Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File:                     dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier:          BB8un+54e4uMNwZ2tMgPfH18NLdbGQNVFwptrbiwKpo=
Subject key identifier:   E8:35:0E:F7:3C:76:62:70:34:89:D9:78:C9:9F:6C:19:C3:02:66:70
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number:          06F6
Signing time:             Sat 28 Jun 2025 21:42:08 +0000
Manifest this update:     Sat 28 Jun 2025 21:42:08 +0000
Manifest next update:     Sat 05 Jul 2025 21:42:08 +0000
Files and hashes:         1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: SwQQVQs+z5jO36Sen1VLIJkudZ38CPx0XX8PWp+tB3Q=)
                          2: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM=)
                          3: 6B0EF3045B4911ED8862970DC4F9AE02.roa (hash: HufxlMWBsko144G4tR19UzbVfHKirhQM0DbZOGV07n8=)
                          4: 4641C3785C2311EDA3D17465C4F9AE02.roa (hash: 1cYw/FnNhsdWx9pKxBCUUJjrGeyH6sgJ5u2vBWIY2hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Jun 28 21:42:08 2025 GMT
            Not After : Jul  5 21:42:08 2025 GMT
        Subject: CN=686061b0-c8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:d6:bb:04:f2:fd:99:27:c3:39:6b:c0:37:
                    88:9c:8a:b1:7d:7e:2f:1b:d1:3c:6e:19:4f:a9:f1:
                    fc:1a:78:f3:ce:02:5e:84:84:fe:06:8d:18:6d:39:
                    da:78:da:f6:2a:43:6a:2a:b2:6c:aa:77:3e:f3:b9:
                    94:15:9b:82:0e:72:ea:5d:82:03:c4:64:c1:54:bf:
                    c2:99:d5:54:5d:7f:70:d9:3e:05:84:23:14:e4:2f:
                    c3:11:7d:d0:c2:b3:81:a3:2f:82:10:f0:ac:e4:f3:
                    51:30:c9:b0:2d:4e:a3:1a:3f:10:d0:f0:cb:c7:a5:
                    76:ae:0e:5c:15:33:6c:71:7d:d4:01:77:1d:67:9b:
                    9b:9f:05:59:fa:81:bc:bd:67:8a:cd:ce:09:c4:ee:
                    f5:0a:e0:f9:15:e8:22:3a:43:1b:f5:d8:a2:d1:5e:
                    6a:cb:7a:b9:4b:a3:67:20:97:79:39:80:04:b4:b7:
                    91:f5:8f:45:8d:1b:91:8b:f1:b9:7c:d0:fd:e6:6d:
                    8a:3c:7d:c3:9b:ed:1a:40:73:40:9e:10:2f:66:0b:
                    66:a0:7b:9b:9c:25:13:14:07:6d:c3:20:cd:e7:b3:
                    db:60:57:8c:fc:da:6e:20:d5:bf:f2:c7:f3:72:b3:
                    ba:5f:1a:0d:f6:2e:a0:c4:85:4e:4d:21:ef:75:42:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:35:0E:F7:3C:76:62:70:34:89:D9:78:C9:9F:6C:19:C3:02:66:70
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:e7:5a:f2:c6:bf:14:8c:6a:e6:7e:15:f7:3b:9e:13:aa:
         09:cf:c3:44:5c:f5:0e:e7:d5:f3:ce:fe:11:30:cc:c8:d8:35:
         9d:85:8f:be:24:1e:f3:c2:c2:2c:57:9a:ba:2e:b6:b1:09:2e:
         cb:ce:d2:9a:b2:b3:80:64:ae:06:71:fd:fd:94:32:76:6f:d7:
         91:9d:0d:e8:fc:09:54:80:0f:29:30:3f:70:d5:5f:1c:15:1e:
         ba:3f:73:f4:58:ba:ad:a9:8f:b9:4b:c2:19:de:44:e5:64:d7:
         d9:96:cc:02:c3:e0:53:13:a9:27:c5:55:f5:dd:a4:f9:b7:4d:
         75:93:b6:a9:99:68:ab:18:46:a3:a7:12:7c:6d:37:56:77:44:
         20:6f:d7:4a:d8:43:f4:da:0b:27:0e:98:7e:41:da:b0:33:9f:
         dc:d5:c4:90:b9:4e:df:01:37:fe:df:03:b0:12:29:4e:5d:74:
         69:93:1f:0d:d5:ee:2e:c6:30:2a:43:ac:c4:55:6e:88:e9:29:
         70:7a:0b:c8:3d:ff:0e:73:ba:4d:e2:86:3c:c0:01:c7:71:2a:
         a7:3e:ba:15:72:2c:ab:2f:45:fc:7a:49:f3:3e:b5:a0:ee:85:
         02:0e:a2:30:7a:c0:6d:97:6a:b6:ce:3b:d3:ee:99:2a:04:c8:
         f9:4f:22:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF
QjZENDBFMzMwHhcNMjUwNjI4MjE0MjA4WhcNMjUwNzA1MjE0MjA4WjAYMRYwFAYD
VQQDEw02ODYwNjFiMC1jOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wTWuwTy/ZknwzlrwDeInIqxfX4vG9E8bhlPqfH8GnjzzgJehIT+Bo0YbTna
eNr2KkNqKrJsqnc+87mUFZuCDnLqXYIDxGTBVL/CmdVUXX9w2T4FhCMU5C/DEX3Q
wrOBoy+CEPCs5PNRMMmwLU6jGj8Q0PDLx6V2rg5cFTNscX3UAXcdZ5ubnwVZ+oG8
vWeKzc4JxO71CuD5FegiOkMb9dii0V5qy3q5S6NnIJd5OYAEtLeR9Y9FjRuRi/G5
fND95m2KPH3Dm+0aQHNAnhAvZgtmoHubnCUTFAdtwyDN57PbYFeM/NpuINW/8sfz
crO6XxoN9i6gxIVOTSHvdUIQ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg1Dvc8
dmJwNInZeMmfbBnDAmZwMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG
QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUNFNy81RTA1REJBNDVGQUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBa
MjlyTTVMOXlDZUhyYlVEak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+V+da8sa/FIxq5n4V9zueE6oJz8NEXPUO59Xzzv4RMMzI2DWdhY++
JB7zwsIsV5q6LraxCS7LztKasrOAZK4Gcf39lDJ2b9eRnQ3o/AlUgA8pMD9w1V8c
FR66P3P0WLqtqY+5S8IZ3kTlZNfZlswCw+BTE6knxVX13aT5t011k7apmWirGEaj
pxJ8bTdWd0Qgb9dK2EP02gsnDph+QdqwM5/c1cSQuU7fATf+3wOwEilOXXRpkx8N
1e4uxjAqQ6zEVW6I6SlwegvIPf8Oc7pN4oY8wAHHcSqnProVciyrL0X8eknzPrWg
7oUCDqIwesBtl2q2zjvT7pkqBMj5TyIC
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:43:22 2025 by rpki-client