Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json)
Hash identifier:          stOxcZduxZwXwivkEKjmyp9KxJGCb3Z0/d1ZkJVHuIk=
Subject key identifier:   1F:04:BC:89:D6:BC:AD:2E:35:DB:58:3B:FD:D0:F9:C1:71:47:DE:4D
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
Manifest number:          0119
Signing time:             Sat 23 Aug 2025 05:00:57 +0000
Manifest this update:     Sat 23 Aug 2025 05:00:57 +0000
Manifest next update:     Sat 30 Aug 2025 05:00:57 +0000
Files and hashes:         1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: opbh+rB8Ag1/wFtbfVegXLPsdcORguPLQwfqce6HjIA=)
                          2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: vw+/iUHoOFUwAmpBNT98n/MAMjwloVjL5FS/iwIttZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Aug 23 05:00:57 2025 GMT
            Not After : Aug 30 05:00:57 2025 GMT
        Subject: CN=68a94b09-ad4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:d7:2d:0f:cc:f1:b7:c3:9c:d7:8c:7b:c8:
                    7c:c0:a3:73:a4:ff:eb:49:ff:07:ce:b3:c7:3b:4d:
                    64:58:5d:a5:e5:f8:fe:f9:65:0d:bd:24:2e:1c:18:
                    e8:e9:47:76:ce:ed:9d:b8:80:57:ad:4b:be:97:ea:
                    34:82:8b:f4:53:fd:32:02:01:33:22:9e:d2:b9:09:
                    03:d1:80:eb:8e:bf:1d:7b:88:07:42:d1:1c:0f:70:
                    84:24:e5:e1:44:c1:76:f1:09:a0:17:c5:76:74:03:
                    a1:a1:61:7f:09:d5:fc:53:b5:67:fc:07:f1:75:ae:
                    7e:79:51:72:4a:3f:32:6a:42:7a:ad:14:3d:e4:6e:
                    b6:2e:49:25:6c:11:3d:08:01:42:56:ad:bc:a7:98:
                    05:ba:b8:56:4f:17:b2:76:64:e2:32:6a:5c:da:d2:
                    b4:26:db:23:2a:c4:97:cc:54:41:c7:02:d7:c4:ed:
                    9a:b3:75:ae:e9:18:43:d2:eb:20:8d:2e:e4:16:22:
                    cf:2d:f6:7e:47:64:f0:96:38:98:41:df:79:9b:1b:
                    e0:a8:29:94:88:81:be:3c:18:e8:35:74:bd:85:37:
                    b5:97:0f:1f:49:ae:4d:3d:8b:9b:3b:c7:ee:b3:6c:
                    f2:17:32:37:28:1d:0e:5e:04:2f:72:44:91:72:af:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:BC:89:D6:BC:AD:2E:35:DB:58:3B:FD:D0:F9:C1:71:47:DE:4D
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:66:e1:f3:66:22:1c:6f:9c:df:52:80:e1:e7:54:39:11:9f:
         a2:33:7d:e8:07:ee:92:27:67:4f:3b:3d:00:51:77:0b:1c:5f:
         01:81:02:59:30:b0:83:f8:7f:c8:a2:23:18:68:7c:62:e7:bd:
         71:cd:53:03:b1:13:c5:2a:41:fa:9d:b7:b6:69:06:2c:6e:50:
         dc:45:21:45:42:5a:bd:62:24:ae:33:b5:1d:ac:c4:f8:f0:ee:
         5a:a7:3e:26:02:91:41:03:f1:1c:3d:32:d6:2d:ba:ff:b6:dc:
         79:0a:e9:22:f8:fa:bf:45:ab:36:99:c5:d4:9b:d3:7b:0a:1f:
         77:7f:64:4e:ba:7b:bd:34:35:e9:a1:92:24:c2:e0:98:f0:69:
         4a:27:5b:e9:35:13:ee:88:ea:a3:ef:16:6c:28:45:f6:d0:08:
         6e:be:70:22:ed:77:c2:d3:9f:92:f8:cd:cf:53:e9:fd:2a:8c:
         94:ec:72:c3:ba:1a:7f:4a:2b:6b:5a:54:00:a7:c2:e2:b0:17:
         3c:01:98:d3:2d:2d:3a:26:cc:26:6a:73:fa:49:47:88:6e:93:
         fe:2d:5c:f6:b3:1b:39:73:3e:5e:be:5b:78:c2:69:65:bc:82:
         fa:5a:d4:7f:79:79:8c:72:90:47:92:00:0f:cb:ed:26:78:9c:
         cc:50:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:52 2025 by rpki-client