Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json)
Hash identifier:          wXeNt53dAMBwyfLJmxy76MfcZEze5G9R+PvgNngWHnI=
Subject key identifier:   1A:82:58:C2:83:A5:09:72:9F:E9:FC:95:02:4B:95:46:2B:9F:4A:6A
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
Manifest number:          088E
Signing time:             Fri 22 Aug 2025 20:43:29 +0000
Manifest this update:     Fri 22 Aug 2025 20:43:28 +0000
Manifest next update:     Fri 29 Aug 2025 20:43:28 +0000
Files and hashes:         1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: Gz/z0+ROt0IELHzt1trJ6NYil9aktdxPKuFoVEge/W0=)
                          2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: Aug 22 20:43:28 2025 GMT
            Not After : Aug 29 20:43:28 2025 GMT
        Subject: CN=68a8d671-802c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:82:c5:f6:c4:9a:62:ab:68:6b:5f:29:4e:
                    8c:8f:50:49:8f:e1:0d:89:8b:5b:4f:af:31:66:09:
                    49:7a:85:cf:4f:52:ad:10:32:64:de:c8:6b:b3:12:
                    76:c9:6d:9a:bb:67:ee:54:79:d2:b4:9f:63:d7:a6:
                    0f:d0:ac:2c:da:bd:58:46:27:88:88:ec:a6:0c:19:
                    35:f0:87:27:bc:68:39:43:e3:1e:52:c9:a0:ea:20:
                    d8:e1:e2:c6:83:f4:31:09:7f:c9:b8:91:e4:1e:e1:
                    5d:e0:d0:1f:9d:89:13:96:69:80:a5:4b:08:0d:ef:
                    ca:fc:07:69:74:a6:eb:99:c4:96:e4:bb:60:dd:1a:
                    80:f4:d5:7d:03:73:c6:68:da:af:8c:25:3b:75:c5:
                    db:53:ac:43:6e:e3:53:c4:e2:3a:c4:50:86:e7:bc:
                    38:eb:e1:03:5a:db:83:40:39:9d:0a:ce:d9:2c:43:
                    94:03:11:a2:ec:33:0d:ee:77:8a:8b:ef:33:5d:b6:
                    f8:3c:c8:5f:e3:1d:8a:0b:82:37:0c:d8:0f:b1:ed:
                    3f:d3:e5:7a:96:0f:7a:5b:e1:ea:02:c9:d5:a1:b2:
                    74:58:87:7c:c6:dd:d8:7f:d2:96:bb:63:7a:d4:01:
                    e2:e3:0d:c0:eb:28:8f:26:43:4b:b0:51:c6:f8:8b:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:58:C2:83:A5:09:72:9F:E9:FC:95:02:4B:95:46:2B:9F:4A:6A
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:cc:63:f3:80:f8:52:f6:a6:67:bf:b5:e6:49:cf:3a:a1:
         9f:48:4a:23:00:a6:ce:8a:ec:11:fc:00:9c:18:b9:4a:ef:83:
         b8:77:2c:9c:69:61:39:e1:10:d2:4d:dd:74:7a:b3:77:b5:3b:
         54:15:08:d7:21:9e:ec:70:3f:4b:97:27:ad:df:0e:08:4e:b4:
         c5:86:af:6a:25:88:92:5e:52:9f:4b:5e:4f:66:c2:f0:8f:29:
         60:a1:02:de:8f:d5:fb:13:7d:70:6c:b3:3c:ca:57:7e:f6:13:
         d7:bb:aa:11:c7:da:6b:90:f0:e1:af:5f:34:a4:e0:22:5b:5a:
         d3:6e:45:1b:4f:54:d8:10:5e:2f:6f:52:d2:ff:67:ae:8c:9f:
         20:5f:c2:66:b7:2d:d3:89:71:ed:bb:f2:08:65:5f:cc:35:ef:
         d3:fd:df:45:c7:ee:97:e0:de:36:c6:9e:4d:7d:09:e1:70:4e:
         76:5f:a7:6c:17:56:e6:2c:a4:7e:c8:0d:7d:45:65:b3:00:3c:
         06:85:b9:4f:a9:3a:7d:ab:12:4f:f2:7c:31:be:61:06:04:8e:
         1b:8f:5e:21:d3:7c:e6:c1:84:2b:34:f0:67:8e:bb:dc:95:20:
         84:cd:ed:26:bc:df:76:2c:77:31:66:30:d2:06:c8:f2:b2:50:
         2b:e9:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:02 2025 by rpki-client