Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
File:                     zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json)
Hash identifier:          8PTiGgSFG9hrjkxezcPslvq9Q9e+DdOMrDwFAytQT/4=
Subject key identifier:   38:D4:49:53:85:28:1E:86:38:44:96:4D:CD:3B:5F:F2:C6:98:BB:CE
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Certificate issuer:       /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
Manifest number:          BB
Signing time:             Thu 15 May 2025 05:12:02 +0000
Manifest this update:     Thu 15 May 2025 05:12:01 +0000
Manifest next update:     Thu 22 May 2025 05:12:01 +0000
Files and hashes:         1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: uW/csDjdFNUnwf5nBNf3tZEv3L6AlT9r8D+xHCTgc14=)
                          2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: xUzOXANfh6mmG71QxkWCtyjsT3i0ndD8YHqWFZ6MWYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
                          rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
        Validity
            Not Before: May 15 05:12:01 2025 GMT
            Not After : May 22 05:12:01 2025 GMT
        Subject: CN=682577a2-1511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9b:ab:18:64:35:f6:24:7a:5c:e4:ee:25:45:
                    f7:00:21:52:26:d3:bc:d8:99:18:c4:6d:6f:4d:86:
                    60:23:1c:c8:a9:f2:a7:cf:72:17:9e:9f:04:a5:59:
                    47:ae:74:c9:6b:b8:2a:ec:76:b1:80:48:ea:02:90:
                    62:16:8c:6c:d0:30:54:55:6e:7d:d2:c2:bc:ec:50:
                    60:5f:a3:4e:b6:d5:93:1b:e9:6f:c5:1c:d2:0c:fa:
                    8f:49:f1:8d:d6:7e:1e:f3:4e:cc:9d:20:af:ea:59:
                    1b:70:8d:6b:91:fa:82:4b:aa:e5:87:12:ee:17:bb:
                    62:57:36:f4:f2:dd:bc:7d:e7:3b:df:09:36:91:2e:
                    c6:d0:47:14:f4:34:b8:4c:f3:af:68:a1:95:7e:dd:
                    ad:ba:0a:f6:c9:53:77:b6:a1:61:9f:50:3e:1c:bd:
                    12:3d:8e:70:43:52:55:dc:a9:21:13:dd:63:e1:b6:
                    cb:11:91:e4:ec:39:53:47:d6:7d:4a:e7:8b:e7:85:
                    a2:19:23:1c:44:ac:2c:65:f0:fd:7d:2c:17:cd:70:
                    7e:9e:82:b6:90:c2:68:d9:f4:ab:6b:a0:79:26:f0:
                    73:75:bd:12:49:b6:6b:a4:aa:ab:ff:6e:6e:f2:3c:
                    2b:bb:9c:72:cf:24:e6:33:b2:3d:22:83:81:ef:d5:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:49:53:85:28:1E:86:38:44:96:4D:CD:3B:5F:F2:C6:98:BB:CE
            X509v3 Authority Key Identifier:
                keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:99:ea:d3:75:fc:b4:cf:d2:29:6c:d3:c8:d0:99:63:b1:
         15:01:6e:72:9a:32:97:96:08:f3:67:57:c6:67:f5:a2:88:94:
         22:07:d4:65:04:8e:b1:50:36:b3:0b:a4:0f:71:69:d6:d8:19:
         50:08:4c:00:eb:5f:ca:f9:40:2a:89:1e:d1:c0:11:7a:23:b9:
         89:85:20:39:6f:05:b8:12:13:02:92:48:52:7c:24:24:94:91:
         8d:f0:3d:47:ca:37:9e:68:de:01:9e:13:ba:4a:81:3c:1e:59:
         b1:d1:e9:4a:21:2d:01:4e:5b:5e:27:b1:ba:86:ad:64:ef:8c:
         8e:fb:bb:2e:79:f9:7e:b6:66:8b:1a:2c:89:da:88:bf:f5:ad:
         94:96:a1:53:d3:c0:1e:aa:a5:58:88:ab:c6:de:89:f2:28:a1:
         f2:62:5b:a9:7f:2e:dc:3a:c6:91:40:f1:b0:5c:2a:cf:eb:c3:
         25:e2:7e:d5:f0:ee:57:cb:f5:f4:ef:85:f9:22:78:fd:a6:f5:
         83:c1:29:16:93:0c:7c:c5:23:73:6d:28:39:81:93:8e:e9:2b:
         d8:f1:00:1b:df:d7:3c:22:56:58:d0:12:32:f5:e8:bb:a5:53:
         78:99:3d:14:cb:ab:9e:43:1f:21:30:2c:df:02:7e:4b:8e:03:
         dd:6f:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:25:34 2025 by rpki-client