Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
File:                     nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json)
Hash identifier:          pFRWFO8IfY4G5hLPPgpie2gRYYRv5NZWqFGV1cb3Tzc=
Subject key identifier:   27:FB:50:10:16:93:A9:55:02:62:18:49:04:38:2F:B6:E3:DB:CD:3D
Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
Certificate issuer:       /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
Manifest number:          051A
Signing time:             Fri 22 Aug 2025 23:46:12 +0000
Manifest this update:     Fri 22 Aug 2025 23:46:12 +0000
Manifest next update:     Fri 29 Aug 2025 23:46:12 +0000
Files and hashes:         1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: ncuUwcJ2XeNCSOmGJb9twARWNGTTgcJKWeyQZ0yftkw=)
                          2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
                          rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
        Validity
            Not Before: Aug 22 23:46:12 2025 GMT
            Not After : Aug 29 23:46:12 2025 GMT
        Subject: CN=68a90144-2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:7e:9e:d0:ee:bd:ff:e4:4b:44:68:15:0b:
                    dd:ef:cd:af:a2:b2:79:74:e2:ca:12:3f:5c:a7:b7:
                    96:c5:e6:b5:5a:53:cc:07:5a:a1:41:45:e6:f1:0e:
                    57:78:de:1d:4c:aa:f5:8b:e4:15:ef:f9:1a:be:dc:
                    77:65:a4:23:af:ea:9d:ee:4e:92:f0:89:30:58:93:
                    67:83:5c:e6:fb:28:7c:e0:54:e4:0c:a3:3b:f5:48:
                    20:79:ac:c9:af:78:eb:e8:b4:52:bb:d9:13:9b:76:
                    34:fd:47:8a:52:a4:5d:06:c9:75:ea:d2:07:1a:7d:
                    3b:21:ac:a0:02:09:f6:02:19:11:1c:78:bb:d2:ad:
                    99:fa:73:90:17:1e:b7:8d:59:6c:8d:74:4b:38:67:
                    81:f8:e4:62:b0:de:51:66:22:79:ef:b7:2a:23:d3:
                    77:bf:f3:07:26:8a:18:7e:fa:a7:f8:ad:d3:16:59:
                    1c:56:30:45:da:03:aa:88:10:22:90:06:b2:52:14:
                    cb:57:f5:77:0a:1b:5b:dd:dd:08:af:8f:53:93:37:
                    45:ba:fe:4d:bb:62:6a:ef:25:8e:95:d0:10:82:df:
                    48:d2:ae:1d:4b:cd:f4:5d:cd:43:07:40:4b:56:e1:
                    2b:55:33:b8:dd:ba:00:e4:d1:5d:7c:61:48:1c:74:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:50:10:16:93:A9:55:02:62:18:49:04:38:2F:B6:E3:DB:CD:3D
            X509v3 Authority Key Identifier:
                keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:0c:ad:38:47:07:f6:01:af:76:2a:7d:7f:00:ce:15:81:
         e9:b7:3e:73:07:5e:44:4a:1b:68:9f:a4:7c:e1:41:9c:6b:11:
         ba:ba:7f:f7:7e:fc:80:36:1f:83:3d:29:f0:63:cd:f7:89:d5:
         f7:70:d4:15:7c:72:a4:0c:b0:b0:eb:f7:6e:5e:43:43:2f:a2:
         c6:d3:30:fe:84:c6:2a:65:81:c2:e2:d8:08:ab:f7:50:ae:ca:
         5a:28:03:a4:46:11:8f:07:fc:75:5c:43:64:f1:ce:ad:ca:4d:
         46:e2:28:0f:3e:c2:f4:cf:46:80:d6:79:8e:bc:34:77:cf:49:
         b6:65:2e:e3:7d:cf:e9:7f:b0:33:e4:ac:30:48:d8:9a:af:45:
         3c:e6:25:c6:8a:a1:87:39:a6:e5:7f:14:c1:31:a3:4e:28:39:
         c4:29:74:4d:1c:b6:65:69:23:53:05:4f:d3:33:10:54:9e:d7:
         dd:7f:b6:a7:e4:2d:8c:b6:66:58:7a:d8:78:76:7d:fc:fb:db:
         b3:d3:89:ec:f9:3b:e8:80:6a:3d:f8:60:5f:4d:59:ac:b8:46:
         6f:cc:6f:72:dc:5a:35:63:72:be:39:b0:03:67:03:62:e7:58:
         d0:2e:6d:95:d2:90:ba:ce:8c:a0:c5:cb:66:72:1c:93:2e:77:
         3b:97:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:53 2025 by rpki-client