Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
File:                     nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json)
Hash identifier:          gMhays5zaZ/w/wNJHpkRyxgMNOAZLpiSM9ffbX/Blis=
Subject key identifier:   97:9A:32:B7:90:18:4B:95:BA:7A:25:F2:9D:7B:A3:AA:DC:C5:A9:B0
Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29
Certificate issuer:       /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
Certificate serial:       05E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
Manifest number:          05E3
Signing time:             Wed 02 Jul 2025 23:15:15 +0000
Manifest this update:     Wed 02 Jul 2025 23:15:15 +0000
Manifest next update:     Wed 09 Jul 2025 23:15:15 +0000
Files and hashes:         1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: imLbE8Hv05/O2dSPdXjjnV59Z8Cwwqy7blGVC0w5ucs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl
                          rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
        Validity
            Not Before: Jul  2 23:15:15 2025 GMT
            Not After : Jul  9 23:15:15 2025 GMT
        Subject: CN=6865bd83-a8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:f4:d0:5b:62:55:d2:60:cc:64:74:cf:f0:
                    ef:a0:03:98:9d:1a:25:52:6a:7c:bb:b2:7f:0e:c6:
                    45:43:da:a7:8f:75:a1:08:5c:a7:96:d8:58:73:46:
                    3b:41:8b:77:24:0d:e5:3c:88:5d:4e:7d:a6:cf:f2:
                    59:3b:ca:fd:63:db:a8:24:6e:17:f6:01:c2:7b:35:
                    be:54:73:bf:bb:b7:6b:86:be:1e:25:da:d2:5a:26:
                    b4:fc:35:12:32:9c:ba:7d:3f:3a:c0:57:1f:22:1f:
                    16:1a:7c:9b:d8:98:91:e3:da:d2:ad:50:ce:e0:fa:
                    65:ac:80:58:2b:c9:4b:5a:34:db:7a:df:ea:2c:4e:
                    dd:b0:4a:b7:09:f0:42:23:8c:d9:85:f2:a3:29:7b:
                    1d:2a:50:06:55:2b:1f:b4:19:0a:17:f0:b1:9a:85:
                    7d:9c:f2:47:22:fa:f4:83:ba:19:a0:e5:16:5c:53:
                    c9:09:59:c4:20:88:98:75:a4:05:a7:68:2a:6c:46:
                    d5:0f:7f:da:5a:4d:92:55:6a:67:d9:07:02:f1:25:
                    38:ff:dd:e4:d3:b3:fc:bf:65:76:2b:66:d1:7b:01:
                    cf:bf:90:32:9a:24:d7:ce:3e:a5:9d:b5:59:27:99:
                    df:b9:7e:4c:c6:2e:c3:31:06:73:18:fc:1b:2a:9a:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9A:32:B7:90:18:4B:95:BA:7A:25:F2:9D:7B:A3:AA:DC:C5:A9:B0
            X509v3 Authority Key Identifier:
                keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:88:39:a8:63:f2:64:7f:77:34:d8:b6:38:da:4e:db:0f:fe:
         e6:f6:cb:37:2d:81:2a:b7:49:81:cf:be:c5:4f:b3:6a:0a:52:
         43:69:03:53:66:38:06:04:3a:e2:a8:e4:7a:13:ae:57:9b:ef:
         e9:ac:72:f4:9d:b3:f7:10:60:3c:7f:f6:f5:3e:58:6f:ce:da:
         0e:18:9a:ed:83:d8:53:14:9d:fa:90:b9:53:8e:f4:e2:bd:d4:
         bb:e8:6b:04:c5:2d:0e:cb:f3:6f:b1:b3:fd:e9:f6:64:cc:dc:
         ea:4e:15:f5:6c:fc:f7:15:26:61:43:9c:ee:55:8d:b0:1c:59:
         2e:cf:7f:a6:66:c3:1a:18:38:95:2c:99:30:43:31:1e:e9:51:
         22:74:f9:0b:88:de:04:97:aa:0f:c3:f5:ea:7b:47:e7:f0:5f:
         8b:9d:d0:98:b9:cd:26:ba:f2:7d:f6:b6:56:28:6c:8e:b7:58:
         d3:89:9b:92:09:e5:da:65:ca:38:a1:1c:e1:e4:1e:91:8f:da:
         4f:d6:d2:e7:9c:57:d4:61:a2:a3:27:59:07:94:6e:7f:83:5d:
         2e:d0:47:ae:1c:3e:6b:4a:ed:4c:18:0d:a7:9d:7d:9a:a2:19:
         0f:3d:aa:d7:dd:4c:cc:94:d9:f5:24:90:f3:94:06:a7:a3:c8:
         01:ab:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:55 2025 by rpki-client