Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
File:                     ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json)
Hash identifier:          sLPhZ2E2sIuiCX02h8FIb3vnjHRVwURrNRo0ks8edc4=
Subject key identifier:   3E:77:24:C1:62:27:95:AA:46:AC:5F:7B:33:BB:3B:7D:7B:55:A2:FA
Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
Certificate issuer:       /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
Manifest number:          010E
Signing time:             Tue 01 Jul 2025 05:29:33 +0000
Manifest this update:     Tue 01 Jul 2025 05:29:32 +0000
Manifest next update:     Tue 08 Jul 2025 05:29:32 +0000
Files and hashes:         1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: FCJWwMzQEVjIVMusLdhKdOf/zZZ0WKrW3L1C2u6sdyo=)
                          2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl
                          rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
        Validity
            Not Before: Jul  1 05:29:32 2025 GMT
            Not After : Jul  8 05:29:32 2025 GMT
        Subject: CN=6863723d-f69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:4c:e8:11:08:a0:ca:bc:e7:e7:1b:a2:d2:3e:
                    92:af:ff:6b:72:56:7e:65:16:e2:1f:d3:b1:cf:b4:
                    e9:fd:40:15:c5:12:e3:19:95:6c:86:96:da:9d:a3:
                    34:8a:32:4c:94:85:21:fb:1a:46:86:81:70:51:db:
                    b1:f9:0f:82:4c:97:79:75:b7:44:b7:97:64:c4:03:
                    42:b0:61:85:05:a6:bf:01:da:e9:d7:28:c0:e9:9c:
                    f4:ac:ca:55:1d:ab:73:47:72:4d:e2:b0:02:bf:1e:
                    47:e3:99:ca:be:cc:28:39:b5:22:9d:a6:0b:ba:da:
                    48:5d:c4:d4:c6:b1:e8:7d:26:0f:82:b8:8d:e4:d9:
                    91:e8:e3:00:f1:e8:01:36:61:76:61:65:bc:b0:71:
                    f0:1b:09:50:84:cd:e2:e1:cb:69:50:83:63:d6:9c:
                    c0:2b:bf:06:51:b8:fe:6f:58:99:17:a0:61:f2:52:
                    34:74:f3:ee:f7:e2:81:e5:f0:d8:7b:a4:49:15:d9:
                    f3:7e:a5:47:81:83:fc:87:fd:9c:11:29:e2:cc:17:
                    46:3c:4b:26:5c:ce:e7:07:a5:32:93:c1:77:14:f7:
                    9f:65:cc:2f:fc:df:7d:1f:65:6d:50:89:b6:36:23:
                    56:41:c9:ac:7f:e1:44:95:e0:35:ae:a3:41:72:08:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:24:C1:62:27:95:AA:46:AC:5F:7B:33:BB:3B:7D:7B:55:A2:FA
            X509v3 Authority Key Identifier:
                keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:18:15:28:4f:ce:ff:64:59:b9:e8:91:fe:f0:6b:23:54:
         73:62:59:72:0f:4c:65:a7:8d:51:28:3c:04:7a:99:ec:0d:59:
         1b:e6:fb:35:f9:61:8b:27:a8:3d:c4:da:3c:f0:d6:79:5c:41:
         ec:10:15:3b:3d:f5:b7:56:8c:0a:eb:ac:55:6e:07:43:56:0e:
         27:7e:9b:e1:f3:90:4e:ff:db:1b:93:7e:e5:76:e0:a9:00:cc:
         a9:c2:53:98:ef:a1:d7:8b:c6:77:d4:a1:da:77:15:e6:b5:1d:
         f9:4c:27:29:bf:e2:f3:d5:f7:ba:93:16:b8:46:d9:cf:cb:d4:
         a5:2d:71:6a:90:dd:56:67:d6:b0:d0:22:b6:17:00:bb:5b:bc:
         51:67:07:c5:4e:df:e9:66:c8:09:cd:44:07:b9:ea:7c:38:dc:
         06:d0:e2:54:b8:c4:26:a2:05:7d:bf:2c:23:13:80:97:94:1b:
         66:65:28:00:11:0f:33:2b:6a:ec:e4:9e:a3:ba:33:c6:58:22:
         b6:9e:ba:5c:31:26:8a:31:83:74:d1:c7:0a:26:94:29:15:d3:
         e7:63:da:76:7c:78:13:4b:b7:cc:79:4a:f2:7c:9f:aa:3c:ab:
         25:c5:c0:37:78:77:ba:51:be:be:fe:d4:d7:ff:8d:e9:5e:a5:
         f7:28:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:25:22 2025 by rpki-client