Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          1ELVyKvt41xxvyPCGO/vG4IBfF4RwYKTlcx1xXjaaYQ=
Subject key identifier:   9F:FB:19:0D:AB:AD:B4:86:C7:C4:6C:1E:73:D7:EC:04:0D:5D:C4:9B
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       19A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          1986
Signing time:             Fri 22 Aug 2025 16:28:51 +0000
Manifest this update:     Fri 22 Aug 2025 16:28:50 +0000
Manifest next update:     Fri 29 Aug 2025 16:28:50 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: Ji6537RQaP63ES1U5qY08f0C+Ema1mW164qHo1S8cCI=)
                          2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: T2O0r+wuciWw//d0/KrKWMrTn116KGwZgOoRv2gqL2o=)
                          3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 4lXZLQbvCWkzoUTRrsi9YqylEuiqjTlRtIjx8J3fHJA=)
                          4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6563 (0x19a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Aug 22 16:28:50 2025 GMT
            Not After : Aug 29 16:28:50 2025 GMT
        Subject: CN=68a89ac2-3a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:b2:d1:bc:6e:ef:44:28:53:96:ae:24:6c:
                    8c:7b:09:26:18:20:31:eb:8d:7a:04:c0:3a:3d:29:
                    df:dc:2e:b6:fd:fc:08:c8:64:fb:28:5d:60:d8:f4:
                    7d:cd:d9:ca:bf:d0:35:ab:e2:96:73:9f:14:73:af:
                    95:e7:ee:c4:d9:bd:43:bd:d8:5e:32:f4:98:5b:9d:
                    a1:d6:e7:9f:45:63:23:48:ef:a6:7a:7b:54:90:f5:
                    1d:57:32:db:2e:6e:5b:97:1c:40:71:c8:5a:f1:11:
                    f6:a8:01:c4:4d:64:5b:96:73:93:ae:52:6d:a1:6e:
                    31:33:d0:80:97:97:8d:45:2d:30:f0:5e:19:ad:28:
                    1f:cd:18:54:de:8f:f3:f0:0e:40:34:07:32:e4:c1:
                    81:53:03:31:a2:64:15:6c:14:a0:aa:be:0f:eb:e5:
                    ec:e5:15:4f:b9:22:ab:db:a8:ba:b1:72:39:d1:68:
                    a4:d8:84:15:5a:98:cc:f7:43:71:3d:7b:cb:1e:3e:
                    03:f5:da:e2:e8:b6:fd:6c:ce:fc:3f:e9:07:fc:36:
                    e1:61:7b:a8:46:e5:f3:8c:67:83:56:b1:3f:71:10:
                    f0:af:ad:de:4f:00:da:45:a1:ef:70:48:bd:ce:22:
                    a0:a3:49:26:6c:ed:87:d6:93:8a:9d:a7:58:62:87:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:19:0D:AB:AD:B4:86:C7:C4:6C:1E:73:D7:EC:04:0D:5D:C4:9B
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:05:85:51:b5:99:69:60:f7:ac:1c:06:aa:b2:6e:fb:cf:
         fb:72:f8:42:1a:d2:0b:fa:ce:b6:ce:7c:75:81:96:45:af:f4:
         4f:5e:e1:81:36:23:0d:8d:ec:f3:83:60:d5:b0:2a:95:e6:17:
         1c:68:fc:d5:53:00:6e:ab:64:0a:ac:e0:d3:6a:08:fb:94:c5:
         92:d8:80:32:ed:3c:be:9a:25:1a:2a:8b:6d:eb:2a:f7:54:8b:
         43:60:c9:84:59:33:f2:ac:6a:a3:4b:fe:9a:ec:ac:44:1c:d1:
         e5:80:19:b4:24:cd:bc:01:c3:24:d7:08:b9:43:2c:6d:5a:c7:
         bf:8d:3b:b0:5b:c9:8e:56:99:d4:a1:65:49:3d:c4:7a:2c:33:
         ea:77:51:44:6a:24:a9:76:37:b8:d4:b5:24:72:90:b2:e8:6c:
         a6:83:44:58:64:78:18:e3:b9:04:dd:aa:bd:1f:e4:ac:b1:9e:
         70:07:49:2e:f9:5d:c5:f7:92:70:88:ed:9b:6a:9a:7e:d3:72:
         5e:db:e4:cd:92:c0:af:c7:88:d2:ed:47:d9:5d:c4:09:a6:d4:
         c5:6d:d7:f9:1d:a3:e2:f8:75:ff:2a:cf:4f:d6:70:9e:c6:82:
         6f:8f:9e:d4:9d:ef:40:a2:da:63:ab:9c:d0:ed:31:db:bb:6c:
         38:a3:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:40 2025 by rpki-client