Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          /Jv3gcLcrFIP9kbRcdVUz32TukroP5b2xTpVCyjDTP8=
Subject key identifier:   25:52:4C:7C:7E:35:FE:3B:45:65:3B:2A:81:B3:0F:54:FF:B6:B7:BA
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       08F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          08EB
Signing time:             Fri 22 Aug 2025 20:30:47 +0000
Manifest this update:     Fri 22 Aug 2025 20:30:47 +0000
Manifest next update:     Fri 29 Aug 2025 20:30:47 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: uuiruSU8Ofqyie3JwXgPNRTUThvtHG9JCuSrOtCA8YM=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: D7lMNLpl3a55d9FcjuAmjfTmqkh4ktfxiUbFr9P5BYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Aug 22 20:30:47 2025 GMT
            Not After : Aug 29 20:30:47 2025 GMT
        Subject: CN=68a8d377-a484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:94:ff:cb:ae:c1:71:59:ad:55:5e:e2:e0:
                    be:e5:53:0a:9a:24:ed:c9:ee:e4:c8:b9:aa:18:dc:
                    a3:e8:4b:dd:cc:14:7e:2a:5b:77:09:0d:22:71:81:
                    f0:40:31:54:6a:1e:10:8d:7f:35:ee:56:65:26:fb:
                    44:2a:0b:c3:ee:6d:f5:a3:e8:52:38:f7:77:a5:5e:
                    bc:af:74:71:e1:4c:99:e5:43:2d:78:63:02:f4:b6:
                    d2:83:ce:fd:1c:47:2d:bc:b1:cc:bc:9f:ad:da:4c:
                    7e:29:b6:23:61:ae:42:82:23:93:47:f0:f6:3e:45:
                    b4:c5:29:e2:9d:45:7a:ec:49:20:d2:51:e6:cc:6b:
                    bb:1a:9c:64:40:7b:00:bf:a4:35:cc:e4:d4:12:17:
                    37:af:7b:88:98:62:4a:d5:a7:79:56:e2:67:2a:b5:
                    40:cb:81:c1:ea:a2:7d:00:48:df:2a:f6:b6:fd:38:
                    b8:7b:35:64:82:68:66:ad:0a:b4:8c:bd:bf:d3:59:
                    ba:e8:c1:bd:51:6e:66:bb:ff:cb:83:a3:c7:08:be:
                    6e:00:85:a9:64:88:de:a3:49:e1:9c:01:ce:1e:06:
                    04:61:63:de:87:e0:c8:df:07:a7:63:4e:33:ac:31:
                    88:db:39:33:e1:59:ce:c7:07:36:8f:dd:b4:73:2d:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:52:4C:7C:7E:35:FE:3B:45:65:3B:2A:81:B3:0F:54:FF:B6:B7:BA
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:2b:c5:28:e0:54:60:ff:89:2a:45:d5:06:6f:50:53:ff:
         0a:68:b9:0b:ec:07:59:8d:65:5c:be:93:cd:7f:de:dc:61:c5:
         8c:90:ac:ee:fd:9a:8e:ec:52:46:3a:d6:8b:68:d5:6b:25:72:
         ec:f2:ed:79:25:5f:bc:6f:3f:bf:2a:40:5b:ab:d0:f5:d1:46:
         bf:ea:ae:3b:06:b1:2c:f5:38:2f:13:6b:a3:0c:df:e3:5a:93:
         04:a9:41:0b:d4:25:b2:ef:78:23:31:a9:b4:17:0a:60:e5:47:
         6d:09:85:cb:3d:c5:74:e3:ba:40:f3:59:f8:a7:49:f8:a4:e4:
         4f:8a:f0:9f:09:60:70:a4:56:33:22:91:77:1b:9a:01:e3:72:
         5b:85:2f:c8:cc:dd:c6:f0:db:9b:d4:23:c0:92:46:dc:09:53:
         64:df:ba:3e:2a:32:e9:61:82:53:fe:25:de:b9:2f:4c:4d:c5:
         b1:fb:5c:da:de:f0:5d:f3:d8:e1:91:30:df:b2:ec:5e:01:23:
         06:88:82:5e:86:09:96:da:45:90:89:55:0d:9c:02:e7:d5:a4:
         0a:31:e9:e7:51:a4:21:f6:24:7f:34:25:a2:2c:92:b7:8a:59:
         e6:09:3a:2d:bc:c2:75:21:24:0e:e3:a6:65:60:52:d2:fe:86:
         d2:16:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:32 2025 by rpki-client