0000
Manifest this update:     Fri 22 Aug 2025 21:33:36 +0000
Manifest next update:     Fri 29 Aug 2025 21:33:36 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: 3i425Nbl49HSv06IvgcmuGtMDxuC3FG53WFfqQTgFMI=)
                          2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: t6Ge3iMSSEepvK+Lc1zDSD/DIuC0nX4IWGHRYnQrK6k=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: nsBI5aAcb8LJy1OAbfgsAYYYF1PowIy7VZxwvaix1FI=)
                          4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: hVGpRvhX5Ju9BqJwvLilMW82myywekIMm4EdIHToKkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Aug 22 21:33:36 2025 GMT
            Not After : Aug 29 21:33:36 2025 GMT
        Subject: CN=68a8e230-35d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:3a:82:07:c2:a6:b2:18:f9:7d:bb:55:cb:
                    b8:99:a7:ea:03:74:64:3b:12:5b:5e:0d:c2:76:e2:
                    55:b2:65:0d:d2:9a:16:57:88:ef:cb:c8:02:5e:4e:
                    51:b8:47:05:7b:e7:8a:22:e0:2f:37:98:1a:9c:b4:
                    89:c9:f6:27:8a:04:ac:40:19:6d:82:bc:d7:90:3d:
                    a6:d7:ef:96:83:5a:8f:5c:30:11:39:fc:59:5f:f7:
                    db:e5:9a:5c:b3:55:7f:15:9a:63:d4:85:ac:67:43:
                    fa:2e:93:10:78:7c:54:7b:47:06:b0:5d:ef:d5:4f:
                    22:87:4b:f4:b9:65:45:ab:e3:c3:75:dc:86:54:74:
                    f2:e9:cc:74:30:bb:ce:21:96:60:32:09:ba:b1:40:
                    78:ba:dc:10:24:7a:f2:ec:d1:9f:71:ea:69:77:88:
                    e6:99:24:d5:98:c6:bb:70:f1:c1:80:a1:92:6b:67:
                    d1:87:16:d7:bf:43:fc:bc:bf:f7:da:28:7c:87:bf:
                    8f:08:c0:e5:d1:95:6d:71:17:31:cc:12:85:2a:08:
                    7e:1d:f1:7a:d2:68:0d:28:80:df:f6:76:b3:b0:4d:
                    30:a2:32:0c:7a:dd:83:ed:a5:2c:87:4e:43:e1:65:
                    3c:7c:29:78:7f:29:f1:85:c7:52:6b:8e:1a:31:6b:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:BD:93:E1:E2:00:AA:1B:74:BD:13:E6:F8:6F:F5:08:26:13:38
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:0a:3c:b8:02:8c:89:17:22:2f:02:e3:da:b5:88:a0:e5:
         2f:c5:02:15:34:09:15:ac:aa:c4:2c:fa:7d:71:92:b6:80:ab:
         cc:2b:2b:ec:c7:0e:45:5d:ec:0c:da:9b:29:60:d3:a9:4f:4d:
         30:c9:78:39:95:15:8a:a8:c0:ee:f5:8f:50:45:01:3f:55:7f:
         dc:78:d6:15:a2:2d:84:a2:0c:45:1b:e2:d8:39:89:22:75:db:
         e9:51:66:ce:0c:c0:e2:c7:53:3a:cc:48:7d:56:8c:c0:d2:8f:
         92:dc:19:59:6f:1d:e4:7a:45:e8:99:1d:0f:a4:29:f1:a4:1c:
         89:0e:10:de:f3:fe:dd:f3:a1:89:6d:b6:61:c7:15:75:fb:38:
         31:8c:24:ff:e6:87:2a:11:32:13:39:23:74:9a:56:1c:d9:8b:
         be:97:01:ea:03:6b:a7:40:8d:ad:a1:72:0f:d0:ba:fe:b2:6f:
         d1:ab:16:6b:6f:c5:a8:6c:ac:4e:32:ee:d5:49:f6:1b:4c:09:
         65:37:3b:f2:ce:8c:a8:ee:e4:df:5f:48:de:2c:e0:1b:2b:98:
         ac:53:91:7d:6c:dd:88:49:d1:45:0f:d0:5a:0e:6a:e4:42:96:
         c3:88:13:97:18:39:21:ce:9d:3d:15:70:63:3d:b3:49:5c:c7:
         23:8b:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:33 2025 by rpki-client